Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa
File:                     36004745-694e-3446-88c5-0d0217e06d6f.roa (raw, json)
Hash identifier:          YMKkmSvlWaylzRXdfhq11SoDjshpdE71qtXaRQduhtI=
Subject key identifier:   78:11:27:86:A2:25:E0:8A:CE:E1:2D:56:BC:12:ED:F5:C8:87:D1:D1
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584F119D0DC15A708C15CE664300
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        20.148.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:0d:c1:5a:70:8c:15:ce:66:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=c55d33dc-9db2-4781-967e-796e11b8e657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:21:b3:6d:02:7b:e7:34:70:d7:5e:8f:75:
                    02:34:55:88:a9:37:a6:66:de:f2:e6:e9:ae:71:24:
                    06:42:0b:e3:5c:14:ca:90:62:07:10:0b:4a:04:e2:
                    47:be:71:8e:c3:94:6f:e5:71:10:39:22:80:54:97:
                    94:19:d5:e3:3a:47:65:d2:a9:04:3f:d3:08:d2:03:
                    b8:c1:b6:f1:f9:ef:bc:6e:2d:2e:d5:26:77:7d:a1:
                    ca:cb:b3:6b:55:87:8a:1d:cd:fc:93:fa:a3:d6:83:
                    05:68:af:ae:37:f2:7d:a8:88:fc:f9:e2:24:57:3f:
                    ac:7a:c9:5f:8a:9c:62:be:f4:eb:b7:cf:7f:9f:c9:
                    90:6c:1e:9f:1e:44:3a:f0:ad:09:54:73:ce:83:5f:
                    9a:18:4b:f6:50:84:3b:cb:1b:b2:9c:d5:a6:ab:ec:
                    ab:03:b7:58:0b:40:70:5f:f0:0c:73:a9:12:8b:de:
                    34:4c:4e:96:7a:72:47:26:e3:ab:b1:22:b5:79:81:
                    7e:79:d8:2a:28:20:f4:fb:e8:42:fb:1e:f1:6d:9c:
                    f7:84:1b:3e:16:a4:d5:16:36:ad:2c:b8:b5:be:34:
                    c4:4a:c4:8c:a8:a5:7b:33:5e:ab:58:cd:45:46:71:
                    86:2c:7e:16:33:8d:78:ad:6e:50:ea:47:aa:36:14:
                    9a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:11:27:86:A2:25:E0:8A:CE:E1:2D:56:BC:12:ED:F5:C8:87:D1:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/36004745-694e-3446-88c5-0d0217e06d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.148.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:3c:79:53:5f:eb:5e:11:b4:b8:dc:46:ee:82:5c:a7:0a:
         76:57:73:f0:f8:ae:52:fd:c5:47:7a:a3:5c:52:03:c0:86:38:
         ed:e9:1d:0f:12:99:db:23:eb:ca:37:08:fc:a2:83:db:82:54:
         aa:38:b5:e3:10:8e:47:e9:3d:06:97:4e:6f:f8:14:f8:c8:50:
         c4:f4:47:f6:e2:a1:f3:f9:0a:0f:a6:ac:45:22:6e:71:32:56:
         de:1b:58:fd:97:d5:3b:c5:66:01:37:82:e9:15:8f:74:eb:45:
         46:c9:1e:2f:00:c0:1c:94:e6:d9:2b:eb:2c:60:05:c7:57:33:
         e4:4a:71:85:29:b7:0c:15:dd:52:99:5e:de:7e:46:36:6c:68:
         23:f9:9b:5d:4d:78:4c:23:c4:f6:6a:ad:aa:b1:04:74:77:15:
         f8:89:db:8a:c0:a3:ff:8a:02:e2:ed:54:81:df:82:64:7c:2f:
         46:26:b7:e9:bb:2b:01:72:17:93:83:18:29:fe:c0:27:96:1f:
         90:64:84:9e:d9:fa:be:86:c4:82:20:71:77:99:83:1d:0c:77:
         68:6a:0c:5c:76:b2:e8:cb:6e:fa:e9:e7:c8:9a:a2:ef:69:3e:
         87:6c:db:66:2b:53:73:2b:2d:08:5a:21:9d:95:72:45:ed:be:
         12:7d:51:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:09:49 2026 by rpki-client