Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa
File:                     480a876e-f9de-3a86-b420-40e0c9062435.roa (raw, json)
Hash identifier:          BIYxtFTQRu6c8H59yN/vtMOaQaOlUN2TWQt4L1KRgug=
Subject key identifier:   50:64:C8:A8:A4:CF:F4:F3:47:8F:BA:78:71:F6:80:99:FC:9D:D7:D0
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584EDC9202558807E33F57F30500
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     203
IP address blocks:        20.134.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:02:55:88:07:e3:3f:57:f3:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=df948c90-6e0e-4439-ae13-5c19b4406f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:59:50:07:7d:f6:07:75:95:ec:4e:bf:c3:
                    77:1c:31:78:3b:bc:14:7a:83:2f:37:13:77:26:94:
                    b4:61:28:10:e3:de:8d:ac:10:40:84:2c:6d:b0:c9:
                    1c:83:51:83:9c:c1:5b:15:c1:bf:80:67:eb:9f:b9:
                    3b:c4:96:bd:bb:0b:f7:6c:bb:83:f2:fa:87:cb:85:
                    ee:11:16:3e:e0:4a:3b:cd:77:4d:d9:cd:80:35:97:
                    b5:ea:a1:d1:1c:90:4f:20:68:f2:a0:c2:a0:b0:c2:
                    39:f8:5d:69:f8:cb:b3:ae:fe:91:1f:e2:4c:2e:17:
                    a6:d9:e2:47:62:bb:c1:bf:d6:7e:10:5b:4e:06:1d:
                    94:93:db:20:ea:ae:36:5b:ba:6b:1f:c1:94:6b:6f:
                    cb:7e:57:f7:c8:42:28:0e:7b:b5:75:0b:fb:80:73:
                    6b:fd:38:91:09:44:c2:12:9c:69:28:6d:8c:f0:8a:
                    7f:40:21:d2:db:17:35:51:56:04:0b:07:44:23:21:
                    6e:80:1a:7d:8b:d1:84:85:5e:b6:12:d8:8b:89:90:
                    b1:29:41:9d:62:6e:3b:cf:0e:d9:9a:84:84:0d:bf:
                    e5:4b:89:d5:2f:e9:e4:0d:02:88:e8:03:96:db:da:
                    24:03:f3:3b:95:15:cb:9a:24:83:91:06:d7:f6:fa:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:64:C8:A8:A4:CF:F4:F3:47:8F:BA:78:71:F6:80:99:FC:9D:D7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:70:0b:f0:6a:03:cc:6f:89:50:9e:8d:37:7f:ea:78:5a:d6:
         4d:9c:9c:b9:85:a6:70:86:07:09:bd:bc:cb:82:0d:c7:23:56:
         b9:4d:1b:a8:3e:5b:9c:4c:2b:87:ff:06:1b:8b:f9:3f:81:c4:
         63:7a:68:89:79:68:5f:ba:74:d1:3f:7b:bb:01:9b:52:c7:0a:
         41:5d:1f:04:a3:9c:14:b9:a9:72:ce:d8:ab:22:f5:85:e3:ea:
         2f:f7:e2:65:85:ec:e8:dc:10:29:f2:27:06:fe:e6:04:01:75:
         9e:6c:ba:93:fc:4f:2e:ba:2c:69:4d:1b:98:50:53:ca:d3:3a:
         02:29:00:95:42:e7:ea:86:b6:54:28:a5:96:c9:1f:66:f3:5a:
         3e:7c:9b:82:02:c6:87:1d:76:6a:84:ce:2f:49:5c:e1:3f:8f:
         d8:5d:b3:f0:4f:77:05:5d:a9:22:82:6e:ff:e3:b3:b8:64:5c:
         4e:10:59:f5:ac:0d:e5:fd:53:9c:a5:9f:e5:54:2a:80:cf:b5:
         77:ee:90:27:b4:f8:cc:51:6b:0f:df:65:42:ea:68:97:80:5d:
         15:d3:46:27:5f:92:5b:4a:6f:71:d5:8f:98:b0:6f:54:f7:79:
         ec:83:ba:96:9f:37:85:ac:b5:0a:5f:4c:fb:2d:56:00:14:f9:
         51:aa:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:52:38 2026 by rpki-client