Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa
File:                     55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa (raw, json)
Hash identifier:          WNPhXDpwS3YD1/6SdOAMOgFKcJEZ4VWqtkxI3F9jg3U=
Subject key identifier:   92:A2:05:6E:32:0D:59:97:B8:8E:C1:8E:D7:2E:C0:80:FA:7A:BC:10
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584EAFE6F21E7D38207DF4F147C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     3356
IP address blocks:        20.133.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f2:1e:7d:38:20:7d:f4:f1:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=9763f3ee-3a88-455c-a00e-a8665b54d1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:4f:83:be:8e:40:9a:04:8c:05:32:cc:01:
                    7a:59:f1:40:3b:25:da:73:e2:e7:21:b8:63:4a:2c:
                    b4:40:2b:b7:b7:98:f0:2f:9f:28:65:3b:88:b6:17:
                    60:27:9b:ee:cb:0d:ba:ba:a9:a1:d9:fb:fb:b8:01:
                    74:1a:86:f8:32:99:5b:ba:d4:48:08:fc:61:a9:49:
                    2a:cc:0a:d4:79:2e:47:41:12:e3:14:ee:1a:98:fc:
                    1b:7a:9f:e6:7a:98:18:b6:f7:0a:0e:32:16:4e:63:
                    c7:2e:db:a1:c7:df:ab:0d:25:90:41:6a:41:c8:88:
                    97:29:6f:af:bc:73:a6:8a:85:d4:a0:4f:08:a8:ae:
                    90:7b:74:53:b1:ac:64:53:1a:9f:b2:fc:25:dd:a0:
                    27:ea:51:a5:17:aa:54:f9:b0:24:d6:14:03:b8:e2:
                    15:64:11:b1:70:12:a7:eb:c8:fd:1b:8f:f2:3d:3c:
                    60:86:e2:bb:f6:7d:a8:09:d7:6d:c5:a5:10:b1:1c:
                    01:56:c8:fb:f6:a0:bd:7c:b8:8c:f0:c3:7e:d6:b5:
                    9e:29:36:1a:a5:a6:3f:13:a2:69:4b:af:54:50:9c:
                    0d:af:b9:13:43:b1:cf:d6:5b:4b:fc:14:d5:98:da:
                    1c:f2:04:2b:5c:8e:fa:44:aa:6b:5f:68:32:54:a2:
                    af:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A2:05:6E:32:0D:59:97:B8:8E:C1:8E:D7:2E:C0:80:FA:7A:BC:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55b2bc86-f62b-3040-8b74-1f9fa8878ce6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.133.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f6:b1:5e:11:4a:be:3f:6b:db:db:2b:8f:ce:f4:93:b1:90:
         b8:12:a4:b7:95:a9:a5:45:7c:80:e7:62:18:41:a7:8b:5d:d8:
         5e:93:0c:76:b7:f2:66:c5:d7:17:17:06:d2:dd:f3:ff:2c:b7:
         a4:4b:0f:64:60:0d:6c:fe:af:3c:19:00:9e:20:e3:24:40:93:
         08:e8:01:1c:0d:00:5c:86:80:b0:dc:32:06:fa:f1:b0:57:1d:
         15:8a:bc:0a:a9:dc:5e:3d:2c:79:6b:b0:f0:59:fc:88:44:3f:
         13:12:2e:cb:b2:ff:ff:23:c1:60:76:d0:4e:4e:da:ef:a4:96:
         8b:a8:ce:3a:e5:10:4b:25:ea:fe:3a:b2:be:d3:0f:84:57:13:
         7a:cd:3f:30:37:20:04:d9:e0:ca:45:1d:9c:f1:13:0b:b2:ea:
         25:9d:a9:ac:99:49:8b:a3:3f:3b:cf:ed:5b:78:c2:2b:a4:26:
         12:ce:dd:c4:55:9c:b9:f0:61:5b:ce:17:27:1b:f1:92:a8:72:
         07:d6:69:b2:a0:d8:c7:d7:17:1f:56:5c:b5:aa:c3:8c:f6:b8:
         bf:4d:1c:9c:a4:93:2e:84:28:eb:19:a3:33:26:76:a2:54:f7:
         cd:3a:b2:62:c9:f4:07:28:64:b4:da:f4:de:43:10:e7:16:9f:
         43:fd:1d:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vIefTggffTxR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
OTc2M2YzZWUtM2E4OC00NTVjLWEwMGUtYTg2NjViNTRkMWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTBPg76OQJoEjAUyzAF6WfFAOyXac+LnIbhj
Siy0QCu3t5jwL58oZTuIthdgJ5vuyw26uqmh2fv7uAF0Gob4MplbutRICPxhqUkq
zArUeS5HQRLjFO4amPwbep/mepgYtvcKDjIWTmPHLtuhx9+rDSWQQWpByIiXKW+v
vHOmioXUoE8IqK6Qe3RTsaxkUxqfsvwl3aAn6lGlF6pU+bAk1hQDuOIVZBGxcBKn
68j9G4/yPTxghuK79n2oCddtxaUQsRwBVsj79qC9fLiM8MN+1rWeKTYapaY/E6Jp
S69UUJwNr7kTQ7HP1ltL/BTVmNoc8gQrXI76RKprX2gyVKKvRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKiBW4yDVmXuI7BjtcuwID6erwQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTViMmJjODYtZjYyYi0z
MDQwLThiNzQtMWY5ZmE4ODc4Y2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHH2sV4RSr4/a9vbK4/O9JOxkLgSpLeVqaVFfIDnYhhBp4td2F6TDHa3
8mbF1xcXBtLd8/8st6RLD2RgDWz+rzwZAJ4g4yRAkwjoARwNAFyGgLDcMgb68bBX
HRWKvAqp3F49LHlrsPBZ/IhEPxMSLsuy//8jwWB20E5O2u+klouozjrlEEsl6v46
sr7TD4RXE3rNPzA3IATZ4MpFHZzxEwuy6iWdqayZSYujPzvP7Vt4wiukJhLO3cRV
nLnwYVvOFycb8ZKocgfWabKg2MfXFx9WXLWqw4z2uL9NHJykky6EKOsZozMmdqJU
9806smLJ9AcoZLTa9N5DEOcWn0P9HVg=
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:38 2026 by rpki-client