Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7a103545-6613-3147-9308-1839fdacc155.roa
File:                     7a103545-6613-3147-9308-1839fdacc155.roa (raw, json)
Hash identifier:          t9T7mvpLuh30Nd3jkxa5ALo/wwNKrWv+D7Ee6Wx+o/8=
Subject key identifier:   C5:F3:45:50:0E:A4:C5:11:42:00:16:51:C9:FD:77:2D:4F:F8:81:C7
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584F5E62BB013543A8BD8F61BE80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7a103545-6613-3147-9308-1839fdacc155.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     3360
IP address blocks:        20.133.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:bb:01:35:43:a8:bd:8f:61:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=f18e006e-c526-4526-8ef6-9f150f0d44b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:13:4b:63:2f:05:bc:fe:7a:83:9b:e8:35:
                    d8:af:f5:ce:a7:8c:4d:88:d8:9e:3c:b8:be:d9:bd:
                    df:fd:8d:c4:56:7e:e8:69:b2:fa:ec:0b:49:0e:86:
                    4a:c7:58:92:d8:d4:36:51:89:d5:29:f5:b2:f9:3c:
                    2e:d7:ea:ca:7d:61:df:1b:fc:76:fb:6e:d6:58:72:
                    c2:42:26:b5:15:44:67:ec:cf:e0:57:be:90:fc:03:
                    2f:7f:10:72:81:f8:c5:ad:e1:a2:f7:92:c7:bf:13:
                    21:a3:ea:2f:86:03:c0:9b:61:c1:c6:cf:6d:c7:9a:
                    d0:93:b3:8c:2d:c4:1b:00:e8:a0:89:95:c5:69:90:
                    6f:aa:2d:d8:f7:4e:8f:38:63:be:c3:ae:02:5f:da:
                    61:11:95:6b:3e:19:a7:c1:08:f7:83:73:04:4f:31:
                    7a:9b:ba:89:de:9a:80:2a:9c:c9:63:46:11:20:1e:
                    b1:f1:5c:8f:bf:2a:25:fa:86:af:49:e0:2b:ff:27:
                    f4:b3:2f:52:30:fc:57:f4:dd:08:ae:54:09:fd:27:
                    0e:b7:fc:ba:be:61:33:3a:ae:c2:40:db:0d:ab:d8:
                    21:c7:fe:fe:d5:73:3b:30:bd:06:25:45:d0:34:49:
                    c3:1e:b3:23:32:3c:59:9d:e0:89:7a:31:e2:9f:93:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:45:50:0E:A4:C5:11:42:00:16:51:C9:FD:77:2D:4F:F8:81:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7a103545-6613-3147-9308-1839fdacc155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.133.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:73:49:37:d5:d3:2d:0d:70:26:81:6a:30:1e:5d:11:e1:45:
         07:6e:a1:43:fb:15:19:15:f8:bf:65:aa:ca:a2:bb:10:42:07:
         59:52:98:20:e1:d0:7c:eb:43:75:65:13:32:b9:db:55:47:1d:
         67:43:d5:b7:ae:a7:2c:6f:1f:d5:82:b8:0d:14:ae:a6:50:f5:
         c8:0f:0a:68:ca:26:d2:0a:b2:bf:c6:5e:4a:b1:04:6c:95:2f:
         ff:a7:9e:e2:4a:0f:39:21:30:75:22:9b:7d:49:a5:98:7d:d8:
         36:c0:81:db:b5:92:ca:4c:ca:0c:38:a9:fb:26:03:cf:79:bc:
         5e:47:37:fd:22:50:33:a9:e9:23:06:1e:00:bd:8e:05:72:8e:
         2f:9d:39:bd:c8:2e:9e:bb:f4:f5:19:5f:7f:f4:8f:4e:7e:a0:
         c3:33:70:fb:20:91:03:b2:39:bb:13:f9:e3:96:c6:2e:b5:03:
         21:3b:dc:49:c7:a1:45:99:b5:d2:a8:f4:4a:13:1b:e7:46:e5:
         3a:ef:5c:7c:eb:2b:07:d7:b3:a1:a0:c4:0f:0e:21:fa:29:7d:
         59:aa:dc:b8:96:59:57:4f:dc:ea:be:62:7a:52:b3:78:9a:5f:
         51:62:f0:b2:2f:a9:b8:0d:c5:86:f9:a4:f5:94:8a:7f:8a:90:
         62:e8:43:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYrsBNUOovY9hvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
ZjE4ZTAwNmUtYzUyNi00NTI2LThlZjYtOWYxNTBmMGQ0NGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw8TS2MvBbz+eoOb6DXYr/XOp4xNiNiePLi+
2b3f/Y3EVn7oabL67AtJDoZKx1iS2NQ2UYnVKfWy+Twu1+rKfWHfG/x2+27WWHLC
Qia1FURn7M/gV76Q/AMvfxBygfjFreGi95LHvxMho+ovhgPAm2HBxs9tx5rQk7OM
LcQbAOigiZXFaZBvqi3Y906POGO+w64CX9phEZVrPhmnwQj3g3METzF6m7qJ3pqA
KpzJY0YRIB6x8VyPvyol+oavSeAr/yf0sy9SMPxX9N0IrlQJ/ScOt/y6vmEzOq7C
QNsNq9ghx/7+1XM7ML0GJUXQNEnDHrMjMjxZneCJejHin5PILQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXzRVAOpMURQgAWUcn9dy1P+IHHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2ExMDM1NDUtNjYxMy0z
MTQ3LTkzMDgtMTgzOWZkYWNjMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtzSTfV0y0NcCaBajAeXRHhRQduoUP7FRkV+L9lqsqiuxBCB1lSmCDh
0HzrQ3VlEzK521VHHWdD1beupyxvH9WCuA0UrqZQ9cgPCmjKJtIKsr/GXkqxBGyV
L/+nnuJKDzkhMHUim31JpZh92DbAgdu1kspMygw4qfsmA895vF5HN/0iUDOp6SMG
HgC9jgVyji+dOb3ILp679PUZX3/0j05+oMMzcPsgkQOyObsT+eOWxi61AyE73EnH
oUWZtdKo9EoTG+dG5TrvXHzrKwfXs6GgxA8OIfopfVmq3LiWWVdP3Oq+YnpSs3ia
X1Fi8LIvqbgNxYb5pPWUin+KkGLoQ6s=
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:25:39 2026 by rpki-client