Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b450991-fe79-301e-aa84-d70f6fad1d98.roa
File:                     8b450991-fe79-301e-aa84-d70f6fad1d98.roa (raw, json)
Hash identifier:          G/22JkpD7OxIORTDI+lzNMlzFarr3qa6XcfMlev5cvo=
Subject key identifier:   72:D3:ED:DE:64:F9:25:56:73:93:17:C9:F5:FF:29:EF:98:47:76:65
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584DF4DB607FD7B0A56E18BB3C70
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b450991-fe79-301e-aa84-d70f6fad1d98.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     202
IP address blocks:        20.155.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:60:7f:d7:b0:a5:6e:18:bb:3c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=7c08a046-0ab5-41c5-9dcd-c78be3777486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:44:7a:a6:c9:c4:7f:41:50:57:ec:e4:4b:
                    2f:1e:33:3a:d0:f8:49:7c:04:43:86:49:72:fd:ad:
                    5c:74:a3:2d:69:05:e8:51:75:7d:ff:fd:6a:c5:30:
                    5f:28:a6:e3:25:03:3d:c3:15:3a:2e:bd:88:59:63:
                    a3:68:ca:b5:1b:28:73:a8:9d:a0:58:34:a4:27:c7:
                    15:e8:41:f7:1c:b9:51:bd:cd:aa:b9:2c:83:27:ad:
                    de:64:3f:7b:31:75:ed:00:9f:3c:9c:2b:09:03:96:
                    3c:00:83:43:84:2d:0c:75:e0:9b:90:f5:75:ca:e9:
                    10:82:9b:81:97:68:26:79:19:b5:61:2f:49:54:2f:
                    c8:e6:22:9d:f2:f9:3b:5e:3c:c1:a7:7c:fd:25:7f:
                    ad:9a:41:0c:26:0f:92:16:09:f5:8f:07:c9:28:2b:
                    e0:fa:9b:41:f4:fe:09:49:26:f7:d0:b4:c6:14:96:
                    2e:43:85:ce:77:82:ad:a5:cb:79:31:00:ab:97:52:
                    76:55:96:43:fa:12:e5:9b:63:55:ba:ac:c7:c9:c0:
                    2c:de:04:08:11:85:85:d9:0c:5e:ba:e4:97:7d:d4:
                    09:b0:c3:5b:9f:2f:14:9d:11:9c:bc:ac:50:a1:98:
                    21:8b:d1:ae:3c:d3:0f:6e:fe:4c:5d:4c:e8:f8:2a:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D3:ED:DE:64:F9:25:56:73:93:17:C9:F5:FF:29:EF:98:47:76:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b450991-fe79-301e-aa84-d70f6fad1d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.155.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:12:65:f9:fc:f2:fd:17:1d:db:5d:2c:1b:42:bd:1a:f2:72:
         f0:74:1a:d2:95:fa:04:62:d1:4c:4f:3b:a5:35:0c:1d:d7:cc:
         f0:26:dc:61:6a:fd:9c:16:32:40:e3:e1:4f:8f:6c:ff:d4:ad:
         e5:6a:0e:f1:52:b3:5a:a9:dd:0d:0a:3b:5f:3d:fb:25:9a:fa:
         d5:34:50:2d:fb:8d:f1:99:73:50:9d:83:fa:5f:fe:ee:a5:fb:
         16:bd:de:6d:af:92:9c:d4:2f:78:7b:50:20:aa:a0:91:e0:87:
         d7:43:4d:29:39:e0:75:2f:0d:a1:f6:98:ce:67:db:ec:d2:78:
         1a:ef:6b:33:f5:9e:7e:d0:8c:dc:4b:81:de:81:62:c5:70:04:
         34:7a:e9:b0:d5:91:f7:56:34:28:55:b6:4d:5c:87:37:f9:0e:
         0e:0e:11:1f:be:51:03:45:c3:1f:f3:9d:ea:11:4e:3e:57:2d:
         f5:27:37:b9:0f:6c:58:27:21:ad:81:2b:b2:66:8d:4d:24:83:
         37:f5:ca:e2:4b:d9:5e:40:f8:ef:2f:56:6d:a5:8e:4e:22:a9:
         2d:14:9c:21:3d:c2:1a:05:34:5a:9c:e5:78:c4:05:98:bd:3d:
         f2:e4:6d:bb:a9:1d:4e:82:b2:05:dc:b2:c7:ff:83:f3:d7:58:
         e6:c1:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 14:14:46 2026 by rpki-client