Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa
File:                     d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa (raw, json)
Hash identifier:          zsB6JTzO1lNwuTwP9qsrB0Y4vzwW8TeZctEF71LPSYY=
Subject key identifier:   54:5E:C7:BF:F0:8C:B4:24:BA:67:1A:D5:3F:B5:03:8B:0E:FE:D2:55
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584CAE572F3790E2FF1C81F05C00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     3356
IP address blocks:        20.132.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:2f:37:90:e2:ff:1c:81:f0:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=44184adb-be97-4e61-9b51-66f4d18aed91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:4e:19:16:52:39:da:eb:70:1d:48:b0:6d:
                    c9:71:2a:70:05:69:d6:7c:10:50:08:73:d6:e8:f3:
                    3c:0b:22:83:d8:ad:40:ab:6c:53:8d:94:2b:d1:6b:
                    a0:c0:ab:13:6b:54:28:6a:9f:da:7d:f2:c2:a0:9b:
                    b4:a9:e3:2f:ed:d3:cb:e0:0a:2c:11:c8:75:b5:78:
                    aa:ff:91:f2:41:9c:1a:53:12:87:7d:9e:93:0a:bf:
                    f3:09:21:0e:d4:e4:d3:a0:c8:ea:b9:c9:47:55:ac:
                    40:34:67:cd:9a:c9:cc:82:7b:b9:81:27:99:d5:5d:
                    cf:64:cc:f2:79:a7:4b:6e:64:5c:f9:bc:ea:3b:e4:
                    4d:5f:24:65:42:49:1b:57:39:a3:2d:89:c1:5d:04:
                    5e:82:6e:f0:6f:a9:a6:98:41:4d:22:d2:ab:64:10:
                    54:32:96:19:56:ea:22:fb:ca:7d:7d:1a:94:72:c0:
                    84:ce:24:3d:0e:20:63:2a:74:e2:1e:61:14:da:ba:
                    26:dd:9d:46:d2:93:0d:19:93:20:8a:fb:7a:2c:7d:
                    76:4d:fb:c5:fc:a1:cd:70:8b:04:46:de:3f:e3:e0:
                    e9:5d:32:04:fe:a7:8d:ef:b8:97:d9:4d:40:db:10:
                    15:bd:a5:60:76:9b:51:03:b0:80:f9:f7:9a:36:b0:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5E:C7:BF:F0:8C:B4:24:BA:67:1A:D5:3F:B5:03:8B:0E:FE:D2:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.132.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:a5:9a:28:40:19:a0:6b:62:93:12:06:38:89:78:e0:bb:
         7f:0d:f2:f5:a3:ba:5d:a6:01:8a:bd:c3:3a:63:a1:10:1a:3b:
         d2:66:72:fb:13:68:fd:9f:72:a6:8f:f6:88:34:0f:6d:4c:4a:
         e9:18:9e:6d:1b:c7:12:28:dd:c4:a4:5d:be:45:81:d1:91:a8:
         c8:a9:9b:8f:c2:53:0c:01:b3:b6:f4:d8:5b:71:36:b2:a6:fd:
         cd:fb:52:5d:f6:7c:14:4d:ac:88:70:ed:a9:00:32:22:10:91:
         09:28:10:38:10:73:c8:aa:7c:0e:cb:48:65:5a:6f:29:08:dc:
         d4:21:5e:f5:7b:2c:5b:46:9a:fc:50:a4:50:ad:14:66:d1:a5:
         3c:69:e2:59:ef:91:65:3b:52:eb:a3:d9:b2:77:11:fe:8f:6f:
         a6:76:3c:12:50:ff:7e:72:16:84:56:d9:08:ae:0e:33:c0:37:
         14:55:d1:03:91:50:82:0d:98:56:da:c9:89:3d:97:38:fe:d7:
         86:ff:5d:cd:42:b9:a2:40:bd:32:10:b5:30:96:34:30:75:ac:
         b3:38:74:a6:18:28:58:fb:6b:8e:e0:40:11:7f:d6:c9:f8:88:
         35:b7:db:fd:83:06:8a:c6:f6:a0:74:82:f6:51:bc:2e:62:d8:
         58:d2:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 22:56:10 2026 by rpki-client