Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e69cddc1-060e-3cc3-a5c9-7014ad11129a.roa
File:                     e69cddc1-060e-3cc3-a5c9-7014ad11129a.roa (raw, json)
Hash identifier:          tUAt+D5CSQwlnH+5d9KQ70HiAHbpUd2OIRe6m/McVVY=
Subject key identifier:   5A:76:C1:B2:A4:34:E4:49:82:63:34:82:1E:71:3B:9F:9E:D1:48:31
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584EDC92026169FD8740B9CDC070
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e69cddc1-060e-3cc3-a5c9-7014ad11129a.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     202
IP address blocks:        20.134.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:02:61:69:fd:87:40:b9:cd:c0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=643eece2-2dc3-4453-b428-3c38bfc2767c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:67:7a:22:de:80:e7:39:96:f8:bb:da:e4:
                    36:a9:54:dd:ba:0d:e4:08:ae:21:53:6f:4c:f9:46:
                    88:3b:c6:4b:77:d8:ab:f5:47:e6:a3:c2:32:e5:67:
                    ea:a2:c6:47:b7:84:b1:0d:6b:ac:0c:34:6a:dc:00:
                    10:f2:64:8c:15:23:4f:01:68:96:78:1a:fb:56:bf:
                    77:57:8f:12:c9:c6:18:c5:a7:7e:d2:32:24:49:7d:
                    ff:b6:14:7f:0b:f7:ec:5d:d5:0c:2b:e9:99:57:99:
                    d0:8e:07:8b:48:19:e2:a9:85:4a:b3:88:dd:f4:13:
                    f7:e6:1e:d2:1e:2e:df:ef:80:c1:39:b8:79:9d:0b:
                    98:42:0b:ff:db:b7:d8:4e:cb:a0:cd:62:4e:73:4a:
                    c2:57:39:ac:61:f1:94:78:c3:14:60:13:57:53:c1:
                    81:6d:8d:33:b4:22:5a:56:c0:29:c7:9b:43:72:6d:
                    a8:bb:58:b0:4b:12:b8:36:75:5d:d6:3e:02:56:b3:
                    e7:7e:e8:ad:91:2b:17:ef:82:29:69:3f:6a:c5:db:
                    2e:63:07:6f:6c:52:2d:53:8c:30:53:7c:06:0a:d7:
                    81:64:22:2b:12:c4:e3:f2:73:e2:7d:82:93:7f:30:
                    74:2d:8d:fe:22:5e:2a:40:c0:dd:ad:55:fe:f9:d0:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:76:C1:B2:A4:34:E4:49:82:63:34:82:1E:71:3B:9F:9E:D1:48:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e69cddc1-060e-3cc3-a5c9-7014ad11129a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a4:7b:82:bb:3e:91:7a:9e:3e:9e:70:31:8d:6b:cc:70:9b:
         ac:90:4d:78:d7:8d:c7:2e:7e:92:6e:74:19:bd:f9:72:5f:e7:
         2d:5d:7b:23:5a:41:72:c2:61:38:39:9a:36:bf:d2:9b:4b:23:
         7e:55:96:81:86:da:5e:ca:ec:47:f4:1e:7c:9f:28:bf:c9:fc:
         b5:67:2d:88:3f:05:9a:6f:18:f3:fc:37:ae:47:1f:71:6f:b2:
         a2:a9:27:c7:ac:f7:c4:be:eb:58:28:c4:4b:d4:75:c6:e1:e6:
         e1:d8:4a:48:54:c5:a0:63:b9:28:c4:c9:0b:25:25:fa:55:2a:
         ec:e9:e1:69:8f:ae:27:00:5f:ee:fb:54:8e:7f:6a:14:c6:a4:
         20:59:f2:31:f5:f8:96:7f:b0:22:a8:9a:4c:b4:cc:b8:5e:7b:
         0c:aa:6e:46:18:f0:fd:4e:05:f7:cb:94:c2:20:5b:e1:7c:7a:
         b1:cd:55:bf:62:a7:97:bb:bf:b4:67:da:78:04:15:f9:0f:2c:
         00:87:1d:a2:ac:cd:9a:45:57:d5:e5:76:96:e3:af:8c:a2:64:
         2b:fa:c0:0b:8c:70:e5:7d:9c:c4:ed:5c:eb:b4:38:de:db:06:
         3b:bb:ba:41:7b:d5:8c:a5:7a:12:77:39:97:52:d9:b4:75:d1:
         7a:a9:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:43:19 2026 by rpki-client