Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa
File:                     f8da539f-a988-3038-8316-0c63126db070.roa (raw, json)
Hash identifier:          F+XVTrHUfAOwCguKj6Un5VzqsoUmKLHwQmUjPz6EwCU=
Subject key identifier:   88:93:AA:9F:5F:EF:72:30:FF:19:92:A5:35:88:A7:5A:3D:AD:C6:95
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584E18AEE360DF07D2E9EEB8A740
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     203
IP address blocks:        20.138.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e3:60:df:07:d2:e9:ee:b8:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=31c04339-4f2d-4532-a5f5-fb50610c12f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:f5:f5:27:5d:5d:50:8f:b8:48:a3:20:c4:
                    7f:04:1c:fd:98:62:5e:51:df:a6:8a:be:ee:18:4f:
                    2b:34:82:fd:f0:58:01:eb:74:35:14:5b:64:16:8f:
                    7d:27:a9:44:28:17:f9:a2:ad:c7:8e:d7:99:2b:91:
                    04:03:e8:48:84:9e:86:34:89:3c:f9:a0:96:02:9f:
                    ca:47:51:ac:6d:b3:7d:e5:07:df:33:0e:be:ed:17:
                    74:d9:98:2b:dd:01:c9:3a:12:80:9a:1b:b4:d3:cf:
                    9b:9b:a7:94:32:4e:24:f6:c8:b5:d9:25:17:24:29:
                    31:e4:40:bd:55:29:a5:66:59:40:41:e9:27:91:d1:
                    b1:1b:78:91:62:c3:a5:87:0d:50:ba:59:fd:84:be:
                    c3:e6:f7:6c:ad:88:4b:e2:e6:53:5b:1a:3b:f8:06:
                    e6:c9:73:9d:87:13:d7:a2:b6:1b:9b:cb:34:0d:3e:
                    b3:29:31:5d:48:d0:69:c8:bb:de:6e:4b:4f:78:e2:
                    23:e1:bf:20:d1:d0:d1:5a:74:36:7e:2e:d4:39:22:
                    99:6a:0f:62:cf:a5:e5:aa:36:e4:ef:c0:e2:2d:bb:
                    93:58:d9:a5:52:41:68:24:5a:f8:5e:f3:55:e4:aa:
                    22:c9:eb:7a:15:58:60:38:f2:30:66:91:3d:9e:f3:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:93:AA:9F:5F:EF:72:30:FF:19:92:A5:35:88:A7:5A:3D:AD:C6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.138.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4f:be:7f:38:94:63:08:5a:f9:10:28:2b:d7:ae:19:61:34:
         96:57:5a:a6:99:2e:ce:af:b2:19:5d:42:b9:40:74:26:07:b2:
         52:ea:03:40:29:76:aa:bb:49:fb:c8:6d:79:34:55:03:b1:3d:
         06:cf:97:a4:f8:49:fe:b5:33:a8:d4:18:6e:c0:28:a3:b4:06:
         f0:f5:bf:f9:96:ac:4f:77:32:3d:4d:24:c6:13:5c:22:31:ac:
         0e:63:6f:cb:ac:61:04:f3:13:ce:68:ba:42:af:30:06:59:14:
         d4:52:b2:3b:cd:b9:22:fc:34:86:e0:71:04:9d:77:15:21:33:
         e2:78:50:82:76:07:83:af:dd:f2:0f:de:88:dc:ea:6c:56:4d:
         12:b5:7b:74:6f:56:2d:4a:9f:33:a2:7f:b2:f5:2b:85:ec:0e:
         41:b1:17:46:06:3f:fb:6b:ab:e1:b3:fc:8f:a2:8f:75:bc:07:
         bf:70:58:88:aa:5d:d3:12:5b:cc:b7:3f:26:c6:e7:a8:e1:34:
         e6:8c:55:12:e1:17:4a:a3:f7:d2:c4:05:a2:5a:47:1d:f0:ba:
         11:fa:0b:61:b5:e0:fc:1e:a3:03:4b:af:a4:ed:eb:7e:4a:ba:
         0a:50:b0:cb:6e:f5:29:97:d1:da:9a:e3:4d:78:45:ef:09:0a:
         23:e0:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 17:57:25 2026 by rpki-client