Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f657671d-604a-35c7-adf5-b6d3fcfb51c4.roa
File:                     f657671d-604a-35c7-adf5-b6d3fcfb51c4.roa (raw, json)
Hash identifier:          iiZztrJWX3iJEz6fecpBLTNzDsh45MHU6+NFloWNbCw=
Subject key identifier:   8B:69:13:B6:B3:5C:20:FE:B5:81:55:8E:73:96:49:D0:1C:AB:84:B6
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584E8C8A432F7BBC8CC535C5EF00
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f657671d-604a-35c7-adf5-b6d3fcfb51c4.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     63150
IP address blocks:        168.151.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:43:2f:7b:bc:8c:c5:35:c5:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=f31501e0-dbda-43e3-af81-7e35c9db5a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:c0:ef:34:0a:3c:51:8e:34:4c:a3:cd:99:
                    87:a0:db:76:f4:61:87:ff:2b:77:2b:69:70:fd:3f:
                    f6:2c:8a:74:e4:78:37:9a:5b:85:14:a0:ba:ae:1a:
                    47:23:23:e8:2e:06:37:81:3e:9c:b4:51:d6:ad:8a:
                    9f:37:a8:c9:43:9f:64:3c:50:82:db:a8:64:3f:d1:
                    07:45:46:ee:2b:13:e1:28:2e:19:11:1c:41:f4:20:
                    0e:3f:5a:64:49:93:23:63:69:bd:f3:78:7e:2a:6a:
                    36:41:12:5d:15:fc:9d:48:f8:27:8d:f1:23:b8:a3:
                    c7:6e:f0:1e:6b:0d:b4:54:be:0c:43:02:aa:9f:5c:
                    ed:10:20:24:8d:38:22:ac:7e:57:a0:91:6a:3a:81:
                    6c:e5:85:3f:0e:60:c4:11:72:50:f7:a9:9a:57:14:
                    0b:38:b2:00:fa:de:9d:c7:c3:8c:26:dd:d7:6b:b4:
                    60:8e:c2:96:b7:22:51:35:8a:dc:c8:76:41:ac:10:
                    b3:0f:ef:22:96:cd:d0:24:37:42:dd:d2:87:ff:a7:
                    0d:f3:ca:b2:fb:ec:92:5f:87:fe:d0:d3:93:e0:1c:
                    78:05:65:5a:fc:12:ac:8e:dc:82:b7:fe:22:e3:26:
                    b4:ed:e5:ef:3f:a1:56:16:9f:cb:a7:73:73:cc:9d:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:69:13:B6:B3:5C:20:FE:B5:81:55:8E:73:96:49:D0:1C:AB:84:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f657671d-604a-35c7-adf5-b6d3fcfb51c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:92:60:7c:03:1c:70:a7:74:cb:a3:2e:45:49:76:c2:5e:de:
         3f:73:50:42:e1:36:96:35:60:07:dc:a4:94:1d:36:8e:dc:8e:
         26:74:a0:65:24:28:34:14:6e:18:75:d3:3d:ab:1e:c0:b6:18:
         e6:0d:b4:3d:4e:ae:bc:70:3f:7c:da:ee:91:c5:9f:41:11:68:
         0a:84:b7:7d:14:30:4f:8c:bd:72:a2:2d:6e:98:7f:ff:db:0b:
         98:05:5f:d8:82:42:62:7b:de:23:cc:db:0e:76:26:a3:ed:0d:
         d0:7d:fa:76:31:59:57:e1:55:38:9d:6e:b5:8a:bd:a8:81:71:
         9c:89:2c:fe:a0:aa:20:0b:32:0a:05:38:61:e3:45:77:20:a1:
         1b:05:2a:af:3b:a4:39:b6:74:97:c2:fe:d5:be:ea:df:bc:f0:
         7b:42:08:92:fb:20:89:8f:67:f5:33:1e:5a:1c:ee:e3:62:4a:
         28:c5:d9:0b:dc:2d:46:02:2c:a1:14:56:0a:38:80:da:fa:4a:
         eb:50:07:c1:fd:d8:fc:46:d2:3c:83:0b:25:0b:56:4e:89:7f:
         36:9c:2f:ba:b2:f5:8a:a1:85:9b:a3:06:32:89:b5:b8:87:19:
         f3:88:a4:e6:98:e5:10:ad:20:8f:32:45:6c:35:64:04:ac:18:
         22:69:08:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:08:34 2026 by rpki-client