Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa
File:                     01a58354-6718-38cb-adc5-f6f4e562db01.roa (raw, json)
Hash identifier:          kSb+AF6uGn+pwnO0IJBZKiNXh7ouVcD5vGBZt8liNzQ=
Subject key identifier:   13:CC:E8:AF:1B:09:1B:21:D2:AB:C0:6F:48:58:A9:1A:B3:F6:63:35
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584E3A2F2FE0DAFC4AFDB1F8E900
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     202
IP address blocks:        20.139.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:2f:e0:da:fc:4a:fd:b1:f8:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=49ded0f0-6b69-43df-8fe2-ef6d5e521451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:25:fe:16:f6:17:07:ac:db:d3:ac:52:2f:15:
                    00:df:1b:db:0a:eb:4c:29:da:eb:da:31:ae:cd:bb:
                    a9:b2:ac:62:9f:6a:d8:94:47:d9:8e:f1:13:c7:54:
                    89:4c:a7:5d:cb:9d:14:12:81:f1:3f:c1:2d:86:c2:
                    81:2a:2e:5c:87:b0:83:5f:0f:3e:56:9a:e2:f8:58:
                    74:2d:60:1f:a0:09:c0:01:82:28:d5:bc:33:3d:23:
                    a5:fd:05:fe:28:81:21:9a:bf:48:69:e3:4a:ab:fb:
                    e1:9a:2c:eb:2e:f2:36:9f:f4:00:8c:86:c3:dc:ed:
                    0a:38:9d:01:f1:93:d5:c9:f1:32:4a:92:25:db:38:
                    d9:1b:d0:ef:3a:c0:36:10:d7:aa:f5:21:71:33:c4:
                    45:55:28:40:07:11:c0:01:40:1c:13:04:a5:7f:1b:
                    ac:67:91:8b:06:ec:43:b7:db:21:a0:1e:94:28:a7:
                    f0:a1:07:6a:82:21:08:e4:f4:ac:fe:b1:e2:8c:30:
                    ef:d1:95:06:99:9f:fd:68:5c:56:2e:98:9f:02:1b:
                    fb:c8:e9:c5:51:36:75:be:58:8c:ca:5d:66:87:77:
                    a1:4b:3d:82:76:fb:62:e7:be:dc:28:89:c5:7e:43:
                    df:2a:de:73:84:fa:7b:71:5b:ec:ee:22:93:fa:a1:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CC:E8:AF:1B:09:1B:21:D2:AB:C0:6F:48:58:A9:1A:B3:F6:63:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/01a58354-6718-38cb-adc5-f6f4e562db01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:39:b1:de:e1:2f:5e:d6:ac:1e:3d:8f:30:98:bb:aa:65:81:
         ba:5b:48:2b:ef:a5:f6:9c:53:a7:42:a8:e6:96:8a:79:12:2c:
         d0:09:e5:9d:4e:97:40:f8:92:b3:c9:1b:68:4e:bd:15:ab:70:
         01:32:e9:53:55:9f:d9:d2:de:ca:04:a1:fa:23:73:4e:51:4d:
         56:29:82:68:c6:91:27:bb:aa:75:05:95:db:fa:b0:36:ae:dc:
         81:25:d1:7e:10:f2:d0:c8:7d:e4:6e:06:bd:97:b0:62:f7:b4:
         23:38:cf:86:73:10:92:b3:69:00:df:8a:5a:91:3f:6c:dc:1b:
         98:bf:35:b1:bd:78:12:2b:94:96:68:86:11:65:f7:ba:bd:b8:
         a2:6b:18:b6:25:3a:08:6a:ec:fe:f4:30:0d:b6:48:ab:96:53:
         e6:bd:e1:65:0c:cb:fd:9d:ba:bb:42:f5:18:b5:c7:b7:6b:81:
         3e:2c:99:f7:8c:44:56:57:79:2e:8c:94:11:ef:cc:bd:28:ef:
         08:76:e0:de:b3:83:d1:77:b1:b5:2e:d3:e4:39:fc:3e:3b:87:
         83:92:f0:35:57:f1:54:c8:71:ed:79:ee:39:2c:1f:7d:65:3d:
         25:36:b5:4c:bf:55:ae:58:fd:37:cf:44:ba:b6:16:e3:aa:09:
         77:22:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:51:22 2026 by rpki-client