Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/37c0a70e-5c5f-3f8e-be7d-8e5c4780ed74.roa
File:                     37c0a70e-5c5f-3f8e-be7d-8e5c4780ed74.roa (raw, json)
Hash identifier:          AKeKazexq/ZqiUKdT+2tK4rnu021o0+BxIN8u+bcaPQ=
Subject key identifier:   00:7E:68:58:69:F1:3C:5D:0E:62:46:4F:1B:46:DC:3A:98:EA:AB:5B
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584DA8157D5367B379C6CD0DB280
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/37c0a70e-5c5f-3f8e-be7d-8e5c4780ed74.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     202
IP address blocks:        20.138.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:7d:53:67:b3:79:c6:cd:0d:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=3cbd973b-be5e-456f-b74a-a02f95408abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7e:a5:c6:e3:96:cd:27:23:3c:43:90:ba:d1:
                    d5:4f:e6:00:e7:4e:df:66:59:ac:f0:cd:da:ec:82:
                    1b:5f:bf:99:4e:6b:ec:cb:54:fc:c9:fa:5a:fa:76:
                    92:95:c4:70:19:24:74:bf:32:e1:ae:d1:8b:3b:0e:
                    5b:87:b7:1e:50:e8:ce:8d:4b:d2:e6:e7:0a:4f:0a:
                    e2:5e:64:9e:35:22:75:8a:fc:ff:f7:83:09:dc:98:
                    56:e4:e5:f7:92:a9:42:68:51:25:df:ba:9f:b0:a3:
                    19:94:90:27:07:90:1a:a1:f5:4b:82:48:4e:3c:f6:
                    3a:76:65:6e:e3:12:27:3d:99:ef:2b:92:36:43:3a:
                    ff:b2:a0:5b:8c:01:b7:34:e3:66:9f:7d:79:1c:6d:
                    33:9c:ab:4e:52:39:e9:70:44:4a:32:a9:11:1f:89:
                    ac:de:ab:87:81:0e:33:b1:6a:6d:29:7d:db:6e:ed:
                    2d:1a:b7:e0:12:b3:ec:58:8b:27:d3:07:c4:ed:04:
                    fb:37:ff:b0:c2:2d:31:9e:ef:a7:d1:d4:82:90:35:
                    36:25:e4:32:32:3f:d3:51:0f:62:a7:74:ad:42:4b:
                    f5:a0:d3:eb:12:3a:05:1a:6d:b9:51:32:3e:12:bd:
                    55:ef:43:ac:72:2a:9e:68:9c:da:5f:b2:c7:94:ae:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7E:68:58:69:F1:3C:5D:0E:62:46:4F:1B:46:DC:3A:98:EA:AB:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/37c0a70e-5c5f-3f8e-be7d-8e5c4780ed74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.138.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:09:eb:e2:96:14:9f:09:e3:74:95:16:c4:c9:4a:57:99:
         55:3d:4a:e2:78:7b:af:bf:e3:b3:74:a5:51:c5:df:98:ca:91:
         c2:57:40:94:69:4f:98:b6:10:49:ae:2d:42:5f:1c:2b:1f:30:
         af:6b:5a:d2:12:b7:46:34:8e:cf:84:35:3a:74:75:23:5a:37:
         55:14:cf:0b:b3:d4:41:9e:03:bc:6c:96:36:a9:e6:35:ea:25:
         b4:ad:ef:b8:89:bc:c6:31:81:c4:b2:a2:9f:5f:96:1f:0e:ab:
         e6:e3:21:ae:31:e3:15:69:be:2a:71:8a:30:93:0a:0f:b0:f5:
         9d:41:b3:34:53:1b:76:7f:bf:aa:4b:f9:ba:65:80:db:13:ea:
         fc:48:e8:68:7c:d8:b2:c5:ae:06:d4:7d:7d:8b:77:d1:39:92:
         34:8e:e8:77:14:0e:10:0f:b0:c0:0f:24:31:cf:c3:d7:9e:ca:
         37:6c:70:9e:4c:52:fb:d7:59:5f:07:3e:5c:46:91:35:80:bd:
         e9:ec:5a:87:5c:e5:15:26:ec:1e:65:9d:b3:8e:74:97:ee:56:
         47:c9:18:c3:2f:dd:db:9d:ff:5b:64:a9:96:c8:30:4c:e9:55:
         92:f1:5b:d5:d0:e6:f4:37:b8:c6:e4:84:15:de:70:a3:42:8e:
         4a:d1:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:06 2026 by rpki-client