Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55abceef-df30-306e-9d07-b819061ccc81.roa
File:                     55abceef-df30-306e-9d07-b819061ccc81.roa (raw, json)
Hash identifier:          p2tniD8WHcuuPOqadFaaRghx8y10AST1zHrnnipQ9/M=
Subject key identifier:   AA:99:AE:EE:79:68:5B:C7:5D:6D:FF:4F:4C:5A:9A:FF:31:C5:2E:B0
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584D386A4285906BD0F8D405E200
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55abceef-df30-306e-9d07-b819061ccc81.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     202
IP address blocks:        20.149.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:42:85:90:6b:d0:f8:d4:05:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=e4c54a33-9f36-4c4d-95c8-83652703ee6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:b9:78:2c:f7:5c:fe:49:4d:96:ef:45:07:
                    b6:55:09:5f:2b:f2:78:d7:28:1e:b8:0f:0b:05:e1:
                    3e:49:59:aa:4d:de:c9:b6:ec:5e:da:97:62:3c:24:
                    33:00:c9:6f:93:b8:d0:e5:2a:7b:46:b5:da:f6:ce:
                    7c:5b:8b:3e:89:ef:62:ae:c3:01:91:a0:9c:57:66:
                    67:bf:da:43:2f:a4:4a:f2:83:f1:69:cc:16:67:63:
                    39:2a:73:74:41:31:ce:dc:b3:e1:73:0d:e9:8b:ae:
                    f9:bd:9c:d7:09:63:92:71:ea:2c:65:c3:dc:e8:d4:
                    cf:62:6e:85:b2:92:59:0c:25:fd:c7:db:07:58:19:
                    07:95:fe:d0:b6:f5:97:14:5d:63:16:ff:2a:3b:48:
                    db:74:a6:8e:16:fb:28:32:11:6c:de:8f:81:4b:e7:
                    4e:86:a2:03:91:8e:60:5d:98:80:23:12:de:dd:6e:
                    5c:3d:6f:65:3e:5e:2a:2c:44:9a:7a:17:ab:3b:e2:
                    2c:6a:b3:72:aa:1f:5d:2d:ad:82:df:67:46:ef:0a:
                    b1:e5:45:34:c4:55:cd:f0:84:b0:fa:5f:bd:72:65:
                    db:02:8e:5c:f9:53:90:f4:20:4f:c6:9a:50:4e:e8:
                    ab:55:c6:93:1f:fa:e9:cb:12:a5:de:23:f2:f9:dc:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:99:AE:EE:79:68:5B:C7:5D:6D:FF:4F:4C:5A:9A:FF:31:C5:2E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/55abceef-df30-306e-9d07-b819061ccc81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.149.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b5:a8:4e:ac:90:39:35:4e:c8:60:f4:96:7c:2d:48:d0:70:
         91:47:64:9a:ef:7a:f6:f5:63:35:02:d8:70:88:c1:0c:e6:46:
         db:c4:ae:65:a6:6b:21:b5:7e:21:29:8d:91:2f:bd:fb:6f:4d:
         d8:13:50:73:ae:97:c5:51:c2:a4:7e:4e:3a:07:01:8d:e1:18:
         76:d5:cc:45:88:90:cb:ad:3c:63:aa:b4:65:e3:92:a7:27:7b:
         ca:50:e5:d3:ea:03:bd:64:22:df:8a:e9:b5:33:5f:8c:bd:87:
         63:f4:d2:a7:e1:46:d7:70:25:ae:03:96:ad:3d:39:8c:c5:08:
         5a:da:75:22:e7:4c:f7:c0:8d:a8:2a:a5:8d:2f:4c:2a:5c:19:
         b0:a2:ff:1e:b2:b5:d8:86:33:9e:18:9b:8a:50:b8:5b:c1:f4:
         f6:db:ee:7f:ec:01:51:73:12:7c:06:18:63:54:4d:f0:fc:0d:
         a5:84:3c:48:30:0b:0a:a3:75:85:e7:96:ce:eb:81:c1:b1:37:
         ea:f3:d6:fe:5b:56:bc:6e:6d:f5:24:57:81:13:f5:ba:49:e1:
         b4:98:2d:39:b6:53:51:ff:c1:81:f1:e3:49:07:71:13:3d:a0:
         52:4a:1b:bf:2d:3a:f5:2f:69:19:8c:71:41:d6:d6:04:8d:94:
         d3:16:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:44 2026 by rpki-client