Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/777eef3c-2d2f-353b-8b72-b72477054f65.roa
File:                     777eef3c-2d2f-353b-8b72-b72477054f65.roa (raw, json)
Hash identifier:          uYJeWiraDvJkcRARxedPruUd4PBkbjT4hwMOTqKakuU=
Subject key identifier:   02:DE:2B:EF:9B:5A:BC:32:7D:14:C3:07:4A:A7:F8:4E:45:2C:D0:47
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584F7E7DC368B4E11F994D23D760
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/777eef3c-2d2f-353b-8b72-b72477054f65.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     203
IP address blocks:        20.139.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:c3:68:b4:e1:1f:99:4d:23:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=b65f0fc7-2791-41cb-8815-d9f57eff9287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7f:86:eb:24:ff:8f:cb:ef:d1:97:7c:bc:b3:
                    cb:5b:6c:34:03:b6:57:dd:10:4d:8a:2b:72:a6:74:
                    41:32:0f:2b:7a:5f:ae:b5:b7:b4:c8:49:76:13:4c:
                    d3:78:65:1c:74:c2:64:bf:b5:b5:47:5d:1b:1a:94:
                    ff:cc:f0:72:e0:46:f3:35:48:27:aa:a8:52:74:94:
                    d0:6d:8c:30:60:95:7c:8b:12:64:9e:a8:b2:40:6b:
                    89:41:72:30:53:6a:f9:db:0e:01:0a:37:f0:e1:3d:
                    9f:18:bc:b9:29:27:40:5f:e4:67:c0:80:c5:1a:22:
                    c7:90:0a:10:f1:ec:25:75:c6:ac:ba:6a:70:5e:30:
                    84:7c:bd:8c:ac:f7:0d:2b:58:cc:0a:e4:89:12:df:
                    26:77:95:3c:e6:d7:13:be:8b:f5:e0:1d:d9:ff:4e:
                    0f:21:14:ae:18:aa:e7:42:07:20:45:03:27:a9:4d:
                    8c:ab:2c:9e:69:e9:02:68:c3:c2:19:56:ac:29:c9:
                    9f:5b:ba:af:a1:ca:94:f0:6a:0e:1d:63:29:9e:89:
                    12:03:ad:08:fb:cf:e8:fa:8b:41:77:49:7d:06:e9:
                    cc:96:eb:a1:0d:1d:15:82:17:82:90:91:4b:6a:6a:
                    a2:d4:2b:2e:4f:37:86:80:df:78:e5:6e:58:b1:47:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DE:2B:EF:9B:5A:BC:32:7D:14:C3:07:4A:A7:F8:4E:45:2C:D0:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/777eef3c-2d2f-353b-8b72-b72477054f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:67:f7:3e:d0:b5:3b:ff:b4:37:55:11:4c:10:b0:52:6c:
         46:75:01:3a:df:24:51:56:20:7a:de:d6:4d:35:95:31:a8:df:
         af:83:fc:b4:b7:26:1e:06:a7:4b:05:5f:59:3c:34:74:f5:79:
         03:16:af:84:47:bd:50:c1:fc:6e:c6:85:e2:fc:72:6a:90:30:
         7e:c5:7e:f5:1a:91:b1:93:b2:be:c8:c5:fc:b7:c2:a0:ce:84:
         d4:82:34:48:f2:7c:21:3c:da:e6:f1:e7:73:7e:44:35:1b:40:
         22:b5:93:f2:1e:55:bf:13:a2:2d:e0:51:cc:5f:01:ec:3f:82:
         74:9a:27:bd:61:67:a3:59:0f:86:14:50:73:1d:63:cd:bb:3b:
         99:8b:79:ba:6c:b5:99:da:d5:38:dc:37:6a:ca:30:88:2e:e4:
         e6:8f:a6:62:5b:e7:a3:b5:4d:3f:19:bb:c1:a4:02:d8:83:91:
         28:6b:ff:7a:58:e5:d5:19:d6:f2:51:24:61:45:06:f1:e0:9d:
         38:b9:6b:38:27:b0:43:8e:f3:c3:ed:9f:b1:d0:38:df:f0:c5:
         60:d0:5c:ff:bc:d1:58:e9:eb:a7:d9:58:a4:dc:7d:fb:1c:f3:
         78:71:5b:ca:69:8d:18:46:74:d3:06:20:88:56:01:8f:69:00:
         1a:c7:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:35:54 2026 by rpki-client