Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b873ffd-879b-34e6-8a3a-fe7eff79427b.roa
File:                     8b873ffd-879b-34e6-8a3a-fe7eff79427b.roa (raw, json)
Hash identifier:          ZgXcWjmsIBQdAaIwqh7FsIxUrrgwhCnxnaULRHKeTOw=
Subject key identifier:   20:C8:91:AC:4D:BF:36:24:D8:75:C1:C2:AC:7B:18:2D:28:7C:AB:10
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584E885A58F6629E537524608080
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b873ffd-879b-34e6-8a3a-fe7eff79427b.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     3356
IP address blocks:        20.138.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:58:f6:62:9e:53:75:24:60:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=6030b495-523c-48de-91dc-3caa15a4b408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:5a:b0:b1:6a:d0:1e:4a:52:67:e6:02:b6:
                    d8:e9:5b:9c:d0:e0:92:b1:5f:8f:36:ed:9c:fc:ef:
                    a7:af:26:97:21:03:2c:ae:05:6f:bb:03:60:fc:37:
                    a7:bc:0b:a0:31:c3:5d:b0:41:5f:64:62:b7:f6:f8:
                    e0:87:3d:7e:6b:0a:f9:bc:0f:ae:75:b5:88:a2:ef:
                    20:ef:05:eb:84:65:3d:b0:74:93:ec:a5:44:06:53:
                    e9:ba:2e:f3:10:bf:83:62:4d:68:df:f5:ad:f8:ab:
                    ac:64:68:79:9d:de:4e:1f:e5:b8:52:93:5e:30:2c:
                    6b:70:13:2b:9f:2d:0e:78:36:8a:6b:ff:0a:b8:1e:
                    f0:cb:50:2c:9e:6e:01:4e:1f:71:56:ed:f9:5d:d6:
                    03:44:5a:77:5c:cd:e2:36:02:c5:c9:bf:90:e7:17:
                    f5:c8:2f:93:81:4f:31:45:15:8f:bd:8d:67:e5:af:
                    c1:12:de:41:8d:15:f8:cb:b3:01:3f:48:0a:af:0a:
                    e4:b2:e5:e1:31:5b:18:11:94:ae:4e:7a:1a:39:4c:
                    04:cb:bc:31:dd:75:a6:cb:31:98:63:f5:60:57:48:
                    bf:6b:0d:a8:98:8c:69:49:fb:4b:73:d0:9b:87:47:
                    ac:26:e6:0f:c9:e8:9b:1e:d8:48:f8:7a:74:eb:ae:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C8:91:AC:4D:BF:36:24:D8:75:C1:C2:AC:7B:18:2D:28:7C:AB:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b873ffd-879b-34e6-8a3a-fe7eff79427b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.138.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:57:3b:8f:4a:59:62:40:ee:81:30:8f:cf:43:35:2b:06:2e:
         c8:ef:ba:7a:4b:4b:39:85:75:80:6f:e1:69:b9:24:c6:a9:13:
         5e:88:c5:c1:10:82:d4:83:1d:27:5c:fd:16:57:78:e6:6a:08:
         c1:6d:69:d4:18:f1:af:1f:9a:cd:e5:da:48:bd:5f:e3:ac:09:
         77:e5:37:e0:94:0e:0a:64:07:96:8e:b5:6e:0b:48:d2:6a:85:
         a8:e5:d3:3c:61:c5:0e:1b:0a:1f:94:8e:00:86:a5:25:64:72:
         e2:2a:39:29:54:78:39:b5:e3:33:20:c0:b4:c7:54:a8:be:f8:
         f1:b4:19:be:8e:06:b9:45:51:32:0a:d0:27:1d:07:72:3b:00:
         3c:c2:d8:00:ef:af:a3:26:72:8b:86:12:9d:39:03:a3:bc:b5:
         6b:e7:e1:5e:2d:dc:11:c0:d7:89:af:b0:41:3b:51:a7:af:1a:
         b3:c9:92:5f:2d:bc:89:1f:94:6e:7b:ae:20:93:d4:56:28:bd:
         ca:6d:fa:3e:6e:7a:a3:a8:d5:7a:e4:7c:77:0e:07:bf:14:65:
         eb:1d:cf:b2:22:c4:41:5d:93:a8:7a:1d:a2:8f:ee:da:5b:62:
         7f:74:49:82:ad:92:09:d5:01:47:ca:27:6a:e5:b3:6f:f7:a5:
         a2:a3:df:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWlj2Yp5TdSRggIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
NjAzMGI0OTUtNTIzYy00OGRlLTkxZGMtM2NhYTE1YTRiNDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBNasLFq0B5KUmfmArbY6Vuc0OCSsV+PNu2c
/O+nryaXIQMsrgVvuwNg/DenvAugMcNdsEFfZGK39vjghz1+awr5vA+udbWIou8g
7wXrhGU9sHST7KVEBlPpui7zEL+DYk1o3/Wt+KusZGh5nd5OH+W4UpNeMCxrcBMr
ny0OeDaKa/8KuB7wy1Asnm4BTh9xVu35XdYDRFp3XM3iNgLFyb+Q5xf1yC+TgU8x
RRWPvY1n5a/BEt5BjRX4y7MBP0gKrwrksuXhMVsYEZSuTnoaOUwEy7wx3XWmyzGY
Y/VgV0i/aw2omIxpSftLc9Cbh0esJuYPyeibHthI+Hp0667/RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDIkaxNvzYk2HXBwqx7GC0ofKsQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOGI4NzNmZmQtODc5Yi0z
NGU2LThhM2EtZmU3ZWZmNzk0MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIr2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhXO49KWWJA7oEwj89DNSsGLsjvunpLSzmFdYBv4Wm5JMapE16IxcEQ
gtSDHSdc/RZXeOZqCMFtadQY8a8fms3l2ki9X+OsCXflN+CUDgpkB5aOtW4LSNJq
hajl0zxhxQ4bCh+UjgCGpSVkcuIqOSlUeDm14zMgwLTHVKi++PG0Gb6OBrlFUTIK
0CcdB3I7ADzC2ADvr6MmcouGEp05A6O8tWvn4V4t3BHA14mvsEE7UaevGrPJkl8t
vIkflG57riCT1FYovcpt+j5ueqOo1XrkfHcOB78UZesdz7IixEFdk6h6HaKP7tpb
Yn90SYKtkgnVAUfKJ2rls2/3paKj33I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:38 2026 by rpki-client