Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa
File:                     9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa (raw, json)
Hash identifier:          zgrJV38faPDrJsQcBXfI2iHtpleW9fB30XWyqMPDRik=
Subject key identifier:   40:DC:EB:74:14:D0:5E:45:02:7A:F9:AF:B1:1A:48:FC:AB:79:53:9F
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584F7E7DC267BEE174AA01267090
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     203
IP address blocks:        20.134.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:c2:67:be:e1:74:aa:01:26:70:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=8e924aba-1510-4934-b44b-89f77cfebbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:e2:62:88:1b:74:d1:c6:a1:87:24:e7:70:
                    37:04:8f:99:c7:6b:1e:ce:2d:2a:d8:53:5d:77:6e:
                    6e:05:5d:17:d4:91:ca:d9:bc:d4:7f:33:2e:b2:97:
                    ae:bb:91:66:ab:54:57:8d:04:0a:1c:c2:6a:65:5e:
                    8f:ac:0a:bd:af:fc:4f:05:79:ed:23:7f:8e:cc:17:
                    ad:34:72:a8:c1:80:d6:d4:18:37:86:7f:8c:83:97:
                    a7:da:ad:be:bd:fc:f5:49:2b:82:15:ec:38:32:4f:
                    23:2b:b8:3a:42:c2:fd:4d:f5:d2:4a:d9:72:e0:d3:
                    55:e1:ee:0e:7d:59:60:6a:8b:89:b1:c1:dd:68:51:
                    8e:2e:aa:02:26:1c:f0:db:f5:5d:e1:74:58:53:f8:
                    72:ef:20:13:20:cd:a5:b3:2a:ea:1e:a4:f3:cd:ad:
                    70:31:bc:7c:50:ee:f1:78:1d:17:0a:8b:3e:74:1f:
                    11:84:7f:65:f4:28:db:12:ac:df:7c:04:89:de:5b:
                    b2:85:95:30:9a:ac:ec:0f:22:1d:33:7a:6d:95:33:
                    dc:93:d7:84:9f:02:77:a6:4e:15:29:03:d1:fd:f6:
                    f9:3e:7f:f3:50:9c:17:c9:3f:2d:95:70:28:40:63:
                    87:dc:d1:1a:b4:b9:97:e4:ce:42:60:f8:23:26:c8:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DC:EB:74:14:D0:5E:45:02:7A:F9:AF:B1:1A:48:FC:AB:79:53:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:18:f6:8c:16:df:d1:59:eb:5d:e6:f9:46:74:05:63:9b:b4:
         ac:67:a6:5b:cd:58:9a:0b:ef:c9:c1:5d:68:d8:49:d0:36:71:
         23:d1:2a:55:a4:ba:e5:2e:9d:d4:56:12:7d:1e:8c:62:89:62:
         11:95:40:9d:c1:1f:b0:5e:6e:e8:b1:7b:06:1c:d2:78:8d:db:
         2a:23:f8:ed:8f:f7:c0:57:fa:d8:93:02:85:2d:a8:b2:08:6a:
         62:20:9b:81:3f:98:1b:2c:d2:48:72:c2:89:a3:d4:92:c9:50:
         13:a0:82:63:68:0c:8b:39:56:06:ed:0c:f1:81:45:07:1e:c2:
         ae:de:8c:1e:34:b7:61:37:9c:f0:5f:54:53:3d:14:69:3e:89:
         eb:17:18:de:39:ca:15:2e:de:6b:2a:83:11:95:8c:19:06:94:
         88:8f:dd:04:4a:7b:56:0e:be:08:bd:6b:79:08:c0:0b:7a:4c:
         dc:09:6b:bd:1d:f6:90:c6:9b:3b:00:92:72:75:fe:73:8f:46:
         b5:39:29:32:a1:b6:84:c4:25:ff:63:07:ae:0d:cf:35:84:7f:
         f1:35:92:88:a0:67:59:e0:e8:64:e3:73:c2:6a:96:b7:a5:37:
         1f:b3:9f:99:65:fc:76:fc:9c:78:a2:15:41:47:e5:29:86:36:
         19:94:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:50:16 2026 by rpki-client