Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a47fe637-9574-3387-9479-f9a35116d96f.roa
File:                     a47fe637-9574-3387-9479-f9a35116d96f.roa (raw, json)
Hash identifier:          GNWCQuGCjLpcJPvJ6nRcdCQsXXeK+dVfIP19HqZ0a4E=
Subject key identifier:   B8:58:04:18:80:11:30:49:AE:16:A3:01:96:97:F0:C4:35:9E:08:0A
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584E6F3A3E255136677406760800
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a47fe637-9574-3387-9479-f9a35116d96f.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     203
IP address blocks:        20.132.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:3e:25:51:36:67:74:06:76:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=573244d9-7d7f-4c67-a19d-ac80ec7e9bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:4c:5e:f3:9d:ca:26:25:34:32:0d:43:2f:
                    81:9b:63:c3:24:d7:40:fe:08:e0:8c:45:e5:6c:2f:
                    ce:d3:95:9f:0b:66:91:61:d5:bc:08:a5:84:98:7f:
                    14:ef:a9:80:14:27:2a:83:3a:20:a4:ab:41:40:6b:
                    30:8c:bb:53:68:e7:fb:50:6e:da:f5:78:9c:10:35:
                    0d:13:15:9c:2c:96:d0:b7:19:25:6d:23:a4:5a:7f:
                    0c:12:36:0e:e8:de:df:d6:d5:54:ea:8d:16:f9:00:
                    bc:5e:70:2d:ef:db:b4:62:ab:c5:8e:75:58:f5:ac:
                    e1:10:6d:67:20:fc:e8:98:be:f8:b5:7d:42:9b:d3:
                    5d:35:71:55:18:f0:6d:b4:5d:43:b0:92:2b:54:83:
                    5f:f2:d4:8b:34:98:91:34:b7:3e:81:20:d8:66:88:
                    0a:03:84:ab:a5:4b:10:31:f6:6c:dd:86:7e:c0:06:
                    43:97:2a:1c:02:5a:01:41:d7:9c:38:a6:eb:64:84:
                    f2:fd:49:45:c1:a0:5a:97:83:5f:02:e6:a6:dd:f8:
                    67:c4:0e:8f:17:a3:54:df:8c:40:7b:3f:2d:4b:b8:
                    10:40:44:60:1c:fb:82:83:4b:3e:ca:83:98:39:11:
                    2e:9e:71:2f:f1:df:9b:15:6c:b9:5d:c4:5d:14:77:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:58:04:18:80:11:30:49:AE:16:A3:01:96:97:F0:C4:35:9E:08:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a47fe637-9574-3387-9479-f9a35116d96f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.132.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:42:d1:22:78:ef:9c:73:33:c9:42:e5:9f:6a:f7:cb:1f:7d:
         53:6c:e5:b6:ff:ee:89:d4:76:48:6e:a8:0f:02:ab:10:90:47:
         59:6f:c3:15:82:2b:9a:4c:a8:99:2c:68:08:be:9c:ed:3e:a9:
         f8:3a:0e:ba:fd:b3:84:ad:e4:22:9b:4d:7a:72:18:25:77:b9:
         d6:16:72:65:a9:c4:39:f4:13:ee:7a:bc:9a:76:35:0a:9d:b7:
         a3:80:0a:4a:3e:27:57:ba:67:3c:63:ca:9a:d8:d1:af:12:0b:
         b6:28:9c:4a:72:f2:0b:4b:5f:f3:15:10:ce:15:b0:7c:4f:d3:
         32:57:f7:06:75:f7:4a:1e:68:d2:26:1b:ac:7c:95:de:1b:24:
         fd:90:fe:72:89:7c:64:f2:4f:d1:68:13:d7:e3:60:6a:5f:8b:
         70:65:8b:62:ec:cd:9a:e1:03:3a:a7:4d:8a:8c:16:a8:57:fc:
         f8:29:19:93:3f:ca:b6:40:55:c6:0b:d7:4c:71:bc:ba:9f:1d:
         56:24:9a:ca:03:a2:00:f8:0b:a8:0c:f8:e7:ff:3d:f4:bc:08:
         e0:44:1c:c1:0e:b4:8c:82:f0:2a:16:3a:f9:ca:44:61:ee:25:
         aa:bf:e8:d6:bf:ac:d6:52:fb:4b:fc:02:e4:6e:64:d8:1e:5f:
         10:79:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:54:29 2026 by rpki-client