Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa
File:                     e3806760-7d79-3d01-859b-ff7d8faa361a.roa (raw, json)
Hash identifier:          YIhltLtwGTr8Q8UDXkAPvKy1IIuMcDRhneY2RwbdAtc=
Subject key identifier:   C3:C3:48:7C:05:CC:A7:DB:99:F9:DC:33:04:11:3D:61:B1:4D:04:24
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584F5E62B978BC45A1E3FD741B00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     203
IP address blocks:        20.133.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b9:78:bc:45:a1:e3:fd:74:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=05cdf0cb-00ce-4b1e-b6c5-ebb84fb391d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:78:82:bb:3d:96:5b:8a:d9:2d:3e:6f:2f:
                    45:f9:5d:4c:69:28:f4:74:07:a2:26:43:ef:01:a0:
                    ca:9f:ca:3d:4b:36:27:fb:27:5a:75:a1:02:03:50:
                    a4:b8:aa:5b:f1:7b:b2:01:09:03:03:28:61:31:2d:
                    1d:a8:02:a7:da:39:cc:51:e6:ef:27:f6:7d:d2:b7:
                    c6:a0:f2:01:3f:ae:f6:79:d6:ba:4f:20:19:9a:d0:
                    e5:10:7a:58:62:bd:68:07:c7:fa:2c:af:d4:bc:f4:
                    ad:60:fb:9a:d8:8d:8b:d6:7f:37:97:49:67:4a:d6:
                    15:3b:69:87:61:fc:d3:15:89:e9:dd:43:7e:4c:08:
                    8a:83:c5:f4:10:2e:b2:0b:2a:82:20:93:9c:f4:80:
                    be:34:b9:e5:ec:4c:0f:7b:8d:18:38:c0:76:a4:cb:
                    d1:f3:19:92:d0:bd:1c:f7:19:54:7d:a0:57:c5:5d:
                    92:77:05:9e:fa:9e:2a:cf:36:53:dc:6c:6d:93:a2:
                    af:47:04:dd:fa:6f:a4:4b:bf:69:09:32:e9:53:c7:
                    92:4e:e2:dd:d1:4b:b6:63:5c:07:a5:9f:34:be:ca:
                    96:53:85:6e:06:fc:b2:2c:d7:6d:6e:ef:c4:01:94:
                    a8:c8:2f:51:97:dc:56:08:ca:60:e6:c8:36:4c:11:
                    3f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C3:48:7C:05:CC:A7:DB:99:F9:DC:33:04:11:3D:61:B1:4D:04:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e3806760-7d79-3d01-859b-ff7d8faa361a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.133.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:36:a7:17:34:e5:a5:45:ec:33:3d:30:4a:50:1c:eb:6b:
         15:56:74:d4:f6:eb:3a:93:36:65:19:94:f1:81:04:7c:d3:37:
         64:0f:02:28:91:91:e5:3f:47:7f:90:f6:1a:f0:2f:62:6d:95:
         cf:51:34:b0:6e:5c:ff:b0:c9:25:56:71:23:93:cb:c1:99:07:
         e4:48:6e:08:47:4f:f1:c9:30:aa:e4:3b:78:28:6e:6e:39:a7:
         be:be:7d:c1:8f:39:10:0d:35:f6:f6:bc:3c:26:69:e5:d5:03:
         7a:88:90:4d:1c:3c:74:46:7b:f8:51:9b:5c:85:40:ef:f5:f8:
         24:bc:73:82:f2:58:53:e7:8a:1d:cb:86:08:0c:1e:a2:b9:71:
         8e:1e:db:35:d1:04:3d:1f:69:a7:03:53:28:fa:94:59:1c:7f:
         37:07:ac:8f:04:b6:6b:31:c3:9f:14:83:fc:22:1f:75:b5:10:
         fe:78:8f:90:c1:3e:b8:9e:d0:1a:d4:61:30:57:16:24:5d:de:
         fa:6a:d3:c0:49:a5:02:1a:f7:0b:b6:a7:8b:cf:a4:9a:cc:4c:
         a3:73:27:32:30:07:81:d1:c6:3f:bb:f6:55:0d:c9:06:a7:08:
         17:8b:0a:8b:9b:54:3b:d2:8d:5a:ea:6f:03:44:d1:db:31:e5:
         c1:08:31:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYrl4vEWh4/10GwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
MDVjZGYwY2ItMDBjZS00YjFlLWI2YzUtZWJiODRmYjM5MWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1R4grs9lluK2S0+by9F+V1MaSj0dAeiJkPv
AaDKn8o9SzYn+ydadaECA1CkuKpb8XuyAQkDAyhhMS0dqAKn2jnMUebvJ/Z90rfG
oPIBP672eda6TyAZmtDlEHpYYr1oB8f6LK/UvPStYPua2I2L1n83l0lnStYVO2mH
YfzTFYnp3UN+TAiKg8X0EC6yCyqCIJOc9IC+NLnl7EwPe40YOMB2pMvR8xmS0L0c
9xlUfaBXxV2SdwWe+p4qzzZT3Gxtk6KvRwTd+m+kS79pCTLpU8eSTuLd0Uu2Y1wH
pZ80vsqWU4VuBvyyLNdtbu/EAZSoyC9Rl9xWCMpg5sg2TBE/0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPDSHwFzKfbmfncMwQRPWGxTQQkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTM4MDY3NjAtN2Q3OS0z
ZDAxLTg1OWItZmY3ZDhmYWEzNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIX0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4QNqcXNOWlRewzPTBKUBzraxVWdNT26zqTNmUZlPGBBHzTN2QPAiiR
keU/R3+Q9hrwL2Jtlc9RNLBuXP+wySVWcSOTy8GZB+RIbghHT/HJMKrkO3gobm45
p76+fcGPORANNfb2vDwmaeXVA3qIkE0cPHRGe/hRm1yFQO/1+CS8c4LyWFPnih3L
hggMHqK5cY4e2zXRBD0faacDUyj6lFkcfzcHrI8Etmsxw58Ug/wiH3W1EP54j5DB
Prie0BrUYTBXFiRd3vpq08BJpQIa9wu2p4vPpJrMTKNzJzIwB4HRxj+79lUNyQan
CBeLCoubVDvSjVrqbwNE0dsx5cEIMfY=
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:54:52 2026 by rpki-client