Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/039255e4-c9fb-35a5-8184-772546666ac4.roa
File:                     039255e4-c9fb-35a5-8184-772546666ac4.roa (raw, json)
Hash identifier:          YLFCFgVcsqygFMQpiMHDxSJBtofrsEjYtwBTFqJk5KU=
Subject key identifier:   F6:4C:09:05:C8:9C:2E:A6:02:A1:BD:6A:B6:67:9E:C6:31:52:E0:96
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584AB4EB7D6E7AA31C65260D88C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/039255e4-c9fb-35a5-8184-772546666ac4.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     3360
IP address blocks:        20.134.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7d:6e:7a:a3:1c:65:26:0d:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=c2df7c85-fdea-473e-968e-dcacfe50b3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:69:1c:d5:5b:b2:57:a0:9e:b5:7d:1f:6b:
                    0e:66:09:20:ea:ac:16:91:2d:ba:90:89:17:df:20:
                    16:c7:33:cc:98:f4:c8:f8:ad:6a:80:19:dc:27:d5:
                    40:a1:b1:f7:29:1e:1d:61:3a:17:3b:74:92:36:23:
                    32:a1:e8:58:45:05:9b:78:c9:8d:d1:21:68:34:d8:
                    2c:f6:6e:0a:bd:de:86:0c:c2:cc:83:c2:f3:bb:65:
                    07:a9:ff:04:3b:e8:34:0d:f0:fc:4f:b4:0f:c7:9a:
                    cc:e4:5f:c3:32:d6:5a:23:69:69:6a:0a:83:f7:65:
                    0a:24:83:5e:d3:b5:72:ec:89:85:06:21:a5:89:8d:
                    0c:a5:a2:01:6b:da:f8:bf:66:a9:67:cd:9c:fe:a4:
                    b2:31:fa:a1:04:cc:bf:e9:fb:01:a0:a7:cb:aa:35:
                    6b:2d:bf:4b:fc:c9:d0:ff:29:b6:08:f5:f6:18:5b:
                    cb:2e:60:ad:cf:89:8b:31:ea:d7:b6:59:c2:a6:4d:
                    14:be:1f:41:f0:6a:60:91:65:af:dd:32:21:f8:c0:
                    a4:ed:e4:8d:ba:7b:f7:c7:bb:18:90:cf:ea:a6:07:
                    52:95:b9:38:44:26:35:17:f7:94:ac:e4:17:07:2b:
                    a6:c0:5a:2b:6e:a2:b6:0e:5a:7c:b7:89:bb:2a:3f:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:09:05:C8:9C:2E:A6:02:A1:BD:6A:B6:67:9E:C6:31:52:E0:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/039255e4-c9fb-35a5-8184-772546666ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:15:4d:d5:7f:65:6c:67:be:d3:e9:3b:33:3f:8b:c5:e2:a0:
         14:ec:18:63:82:ea:ad:7f:5b:6f:8d:01:b6:59:45:79:75:94:
         e7:35:fc:aa:b7:fd:e1:a8:5f:9b:99:49:cc:ea:49:55:db:93:
         6d:81:fa:97:c4:61:8c:68:c1:fa:27:14:89:0c:58:2a:6d:4a:
         2e:be:3b:3f:20:05:d3:2b:18:f2:95:4b:d4:ec:e0:ef:ed:0b:
         32:78:e4:45:1c:74:c0:e2:a4:5d:5b:9f:e7:90:ba:43:ea:63:
         6c:00:05:9f:58:c4:3a:a4:08:09:74:2c:13:4d:7d:3f:09:69:
         0b:4e:3b:e2:1d:79:1a:10:1e:58:bf:9e:72:a1:1b:f1:42:55:
         fe:00:32:d9:cd:c1:ac:f0:d7:b6:bb:65:7f:a5:fb:17:c5:75:
         3e:af:e6:b1:d5:b3:1e:31:0a:a7:ce:cf:53:45:91:e6:96:07:
         b6:80:dd:cc:03:87:32:bd:4f:67:de:b8:96:31:8e:ae:06:d1:
         9b:26:78:f0:a0:26:7e:49:37:57:2d:46:0e:1a:ee:c3:ea:c6:
         c4:0b:66:75:ed:86:9a:d7:05:37:b3:8f:a2:af:c9:74:3b:d0:
         eb:da:48:9b:f9:e6:f6:2d:17:2e:2b:c7:e2:bb:1f:31:21:b9:
         69:e3:9c:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0631ueqMcZSYNiMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
YzJkZjdjODUtZmRlYS00NzNlLTk2OGUtZGNhY2ZlNTBiM2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY9pHNVbslegnrV9H2sOZgkg6qwWkS26kIkX
3yAWxzPMmPTI+K1qgBncJ9VAobH3KR4dYToXO3SSNiMyoehYRQWbeMmN0SFoNNgs
9m4Kvd6GDMLMg8Lzu2UHqf8EO+g0DfD8T7QPx5rM5F/DMtZaI2lpagqD92UKJINe
07Vy7ImFBiGliY0MpaIBa9r4v2apZ82c/qSyMfqhBMy/6fsBoKfLqjVrLb9L/MnQ
/ym2CPX2GFvLLmCtz4mLMerXtlnCpk0Uvh9B8GpgkWWv3TIh+MCk7eSNunv3x7sY
kM/qpgdSlbk4RCY1F/eUrOQXByumwForbqK2Dlp8t4m7Kj/mtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZMCQXInC6mAqG9arZnnsYxUuCWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDM5MjU1ZTQtYzlmYi0z
NWE1LTgxODQtNzcyNTQ2NjY2YWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQVTdV/ZWxnvtPpOzM/i8XioBTsGGOC6q1/W2+NAbZZRXl1lOc1/Kq3
/eGoX5uZSczqSVXbk22B+pfEYYxowfonFIkMWCptSi6+Oz8gBdMrGPKVS9Ts4O/t
CzJ45EUcdMDipF1bn+eQukPqY2wABZ9YxDqkCAl0LBNNfT8JaQtOO+IdeRoQHli/
nnKhG/FCVf4AMtnNwazw17a7ZX+l+xfFdT6v5rHVsx4xCqfOz1NFkeaWB7aA3cwD
hzK9T2feuJYxjq4G0ZsmePCgJn5JN1ctRg4a7sPqxsQLZnXthprXBTezj6KvyXQ7
0OvaSJv55vYtFy4rx+K7HzEhuWnjnNs=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:33 2025 by rpki-client