Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa
File:                     094276eb-a22a-3e33-8c6d-37f68e1f7695.roa (raw, json)
Hash identifier:          7rnBpIeDPfUjgimaDr4bmvegJvx2SEmvu1r2khP+X+Y=
Subject key identifier:   48:DC:35:7B:52:4A:ED:AB:09:CD:49:D5:C7:59:40:72:BB:6F:A5:4E
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849D6FA44D224F16B21CB506600
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     203
IP address blocks:        20.134.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:44:d2:24:f1:6b:21:cb:50:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=fb1fe7d9-b741-44be-a308-dc5d3d14f8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f1:2f:cf:9e:f0:67:a5:ab:e2:49:48:a4:ab:
                    8a:c1:0d:ae:75:cd:db:ba:8e:1e:e5:c1:3f:5d:b8:
                    81:ae:58:31:23:34:0c:a7:4e:1c:65:1b:14:90:70:
                    41:68:09:74:9c:46:52:97:c6:d8:41:eb:ba:5b:da:
                    40:60:7e:a7:d1:53:5e:9d:1a:e2:b6:a7:2a:47:bb:
                    b3:fb:16:fb:9f:7d:f2:5d:99:25:53:ed:73:c1:3b:
                    d5:47:4e:57:7f:ce:af:52:8d:90:64:31:ff:98:d2:
                    4d:6a:63:17:ad:32:1a:1c:4f:f4:c9:9b:5a:99:89:
                    40:31:03:ee:24:cb:bb:c3:16:ea:d6:66:15:ea:13:
                    22:ae:a4:b7:eb:11:45:ac:1b:c4:3e:a3:22:bb:d8:
                    61:24:d1:17:5e:c9:3c:0c:0e:63:df:c4:c3:d0:9e:
                    61:ef:c6:de:5c:04:b2:57:e3:41:b7:b3:cb:29:ee:
                    8e:18:8c:17:01:65:63:25:72:9a:e4:05:0e:f8:82:
                    54:94:5d:91:d7:8d:d8:7a:b4:f4:b2:77:c3:cb:8b:
                    a7:0c:b2:d1:18:97:ca:ee:03:7d:dc:e0:9f:08:f5:
                    df:33:b1:cd:6a:14:7d:ee:2a:92:ec:ee:ae:75:b9:
                    7c:18:f5:bd:03:7c:dc:63:20:55:b8:ef:cf:ee:8f:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DC:35:7B:52:4A:ED:AB:09:CD:49:D5:C7:59:40:72:BB:6F:A5:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/094276eb-a22a-3e33-8c6d-37f68e1f7695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:82:cf:e8:85:81:1d:e0:b8:99:af:53:75:5b:e7:d7:ab:
         e8:3a:ef:2e:7c:d4:dc:15:1a:d6:a1:bc:a1:f7:cb:33:c4:72:
         5c:52:58:30:e9:ff:83:83:54:cd:33:e2:68:b0:c5:da:4f:84:
         d9:d3:0f:37:d1:57:8b:da:cc:f9:9f:a7:55:2b:71:88:49:f2:
         2c:74:1f:e6:e7:55:8b:70:a3:5e:ab:9a:75:e0:ae:36:2a:f9:
         b4:1d:44:f8:01:2a:08:66:2a:68:af:06:55:64:dc:d3:5f:65:
         25:22:e5:1d:e5:2f:9e:70:91:54:7f:f9:d5:5d:bb:6a:66:2e:
         26:3b:08:f4:fd:6d:f7:70:75:62:2f:40:11:35:5c:32:54:c8:
         8d:83:e1:2d:9f:58:44:df:36:99:4a:07:63:05:7a:b0:40:aa:
         7b:d3:9f:7e:db:1b:e0:28:70:ca:58:ee:74:64:aa:e2:7c:ca:
         63:a0:e7:56:39:5f:e5:3f:9e:fa:23:4c:12:83:bc:bf:10:a4:
         9d:21:0d:c0:af:2d:ef:f1:fe:52:d7:2d:ec:bd:2e:0e:73:bc:
         1f:99:7d:5c:d8:8c:f3:a9:a6:01:97:47:4e:7b:5e:72:72:14:
         03:5b:30:05:ea:0d:49:21:c1:4e:7a:45:fe:95:ab:fc:71:6b:
         53:67:d9:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kTSJPFrIctQZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk
ZmIxZmU3ZDktYjc0MS00NGJlLWEzMDgtZGM1ZDNkMTRmOGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvEvz57wZ6Wr4klIpKuKwQ2udc3buo4e5cE/
XbiBrlgxIzQMp04cZRsUkHBBaAl0nEZSl8bYQeu6W9pAYH6n0VNenRritqcqR7uz
+xb7n33yXZklU+1zwTvVR05Xf86vUo2QZDH/mNJNamMXrTIaHE/0yZtamYlAMQPu
JMu7wxbq1mYV6hMirqS36xFFrBvEPqMiu9hhJNEXXsk8DA5j38TD0J5h78beXASy
V+NBt7PLKe6OGIwXAWVjJXKa5AUO+IJUlF2R143YerT0snfDy4unDLLRGJfK7gN9
3OCfCPXfM7HNahR97iqS7O6udbl8GPW9A3zcYyBVuO/P7o/TPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjcNXtSSu2rCc1J1cdZQHK7b6VOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDk0Mjc2ZWItYTIyYS0z
ZTMzLThjNmQtMzdmNjhlMWY3Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIYCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIawgs/ohYEd4LiZr1N1W+fXq+g67y581NwVGtahvKH3yzPEclxSWDDp
/4ODVM0z4miwxdpPhNnTDzfRV4vazPmfp1UrcYhJ8ix0H+bnVYtwo16rmnXgrjYq
+bQdRPgBKghmKmivBlVk3NNfZSUi5R3lL55wkVR/+dVdu2pmLiY7CPT9bfdwdWIv
QBE1XDJUyI2D4S2fWETfNplKB2MFerBAqnvTn37bG+AocMpY7nRkquJ8ymOg51Y5
X+U/nvojTBKDvL8QpJ0hDcCvLe/x/lLXLey9Lg5zvB+ZfVzYjPOppgGXR057XnJy
FANbMAXqDUkhwU56Rf6Vq/xxa1Nn2Zw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:38:30 2025 by rpki-client