Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa
File:                     0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa (raw, json)
Hash identifier:          tMK/1VQI643T4bxCZsKvvWOVGhy10gW8a2jhxuAKvZk=
Subject key identifier:   62:87:45:75:AD:1F:5F:CB:26:10:41:1C:28:57:96:DD:ED:B2:1E:C6
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584A0C056C33DC406E907AD516B0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     4237
IP address blocks:        20.148.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6c:33:dc:40:6e:90:7a:d5:16:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f7029cd2-efe4-4823-9131-07faaae27876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:3a:b5:09:03:34:86:5a:84:3e:78:b0:c7:
                    69:c4:1a:33:d8:15:61:67:61:68:83:da:c0:98:56:
                    7d:cc:4f:c3:37:af:d6:5b:c2:25:46:a6:75:81:a7:
                    97:41:ed:5e:69:3e:da:69:b1:45:1e:51:0f:f5:dd:
                    af:a7:e6:28:35:0c:eb:7a:55:6a:ea:d6:3c:c9:04:
                    b0:3b:f6:8f:2d:d3:ce:69:74:77:ad:36:cf:ba:e9:
                    fa:bb:be:e5:d6:5b:17:0c:d5:36:c8:ab:19:c1:6a:
                    4c:62:e1:0a:9a:28:b3:bc:52:2b:f2:fa:05:34:f9:
                    0e:2c:bd:3e:40:3d:94:c3:8d:79:09:9d:66:c0:b5:
                    5b:20:dd:15:10:b4:fd:2d:d5:52:12:e9:aa:83:3a:
                    0e:f4:f4:d7:97:61:a1:7e:34:2d:0c:7a:2d:7e:c4:
                    5b:7c:dd:7d:b1:6a:b6:8e:f1:13:96:76:6a:7a:78:
                    f1:7a:dd:02:31:cc:8b:26:d0:c0:b5:9a:91:98:ac:
                    fe:cb:b2:89:59:81:84:d1:1f:52:89:22:e4:97:72:
                    bf:7b:3c:32:7c:9a:07:4d:a8:b6:45:cc:67:d2:51:
                    02:d4:86:47:7d:22:ba:f3:e0:ee:e8:60:a9:87:9e:
                    39:08:22:d7:18:22:88:3c:2f:07:f7:e8:1c:b4:35:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:87:45:75:AD:1F:5F:CB:26:10:41:1C:28:57:96:DD:ED:B2:1E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.148.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:39:6c:60:8d:3d:53:49:64:d2:be:06:e0:8c:56:71:c4:
         72:2b:27:dc:99:8c:aa:c1:3d:c6:18:c5:2b:b9:31:fe:50:a4:
         57:c0:21:43:7d:97:70:42:49:82:57:73:f9:ca:ca:5e:69:8c:
         5c:b0:c9:76:90:3d:d4:8f:e3:58:fa:25:f8:56:62:97:29:2b:
         d5:71:49:5d:a8:0b:a1:65:15:2e:c1:78:a7:82:4f:3c:8f:90:
         2a:21:6f:d9:ba:09:b6:81:cb:c7:b8:cb:66:45:bd:29:06:0d:
         c5:4d:d9:74:bf:a0:82:dc:fa:60:ea:fa:72:78:68:a8:5a:59:
         d6:ff:2e:5e:32:ec:46:cc:9e:e7:08:91:e0:7f:05:b0:19:37:
         16:1f:92:1e:86:6d:c7:6c:06:1c:c0:9e:2d:a7:81:3b:13:69:
         4c:1a:a1:7b:23:7f:89:d2:b4:53:de:f6:19:da:bb:b6:90:42:
         bf:22:a5:d8:24:fa:64:ed:10:e9:28:a4:0c:61:be:75:f5:39:
         48:d0:37:af:de:1f:62:1b:87:26:c7:ee:11:62:c6:86:89:c0:
         6d:19:69:7f:59:c9:72:9b:b1:03:f7:14:25:5b:03:f8:6f:46:
         58:c7:e8:32:ab:b3:11:f7:8b:ab:cb:8b:9a:ec:48:90:a9:43:
         03:34:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:48:27 2025 by rpki-client