Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa
File:                     0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa (raw, json)
Hash identifier:          FFZa+hgpp9qaGnFxrfB+F5QMKvuQQSsOFnKoc9SeanU=
Subject key identifier:   72:3A:D3:7D:02:8C:43:36:83:25:25:09:90:28:B5:E8:EB:A9:D0:74
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849D42FB3A84741C92342081960
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     3356
IP address blocks:        20.134.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b3:a8:47:41:c9:23:42:08:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=18d47422-2ad1-4731-9870-a63e646827ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d2:4c:98:4a:16:03:62:f0:2c:5c:87:0d:a9:
                    08:b5:f6:2c:92:47:1f:49:03:24:26:95:35:ce:d2:
                    81:fc:ef:82:4b:6f:11:01:e3:4a:52:2b:54:08:b6:
                    f8:60:8f:9e:a4:d2:26:e2:63:ff:b4:2c:6c:fb:0e:
                    52:4c:35:07:a8:13:9c:ee:aa:e6:a2:1d:73:5e:29:
                    35:1d:92:87:e0:c2:d8:03:c1:fe:fe:06:63:25:f0:
                    cf:1f:6f:2a:a3:65:62:17:20:5b:43:b7:2a:a5:4b:
                    fe:e8:6d:a5:c4:82:e9:5e:ac:d4:f4:c3:a5:fe:69:
                    f6:67:31:f8:82:31:22:ff:bc:96:1c:5f:15:7f:cd:
                    bd:4a:26:57:66:52:4e:cf:e4:7e:a9:86:3f:c4:64:
                    a4:f6:2d:f5:c9:71:67:55:6d:94:9a:92:7a:99:b9:
                    cd:e9:4e:b3:a4:08:42:93:ae:16:b5:f4:64:8b:83:
                    5b:61:1c:dc:d7:39:bf:26:cf:5f:c9:83:33:89:bd:
                    72:a0:96:b3:1f:4c:9a:29:5c:8c:86:98:c0:3f:3f:
                    41:ff:f0:ee:09:71:c5:12:b5:55:ac:33:0c:87:d1:
                    3a:69:14:71:66:d2:d9:40:be:30:71:2b:1b:45:38:
                    e2:75:b7:e9:8f:11:35:82:35:31:8a:8c:36:83:a6:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3A:D3:7D:02:8C:43:36:83:25:25:09:90:28:B5:E8:EB:A9:D0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ece4181-ea12-39c4-8b47-53d2f4f2800c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:77:e3:d2:0c:f6:80:cb:ac:d0:fc:11:58:99:06:57:8c:03:
         0a:fc:44:b2:d0:04:9a:6e:7b:d9:15:ca:dc:27:ac:44:8e:6d:
         d4:30:f7:78:f1:dc:62:42:d9:0e:e0:56:47:5c:3b:46:0c:d6:
         45:d8:c3:49:94:d6:9a:61:6d:be:2f:18:38:d7:f4:e7:d8:38:
         fd:e7:42:16:ba:ca:a0:5d:23:c4:a0:68:c3:df:9b:8a:2f:fd:
         4f:1c:fa:a6:7a:b1:a5:39:f6:d9:f1:a0:f9:a3:7f:43:66:90:
         bb:24:ad:89:bd:f8:b5:df:ba:fa:b2:fd:cb:44:da:05:2a:37:
         00:2f:e8:bf:61:de:72:ba:38:f6:76:ce:7e:ef:1f:46:9c:7a:
         bb:a7:74:f4:50:85:a7:6b:47:8e:cb:a1:1a:33:75:03:18:54:
         f5:1a:b2:c6:7b:cc:93:e6:7c:99:c4:a4:49:32:3f:ff:71:28:
         b6:09:82:b7:53:11:5e:7f:85:e6:78:25:f2:a3:cf:fe:28:d3:
         f1:30:3c:11:b5:ba:e1:ec:2b:dd:11:af:11:a6:fa:3d:06:11:
         40:bc:93:a4:c5:78:89:92:af:47:cb:6b:f6:73:7e:5e:76:aa:
         d3:cb:aa:47:df:94:5f:19:f8:ce:e5:a0:90:a8:39:90:e7:0d:
         e5:50:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:07:04 2025 by rpki-client