Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa
File:                     552f37d1-55ae-3591-bc00-063e37bf73cb.roa (raw, json)
Hash identifier:          hzpxASXXdz41owejZFkCRsIs8l5HZpisAHFjMK8IRNU=
Subject key identifier:   49:11:8C:30:CC:A4:BC:7F:24:3D:43:8A:91:B0:7A:ED:72:92:D4:B2
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584AB4EB7CF0BD51EBD77D4FE580
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     203
IP address blocks:        20.134.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7c:f0:bd:51:eb:d7:7d:4f:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=f5d5a455-ce11-41da-9d23-58c8767ae4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:44:6c:2f:f2:f8:8c:a0:85:a6:d1:a8:cf:
                    df:4e:9c:9b:3a:1e:58:7b:39:de:69:50:9a:3e:48:
                    c4:5e:b0:7e:2c:dc:2f:41:aa:27:78:13:54:86:9e:
                    5e:5f:6e:fc:a9:0c:1f:2b:9c:a3:5f:6e:dc:24:cc:
                    b4:64:60:6d:69:12:29:18:c6:ec:87:83:be:11:84:
                    bb:dd:39:84:b8:cf:80:8f:a4:c3:10:7c:67:72:17:
                    3a:df:8e:fb:3b:bb:36:fe:65:1f:5d:f5:82:1a:1f:
                    31:50:54:e9:4d:6e:63:16:73:c7:71:13:7f:71:a7:
                    98:36:30:50:1f:99:82:91:54:0c:97:d0:92:fc:1c:
                    67:57:5c:18:45:fd:fd:9f:a8:31:6a:34:b7:af:bd:
                    0a:c8:42:fc:41:15:04:d9:60:43:13:b3:d6:5b:0b:
                    48:ec:8e:81:95:05:6f:89:fd:87:59:cf:b1:05:8e:
                    7b:a9:07:76:f8:df:dc:32:15:e6:13:d9:47:0e:89:
                    63:54:85:58:8a:46:1f:ef:cf:58:83:04:b7:93:06:
                    7c:32:a4:0d:24:d3:88:7a:7b:e0:4e:1e:8a:a8:1b:
                    59:f8:7b:8a:a3:47:fa:b3:25:67:b0:8d:9e:c0:f9:
                    5e:f5:2a:09:47:c4:30:2c:76:1b:b6:4d:f8:73:dd:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:8C:30:CC:A4:BC:7F:24:3D:43:8A:91:B0:7A:ED:72:92:D4:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ae:cc:65:e9:fd:db:b7:93:7e:24:64:e5:bc:12:21:c0:0c:
         01:68:9f:39:cd:8c:87:4b:d7:4c:1c:80:d3:4d:61:43:e4:eb:
         a5:da:02:71:b7:b6:25:b2:11:2f:a4:2f:55:5f:37:d7:91:11:
         98:b0:95:76:3e:07:b5:49:05:c0:ce:48:be:3d:57:d8:e6:39:
         47:10:22:ff:04:cf:fc:13:37:6e:16:f4:29:d4:5c:43:ab:21:
         31:3b:af:c4:d5:d8:f0:09:b2:27:6a:61:e8:8d:a8:96:31:93:
         08:c0:66:7e:cb:11:c2:b1:7f:b9:2b:6c:d0:61:dc:a0:c6:73:
         bc:17:1e:18:c4:86:e5:b2:27:b4:e1:23:36:b2:49:8b:54:d8:
         a0:25:96:c0:9d:85:ec:05:90:33:7c:4a:f8:36:72:15:1d:16:
         f7:6c:60:08:2e:67:da:1b:42:b0:75:c8:66:27:a3:6f:bb:6d:
         75:db:f0:6f:29:0a:aa:cc:7a:08:2c:34:51:84:2b:a2:84:bd:
         25:00:20:01:2f:50:ef:63:87:09:f2:11:3a:3d:93:ac:93:fa:
         0b:16:6d:4f:7b:fb:a0:3e:27:8d:59:21:cd:1b:2b:01:b0:08:
         8d:43:90:06:09:c7:b6:64:ee:ed:77:80:65:10:aa:ba:d1:00:
         31:2a:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:59 2025 by rpki-client