Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa
File:                     9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa (raw, json)
Hash identifier:          n2Im62a6AmtUA/GFeeTVRmsV2KYhfHACgdsdxtsbLCw=
Subject key identifier:   7D:A5:79:1A:C4:2A:33:4A:CF:B4:B5:B8:7E:E6:9A:31:77:81:CA:AC
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858499294A55E3FD9A2467F6E4780
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     203
IP address blocks:        20.133.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a5:5e:3f:d9:a2:46:7f:6e:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=4c5ed539-2f31-4edc-98fc-66295c50b2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:6a:63:d6:8b:39:de:bc:fb:aa:12:a1:1c:
                    80:bc:1b:dc:39:00:fc:f5:6d:1b:db:e8:7d:2f:91:
                    be:1e:b8:c0:0b:e5:04:ed:5a:46:45:c9:11:f6:fc:
                    d8:31:cd:69:80:38:f2:db:b8:47:82:35:57:95:93:
                    ef:0b:65:58:c0:8c:17:2f:27:b0:87:15:63:66:ae:
                    45:31:9f:03:b1:f0:d9:51:65:df:27:fc:b9:78:a1:
                    73:49:25:ef:ec:1f:48:11:6f:32:0d:32:11:17:6c:
                    41:0a:25:7f:57:75:55:ea:2a:21:09:83:ad:1c:9f:
                    53:43:c9:33:ad:72:21:fa:66:51:58:78:69:9a:56:
                    af:32:1f:85:63:02:00:d5:25:db:9d:02:58:b1:7b:
                    28:cc:49:5c:56:8c:d3:51:ed:2e:65:97:1d:a2:59:
                    9d:62:6c:76:0b:83:25:d7:bc:48:1d:ac:5f:c4:40:
                    36:86:c2:4c:99:2a:1a:7a:59:76:67:26:89:40:45:
                    b8:19:ab:f9:a6:50:c4:82:0f:59:2f:61:05:2c:f1:
                    d4:b9:5a:83:b4:40:1d:a7:3b:fa:f6:53:cb:aa:c0:
                    6c:1c:7e:db:2c:39:7c:b3:3d:8f:17:19:37:73:c1:
                    3a:c9:64:ce:f8:3c:ab:15:2d:cc:ba:8f:eb:48:3b:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:79:1A:C4:2A:33:4A:CF:B4:B5:B8:7E:E6:9A:31:77:81:CA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.133.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:be:31:6d:33:fd:06:49:8a:d4:bd:f6:a6:2c:9c:c8:f4:
         ea:6f:5b:96:d6:5c:27:d5:9e:c7:ba:91:27:9a:7a:81:87:71:
         3e:61:07:29:84:0f:ae:f2:fe:cd:90:62:a4:3f:22:c9:6c:46:
         4f:a2:02:b8:51:4b:67:62:eb:00:82:f8:65:10:34:95:d1:0b:
         24:4a:c9:61:3f:65:fe:2c:8c:05:8a:52:54:4e:be:16:60:59:
         97:99:1a:f7:c3:ff:fb:57:f4:02:7a:2f:e7:35:b6:05:9c:de:
         ad:df:0f:0d:63:89:5c:86:a9:aa:de:0b:b2:a5:23:00:6f:65:
         46:89:4c:05:34:d8:b9:b9:23:34:f6:66:fa:fe:d8:7a:24:46:
         5a:10:37:3c:c6:5a:32:de:2c:cc:1b:76:19:7d:b1:d9:98:bf:
         00:c7:3f:04:de:fe:51:15:14:42:f5:40:c5:ba:b7:2f:09:da:
         09:2a:f2:f2:b0:aa:a6:b4:c2:4e:fe:51:21:1f:76:43:1c:4a:
         06:de:f2:ea:e6:bf:b4:6b:e3:10:1e:68:ce:11:04:3b:f3:71:
         b9:e8:ee:ed:74:8f:b2:9f:e3:d8:f9:f7:91:0c:e2:1a:83:f0:
         97:d8:60:49:3e:c1:d3:e3:8b:ba:ad:7e:fc:79:89:6a:07:08:
         87:7a:90:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:25:03 2025 by rpki-client