Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c193add7-7c7f-32cc-b611-e12c586e5ada.roa
File:                     c193add7-7c7f-32cc-b611-e12c586e5ada.roa (raw, json)
Hash identifier:          ca+qv+srv/2sU251+hjb6KJq/MNviewanaB94DDcyBY=
Subject key identifier:   AE:73:96:C0:FA:AD:50:F7:85:29:AA:03:E6:00:A8:28:32:19:A6:00
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584A9900CF18CC104A320AC20C00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c193add7-7c7f-32cc-b611-e12c586e5ada.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     3360
IP address blocks:        20.149.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:cf:18:cc:10:4a:32:0a:c2:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=6b5bdd92-651c-4009-bdda-63485d2ce888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:28:81:01:52:17:45:a3:0d:7a:68:88:af:
                    b9:5b:1c:48:40:18:43:3d:94:73:f8:af:86:b5:71:
                    b7:1c:14:3f:c3:c8:37:c7:4e:25:8e:f7:af:9a:3e:
                    81:ec:1f:69:dd:b8:bc:43:4a:0d:11:b6:1d:ac:dc:
                    35:17:33:e1:ce:0b:7b:e3:ae:97:c6:b6:78:30:31:
                    1c:18:77:1d:e7:b2:30:ba:20:74:79:c0:07:46:c1:
                    a8:15:fd:db:80:07:df:01:51:84:60:92:bc:69:83:
                    89:ae:ed:ac:a7:be:7b:be:df:6a:c2:78:b5:35:9e:
                    2e:40:99:8a:c2:f6:5c:50:e9:18:8c:2b:77:d0:8d:
                    e9:6a:bc:f4:5b:96:25:c0:4f:9c:dc:32:f2:19:0a:
                    2c:ec:a5:f5:ab:ae:86:cf:f5:7b:c3:70:75:90:02:
                    e5:0a:15:bc:a2:47:b7:ee:4d:12:68:3f:bf:f7:b7:
                    d8:32:c0:07:b0:68:c9:f6:97:67:52:75:3f:4e:8a:
                    19:c1:59:cd:6c:80:e7:fc:2f:e8:97:0b:f8:90:a1:
                    1c:b2:d7:4e:ed:95:07:69:a1:ce:b8:76:dd:b4:01:
                    2c:c2:ec:7a:8e:21:40:db:a3:d3:e8:0a:99:60:62:
                    aa:8f:e5:7c:68:ab:0c:00:ca:9d:d8:97:a3:78:68:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:73:96:C0:FA:AD:50:F7:85:29:AA:03:E6:00:A8:28:32:19:A6:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c193add7-7c7f-32cc-b611-e12c586e5ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.149.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:47:9d:da:c5:d8:e5:1f:d4:e3:11:d2:bc:5f:96:c1:dc:
         d8:e9:8a:b4:c2:3e:3c:0d:48:86:97:f0:e9:64:fe:a8:5d:80:
         81:bb:16:c8:5c:dc:87:2d:ef:ca:73:7a:d6:e4:8e:f9:aa:5f:
         0e:38:28:a9:c3:1c:b3:3f:a9:86:ad:8c:bc:7e:4e:4a:8d:ef:
         09:47:c6:97:28:e3:22:56:74:d6:b1:45:6c:85:4f:d6:cb:41:
         56:9c:59:fe:3b:19:ef:26:7d:56:74:0d:8d:f5:c2:92:e6:ae:
         7e:76:4d:90:c8:6a:f3:e7:04:e3:44:47:8f:fe:ec:70:04:d2:
         93:1a:61:be:4f:1f:3f:a0:4c:bf:90:c4:48:64:eb:a2:ba:75:
         a4:4a:57:a0:15:d4:c9:ef:e3:11:3e:df:0b:63:2a:51:04:15:
         b9:0e:47:f0:ee:54:3e:77:91:fb:f1:c8:e0:db:06:85:ed:3c:
         21:41:d2:0a:d3:c4:95:f2:c4:bc:6f:70:67:ae:42:7d:2b:ba:
         9d:c5:7b:69:b0:ce:a3:8a:06:e7:69:b4:4f:a1:a2:d1:89:15:
         42:16:ae:af:0e:11:e5:3e:c7:7a:c4:e7:7d:0e:07:53:25:cd:
         5d:39:52:17:7d:a5:42:a4:5a:c2:65:c4:6f:b8:19:c5:8d:fd:
         34:7e:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:44 2025 by rpki-client