Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6a17064-43ef-3884-9f43-86b2251d1184.roa
File:                     e6a17064-43ef-3884-9f43-86b2251d1184.roa (raw, json)
Hash identifier:          wrtQrzJJrc/j0JBm+rFNbsIQ71fK4v1bYOB+6jnIB/Y=
Subject key identifier:   9F:D7:9B:AA:34:25:7C:8B:CD:30:06:BE:E8:7F:21:78:57:5B:BE:21
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849D42FB45311CEADC453B49800
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6a17064-43ef-3884-9f43-86b2251d1184.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     3360
IP address blocks:        20.139.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b4:53:11:ce:ad:c4:53:b4:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=aacdec3b-7135-4de2-a02f-dd61a08919b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:09:90:56:7a:3e:c7:a9:cc:25:6f:3a:e5:8f:
                    ad:a9:e6:ff:a0:40:c2:d3:64:ce:03:3e:9b:2c:2e:
                    ba:9e:90:12:04:7f:e6:82:c0:99:dd:ae:25:e0:d4:
                    0a:46:05:00:07:51:b8:ae:d4:a6:5d:1e:9c:1e:b8:
                    72:64:98:2d:31:e3:c0:43:e3:ec:ca:18:82:93:77:
                    1a:f8:19:11:23:fd:38:8e:db:b3:64:97:b4:e8:da:
                    cb:a4:8c:6a:bd:20:67:8b:fe:de:12:43:eb:66:9a:
                    74:73:54:3c:36:18:72:4d:62:35:1c:68:ac:7b:f9:
                    e9:1c:af:31:a4:14:64:85:bb:79:61:c6:7e:94:be:
                    9b:e0:6b:ea:e7:dd:2c:e9:8a:b8:d7:3e:45:3b:bd:
                    27:d5:14:de:8d:01:d8:c8:0a:4f:4b:36:3b:8e:59:
                    cf:5f:ed:04:8e:e8:65:46:72:5b:9c:3b:85:12:40:
                    8e:d5:d4:18:ae:42:30:7d:ab:f1:44:10:fe:de:79:
                    1a:02:84:92:e8:c1:e9:e4:4a:b0:8c:5a:68:40:a1:
                    60:52:6e:02:ce:13:02:f5:46:8f:35:23:66:e2:a3:
                    47:60:02:34:5b:0f:16:d8:8f:2c:14:67:07:b9:04:
                    c0:2e:b3:27:84:89:d1:d5:ed:1e:55:87:9f:ca:35:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D7:9B:AA:34:25:7C:8B:CD:30:06:BE:E8:7F:21:78:57:5B:BE:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6a17064-43ef-3884-9f43-86b2251d1184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:83:b9:59:0e:71:9a:a9:21:39:82:dd:87:c9:03:9a:c6:
         05:d1:e7:c6:f1:04:eb:72:fd:0f:52:e4:17:ae:9b:b0:a0:77:
         1b:63:21:c3:79:08:ea:d8:f0:dd:77:2e:60:bf:ba:e7:cd:cf:
         6e:f2:2f:2c:85:1a:7a:78:d5:f5:9f:50:97:e3:5d:19:87:8b:
         db:0f:ec:2b:d9:1a:9a:bf:b7:d5:9a:6b:c2:cb:8f:ec:67:b9:
         bd:3e:b0:6f:95:01:05:32:6e:e9:4e:2c:c7:19:87:30:e6:ee:
         26:cb:dc:a6:6a:39:93:b5:64:cd:74:9a:18:99:13:15:26:bd:
         4f:cc:1e:08:6a:f4:a1:3e:b0:0e:0d:09:be:77:53:28:37:43:
         f9:25:08:b8:59:80:1e:55:da:f2:89:ef:94:46:7a:ba:07:ac:
         92:01:31:70:5c:ff:00:79:dd:5a:2b:cb:c8:fc:37:48:ec:53:
         4f:0d:f1:c2:02:b1:c5:10:cd:c0:6b:0e:8f:ed:b4:30:6c:a9:
         9a:02:0a:f5:b7:f6:22:e4:ba:3e:a8:1d:50:90:13:5d:c6:d3:
         a6:f2:95:29:a2:a9:22:4f:55:54:0d:16:ac:09:ad:8e:9e:7f:
         81:df:66:f3:d9:3a:20:ea:b0:08:c8:20:06:e0:6c:92:2c:a2:
         38:5c:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:47:56 2025 by rpki-client