Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6a17064-43ef-3884-9f43-86b2251d1184.roa
File:                     e6a17064-43ef-3884-9f43-86b2251d1184.roa (raw, json)
Hash identifier:          hRKga5KYPSk9Cc+9Pz0wLYHc2tq3aJrf7KQDMIsBDNQ=
Subject key identifier:   29:D3:4C:65:58:49:49:B3:A5:89:0F:B5:9B:FD:7D:2C:46:75:73:FD
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584AB4EB7DCD5F14EA2F4C75E200
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6a17064-43ef-3884-9f43-86b2251d1184.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     3360
IP address blocks:        20.139.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7d:cd:5f:14:ea:2f:4c:75:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=dc3a8034-389f-4b25-9569-7ab2d8fb2d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:d8:79:55:75:e6:72:3c:76:26:40:48:4f:
                    76:30:9e:2c:b0:57:0b:1b:40:20:e3:81:7b:47:8d:
                    fd:b4:48:d1:58:5a:6e:3d:96:99:90:6e:c9:8a:d8:
                    62:28:aa:b6:38:22:26:5f:be:fd:2a:6b:8e:8c:29:
                    ee:ce:b1:03:05:de:f9:b6:2d:09:02:41:7e:dc:88:
                    5b:99:b6:9b:e1:ae:c9:fd:a4:fa:36:34:04:d0:f4:
                    e6:ef:28:70:d2:37:a2:92:a6:35:92:63:06:b2:16:
                    52:a2:dc:4e:4a:32:ef:21:a4:31:f0:77:22:15:f8:
                    78:3a:45:4c:d4:aa:12:fc:cd:f6:c3:86:b2:d9:2f:
                    59:70:d9:3b:b8:9b:8c:93:59:44:6d:a7:11:50:ef:
                    01:54:e4:4e:40:39:0b:fb:27:d4:fb:bd:4c:78:b4:
                    31:3e:05:bb:8e:40:6d:dd:3a:01:2f:3b:4c:f6:f3:
                    14:d9:ea:57:8d:d7:8b:58:73:d2:28:2f:b5:da:1c:
                    62:ed:fc:65:2a:6e:98:c8:5c:95:8b:80:a6:e1:9e:
                    09:0d:16:a5:71:ec:1c:11:ea:e6:71:fd:5e:11:43:
                    4f:44:22:0f:2d:9a:4a:fa:60:2a:63:43:42:4b:b5:
                    29:17:0b:09:4f:70:0d:1c:6e:d2:e0:3c:91:03:54:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D3:4C:65:58:49:49:B3:A5:89:0F:B5:9B:FD:7D:2C:46:75:73:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6a17064-43ef-3884-9f43-86b2251d1184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:88:ab:f8:a6:ad:ac:50:7c:2e:43:21:1d:15:32:c7:c5:2e:
         72:5e:d2:2b:95:60:b8:d8:c2:c9:ea:d0:50:7f:13:9c:a2:38:
         17:6d:97:6e:28:04:10:a5:34:6c:27:d0:f0:f1:d8:fc:0a:2b:
         80:39:19:f8:51:ce:ca:35:1e:1b:fd:a2:f7:56:b2:6d:99:4c:
         b6:01:94:4f:c0:18:04:10:02:ed:24:53:f3:be:65:58:06:84:
         34:ad:7a:26:79:ff:2e:d5:3d:6e:f4:83:86:cd:73:6e:3d:53:
         c5:01:52:78:50:b5:64:a3:e8:83:61:df:87:7d:0e:09:a3:b7:
         94:f5:3a:4a:5d:14:30:a6:ac:68:5e:21:76:9d:ab:f9:2c:22:
         8b:5e:9d:68:39:73:f6:1c:47:33:9b:30:f0:16:b9:45:2c:44:
         2b:5f:9d:43:4e:fd:f0:46:ac:22:db:18:5f:2b:bd:c2:87:9c:
         fa:5c:f1:16:24:68:18:bf:f5:2e:28:40:c6:97:06:fe:a8:32:
         6b:09:91:5d:43:34:b2:45:e2:fa:7e:9e:86:81:4b:1e:14:2d:
         44:93:66:bc:18:26:0e:ce:3b:a3:f3:ed:40:38:49:6b:f5:ea:
         cc:b1:f2:96:18:18:de:d1:a0:1a:53:9e:45:25:38:40:b2:40:
         f8:52:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:42:08 2025 by rpki-client