Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/caaaeab8-23a1-35ce-b633-2f98c2774e63.roa
File:                     caaaeab8-23a1-35ce-b633-2f98c2774e63.roa (raw, json)
Hash identifier:          F447TMn1SdAJ73XyT7cSCi1pZyFYIw0QEgbaI6bdhDQ=
Subject key identifier:   9F:24:0F:7B:F8:89:CF:7C:4E:0C:D5:E3:9F:FF:C7:73:AF:14:A8:76
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F43285849A61F48AA59E875AC861BB200
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/caaaeab8-23a1-35ce-b633-2f98c2774e63.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     834
IP address blocks:        134.202.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:48:aa:59:e8:75:ac:86:1b:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=a6908230-7be5-4197-b264-1674730d0bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:60:4c:f4:17:15:45:1c:58:16:6d:ca:70:
                    df:24:70:44:71:3a:38:49:a9:45:fd:a2:93:fc:f9:
                    56:55:d3:35:09:52:f4:9d:c4:d7:76:96:26:5d:70:
                    80:c5:d3:00:b0:5c:db:a4:f6:18:5b:75:40:6e:e9:
                    15:d5:9e:99:df:ef:b9:b1:69:f8:df:ab:f5:0f:87:
                    51:ba:43:a4:e1:ff:09:ba:7d:55:bf:c9:b1:92:11:
                    e9:f5:aa:3f:77:65:5b:d6:f8:4a:1c:c1:a9:01:c7:
                    26:19:92:a7:21:3f:1f:58:e4:57:fb:cf:88:97:0b:
                    32:a0:c8:9e:f4:a9:e9:47:83:be:c8:32:dc:be:2f:
                    15:20:d2:a3:0c:31:c1:1d:a4:62:12:a2:ca:c3:68:
                    2e:4e:24:e3:3f:41:31:e9:8c:bf:25:5f:89:a5:51:
                    bf:9f:30:50:13:a1:54:96:b7:1f:86:09:ec:d6:c5:
                    85:d4:23:7a:07:48:f5:70:20:e0:a0:82:58:90:b3:
                    e9:34:01:ea:8b:c4:b3:e3:1d:71:15:fa:a0:43:9b:
                    b8:fc:17:09:a9:38:d3:f5:96:4d:81:8d:32:d1:8f:
                    06:f2:c5:58:1c:7e:4a:7d:28:98:a3:c4:76:59:24:
                    8a:93:61:83:7b:5a:5a:23:84:05:31:a1:08:fc:d7:
                    d6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:24:0F:7B:F8:89:CF:7C:4E:0C:D5:E3:9F:FF:C7:73:AF:14:A8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/caaaeab8-23a1-35ce-b633-2f98c2774e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d3:20:ab:69:59:9a:d1:41:84:85:16:2d:83:2d:f4:69:ff:
         0c:77:c4:e6:df:15:69:b2:86:c9:61:d5:9c:8a:fc:a8:24:28:
         1c:20:45:7b:ab:41:5f:cb:66:88:f7:02:3b:63:1d:f7:32:af:
         f2:ec:d0:b4:93:74:06:fb:cc:30:4a:69:7c:8c:34:27:25:6c:
         6b:a0:87:49:fe:24:28:fd:ad:e3:62:f0:e4:b4:38:ce:89:ee:
         04:6b:88:0d:9c:90:fc:18:e3:e2:b6:4b:a8:24:f0:b1:ad:3a:
         e8:05:0e:09:bd:ac:fa:e8:33:da:69:dd:1a:12:c8:82:d9:b5:
         31:55:55:68:07:29:61:c5:e4:1f:4f:96:e2:94:cb:20:c8:d1:
         1e:64:40:60:c4:8d:c7:01:6c:f9:74:d7:49:a9:a8:bc:e5:58:
         60:7a:61:ad:81:fa:00:82:ae:c0:c7:03:03:30:16:21:2b:36:
         33:de:2a:c9:34:96:67:2f:28:1a:19:84:36:91:71:80:4a:8d:
         1a:ca:78:a4:14:46:16:17:03:76:f7:0c:db:44:b0:ec:ed:75:
         3a:2d:2b:bd:8c:24:27:70:25:f5:65:ed:27:b3:78:95:4a:5b:
         ab:92:03:f0:1a:ff:26:0d:4b:21:62:3b:85:07:8e:c4:0a:95:
         18:95:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:09 2025 by rpki-client