Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3a563a23-f54c-3224-b20a-b6bd84e86fa1.roa
File:                     3a563a23-f54c-3224-b20a-b6bd84e86fa1.roa (raw, json)
Hash identifier:          kxx4N26GcZQIFO+sOJh85FLMJSVQENC7YI1Yel/4/40=
Subject key identifier:   80:A1:B5:8F:96:F6:8F:0B:7D:29:82:1D:1F:8B:AF:2D:FC:39:38:AC
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285845E49EB692F9ACEEA0D1685E00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3a563a23-f54c-3224-b20a-b6bd84e86fa1.roa
Signing time:             Thu 16 May 2024 15:10:10 +0000
ROA not before:           Thu 16 May 2024 15:10:10 +0000
ROA not after:            Wed 14 Aug 2024 15:10:10 +0000
asID:                     3360
IP address blocks:        20.132.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:9e:b6:92:f9:ac:ee:a0:d1:68:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 16 15:10:10 2024 GMT
            Not After : Aug 14 15:10:10 2024 GMT
        Subject: CN=8f55969f-94df-4910-8fc3-ed922b0d67e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:4e:bf:1d:71:3e:61:da:de:88:84:24:8f:
                    02:95:74:d0:2e:7e:dd:08:6f:99:19:a1:a0:97:57:
                    3b:d7:ae:18:3c:5a:07:a7:40:df:7c:c8:5e:6d:4e:
                    99:89:9d:db:d0:dd:ed:ac:6c:1b:f8:9c:a8:f6:39:
                    68:da:7b:08:fc:da:83:9a:c6:eb:2c:2a:c0:c9:57:
                    82:cb:18:22:d7:d9:4f:75:c5:2f:bf:09:43:06:ec:
                    fd:e4:ef:e4:38:65:59:5f:89:fd:7c:7c:e8:86:2b:
                    da:c4:9f:f6:df:36:34:8e:9c:09:87:cc:eb:4d:b5:
                    a2:98:20:44:bc:a1:e4:dd:a3:46:5b:0c:62:a6:d3:
                    90:08:8e:cb:6c:b3:a1:8a:29:c7:9a:cb:33:37:92:
                    60:23:ae:1a:c4:8d:ea:5f:1c:46:2b:64:ad:73:c3:
                    7f:e5:c0:01:74:76:4d:e2:0a:54:3b:5a:c7:f7:b2:
                    1d:32:2b:44:f7:95:b9:01:b0:5a:19:76:fa:96:18:
                    ea:bf:f3:4e:2d:3c:47:a4:04:a6:ab:b9:be:14:2f:
                    8d:ee:58:11:4b:69:57:9c:95:58:6f:26:9c:5b:c3:
                    de:86:e2:e2:d0:1e:ea:9e:5a:fd:31:d7:d5:8b:73:
                    5c:0f:69:de:93:0b:5f:02:3a:f7:11:2c:bc:99:64:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A1:B5:8F:96:F6:8F:0B:7D:29:82:1D:1F:8B:AF:2D:FC:39:38:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3a563a23-f54c-3224-b20a-b6bd84e86fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.132.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5a:8a:3f:83:3e:3e:58:ba:27:32:38:fc:5b:7c:26:68:18:
         ed:bf:e8:5a:ee:cd:85:3d:11:6d:09:52:16:2b:97:fa:bf:d6:
         d1:23:de:45:99:5f:a6:1e:64:26:4c:dc:0a:f6:c9:8c:ca:aa:
         f8:8e:7c:85:1e:68:2f:73:13:76:05:5f:b4:a4:86:04:1b:1d:
         1c:ae:cf:7b:4f:fd:22:5f:4f:06:f6:3a:a0:17:b1:95:81:d0:
         18:30:8d:ee:64:ec:f9:51:11:d5:37:fe:d4:de:85:24:2e:d0:
         6f:6e:9c:23:68:d2:8c:eb:60:b2:17:17:5c:b6:72:3d:03:40:
         26:f2:f3:b8:f8:8d:85:5f:2b:c5:ab:9e:48:41:f8:8a:86:8c:
         57:51:c2:f1:ac:b9:ab:e9:e9:3c:35:fb:25:6a:a6:b9:5f:8a:
         81:df:ec:36:3d:42:70:ac:d7:a8:bc:7e:30:c4:46:16:80:f1:
         6c:e3:52:6c:8a:46:90:57:f0:06:d4:68:66:27:8f:0f:e8:5e:
         58:6a:46:27:de:7f:73:d8:c3:6b:e0:7b:27:61:9d:cb:e1:9c:
         bb:9a:98:57:cd:ce:01:71:aa:27:99:57:48:6f:98:e3:e1:89:
         eb:aa:40:50:13:2d:43:37:89:2f:6d:c6:3e:12:ff:9b:b1:17:
         17:ef:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 02:49:59 2024 by rpki-client on console-ams.rpki-client.org