Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa
File:                     552f37d1-55ae-3591-bc00-063e37bf73cb.roa (raw, json)
Hash identifier:          cKQNbamW3wyU7S1zH4ZL4CYJJ+q159e+8eu9WXPyrZU=
Subject key identifier:   18:98:92:98:D0:F6:71:A6:59:F5:32:38:D4:71:5F:89:52:BF:BD:AE
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584734C79B616701A26570B470C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     203
IP address blocks:        20.134.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:9b:61:67:01:a2:65:70:b4:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=72249f25-a255-4b0e-9566-aeeef15dcfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d8:34:4a:95:77:00:af:7b:09:64:9a:84:27:
                    a2:b8:78:91:69:e7:22:80:48:49:78:5c:98:ac:34:
                    5f:58:aa:f5:cf:d8:87:d7:8b:83:05:70:c5:e8:75:
                    c5:fa:70:76:7c:36:e3:04:06:79:eb:91:e5:59:4a:
                    46:fb:10:e9:e3:b0:e6:4a:a6:ca:9c:d0:d4:b8:07:
                    8a:1c:41:67:6c:75:68:80:93:3e:3f:e8:9a:f5:99:
                    54:95:d2:30:23:46:4f:29:ba:45:0e:b6:e8:c7:bd:
                    f6:2c:37:35:cb:e8:73:b7:d3:4c:22:0e:58:35:f2:
                    80:f2:30:26:ee:14:fc:a0:35:bc:ff:6c:b5:37:78:
                    d4:8d:26:7d:dc:03:7f:90:df:af:c4:4a:af:4c:94:
                    f8:2b:19:c0:cb:d1:9b:07:ac:33:75:73:07:b5:67:
                    70:8f:6c:6c:f6:fb:7c:16:2b:d2:d5:9e:57:f1:65:
                    15:2e:8b:22:77:18:85:36:ed:a0:5f:42:ff:57:f9:
                    75:53:03:98:1b:c2:c4:ab:4c:7a:c0:7e:c6:16:c7:
                    08:30:f4:61:f8:20:8c:58:82:a8:5f:ab:52:2f:96:
                    10:89:42:96:64:0b:7e:a2:53:c3:44:fa:22:c3:df:
                    75:1f:0d:6f:ea:60:11:2d:12:33:33:a8:16:0b:c0:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:98:92:98:D0:F6:71:A6:59:F5:32:38:D4:71:5F:89:52:BF:BD:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/552f37d1-55ae-3591-bc00-063e37bf73cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:77:3e:6c:5d:5c:1f:a7:07:59:16:74:68:2a:f5:33:60:0f:
         47:8d:1c:b4:e5:49:5e:32:15:bd:ae:b5:54:c1:35:ee:d0:25:
         bb:32:c2:01:5e:08:14:ac:bb:f3:e6:5d:c7:77:d2:04:01:85:
         28:7f:14:1e:20:3a:db:2f:7c:7a:d2:39:b8:2c:b7:d7:7b:9b:
         2d:0d:ec:e4:19:e6:20:e7:b0:5e:0a:81:93:1b:d6:bd:f1:4b:
         44:5a:dd:0b:39:9c:78:7f:be:07:ca:bb:28:6b:23:ba:30:38:
         0c:01:0c:e5:89:3a:61:92:2b:44:a0:2c:ac:2e:4c:7e:7b:2c:
         18:2e:f0:07:28:4f:98:98:ef:3b:92:b5:d4:0d:4e:4d:4a:c2:
         01:66:62:c9:6c:24:eb:68:28:d1:cc:c2:ce:7f:ca:24:6e:5a:
         44:53:f8:85:89:ae:55:b1:45:16:f5:8e:e8:6d:05:29:2f:76:
         69:77:1b:3a:7b:f9:6f:3f:74:08:3c:6b:a8:cc:e0:67:ba:b8:
         50:d0:75:cb:ef:3e:16:4d:25:d5:80:c7:d0:fc:5d:31:c3:51:
         09:98:4b:62:95:25:be:34:05:9c:de:7f:23:81:d6:7f:bd:de:
         75:b3:9c:61:04:cb:39:0a:00:1e:64:8e:0c:2f:7d:79:99:16:
         d5:80:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org