Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa
File:                     59205f9e-be67-31b6-8b33-8d851a623090.roa (raw, json)
Hash identifier:          x/UV+rvv8X+d45hCQotsLWYHgi0NctNk4uxIPsWDpEo=
Subject key identifier:   75:73:6E:00:B5:EC:57:A3:6C:29:2C:8A:74:A0:4D:E6:65:7E:C7:D9
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849446947405E0DD35BADB64A00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     3356
IP address blocks:        20.134.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:47:40:5e:0d:d3:5b:ad:b6:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=e6c4cc95-7b11-4785-9903-56545cdc7419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:6a:35:6b:4a:aa:65:d9:c9:ed:ee:30:8f:
                    2c:55:53:5a:9f:8f:b1:65:49:f2:43:0a:c1:0a:72:
                    85:f5:2a:97:bd:ea:03:42:94:d9:8a:71:6b:55:aa:
                    d2:f7:a3:dd:26:4c:22:46:1d:08:46:95:cf:8c:d2:
                    6e:0a:56:91:89:af:ed:c8:8f:59:87:b9:96:e0:65:
                    f5:be:be:82:5e:f0:cc:d5:55:96:e1:d4:f3:2f:d4:
                    ad:aa:87:32:60:82:b8:b6:61:13:56:40:8f:4a:0d:
                    f8:76:e7:9c:26:6d:67:1d:9d:05:bb:99:d8:99:52:
                    f5:14:24:03:39:76:16:8d:4d:ed:33:61:f4:73:fc:
                    78:b2:c1:85:22:27:71:c6:e1:92:e7:b4:b6:dc:f4:
                    5d:9c:ec:b7:eb:fc:2b:e8:d0:12:f5:50:3e:4a:e7:
                    3e:d3:3d:f7:78:75:88:2d:01:ba:29:0e:2b:2e:65:
                    aa:54:b3:2a:0b:7c:46:f0:e0:b0:7b:15:7c:6f:59:
                    cf:6c:c8:61:22:5b:aa:f0:a3:ae:8d:f6:eb:98:3d:
                    da:2c:72:41:47:fd:5e:5b:3c:64:3a:fa:ae:a6:be:
                    a6:bb:c2:0c:00:82:86:ea:46:8f:26:03:d7:0a:5b:
                    31:e8:fc:11:44:19:2c:73:5f:17:70:02:c2:dd:ec:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:73:6E:00:B5:EC:57:A3:6C:29:2C:8A:74:A0:4D:E6:65:7E:C7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:4b:ab:7a:4a:50:0c:74:fa:47:44:fd:60:de:b2:fb:63:
         1c:0f:c9:78:03:eb:5c:ea:c2:91:68:0c:59:fe:c7:25:6a:4c:
         68:37:01:6c:e9:9e:1e:3a:47:3d:83:85:46:a3:a1:b4:e7:cb:
         f0:c8:2a:70:10:95:03:e4:2f:10:60:68:df:bf:f2:49:e6:16:
         5d:99:cf:1e:a4:56:5f:19:59:2d:62:7d:3e:eb:f5:fc:9d:9f:
         d7:a8:91:b1:42:df:50:a3:85:96:54:a1:c0:ff:d1:1b:bd:0f:
         5f:67:93:a9:5d:e1:57:ef:c9:29:d5:3d:92:86:f9:a6:a7:86:
         ba:09:36:20:50:9d:66:17:93:78:83:65:ff:5d:ec:f6:22:ca:
         e9:50:6d:11:2e:f6:58:2b:95:c7:dc:d3:13:f0:02:de:61:43:
         28:93:6f:49:f2:3c:e0:c9:a4:b5:0f:29:d2:f4:15:5a:00:5e:
         1b:34:03:6c:f1:95:84:ee:d5:fe:5c:9f:9b:72:64:3d:fb:e3:
         ad:53:04:01:e1:db:b4:8d:a6:e6:a3:c6:93:80:ea:9f:38:3f:
         6f:5b:57:5f:96:bd:f9:de:6d:27:5b:30:c6:ec:95:8a:38:35:
         fd:9a:e7:f3:03:07:21:fc:5f:6a:f3:cd:ba:0c:da:82:38:34:
         6b:f4:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:11 2025 by rpki-client