Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa
File:                     59205f9e-be67-31b6-8b33-8d851a623090.roa (raw, json)
Hash identifier:          GRDL8W0qS6xLo+in3xJnN7lzRmoJ9QikqJM3XmVKeVs=
Subject key identifier:   9B:61:07:75:AB:49:7D:57:01:DA:9E:07:F9:73:88:6B:79:6F:FB:F3
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584785BBA5C0D43BEB18B99D0A00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     3356
IP address blocks:        20.134.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a5:c0:d4:3b:eb:18:b9:9d:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=59684948-2edf-4dea-99d1-82e62c243a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:5c:77:67:78:dc:5b:7e:98:cd:67:80:fe:
                    a0:47:60:bc:f3:58:d6:87:0d:eb:c8:66:cf:12:8f:
                    63:a3:51:b7:88:a8:a1:b0:e0:d7:c5:5b:f8:38:1a:
                    3b:de:63:9b:2e:d1:e7:87:b7:a5:9c:29:c2:f7:02:
                    f9:4c:6b:00:92:ca:56:0b:3e:3f:07:5f:5c:73:86:
                    74:fc:95:a3:0e:c8:c3:1f:87:65:68:57:87:4d:08:
                    27:e9:92:4f:34:97:44:66:c1:b1:63:13:d3:6e:64:
                    04:17:02:54:ac:81:c4:41:77:64:66:4d:61:3e:8e:
                    dc:5b:4e:a5:82:cc:f9:dd:90:80:86:a3:4a:5d:a9:
                    46:6d:1e:04:a1:84:5d:85:9e:a1:68:5f:04:fb:f9:
                    ea:21:bc:27:91:ef:f3:1c:9d:1b:f3:f3:bc:9d:28:
                    41:8b:c8:4b:bd:95:06:32:1f:c5:00:27:ee:46:b3:
                    22:d7:da:ae:b4:d4:eb:5e:33:fc:c9:65:7d:cd:6c:
                    b5:c0:53:26:fb:c9:b2:d9:88:2e:cc:7e:1f:1b:15:
                    d7:51:0e:ba:85:ed:83:30:9c:5d:a5:aa:ab:23:fd:
                    80:06:ea:05:fe:12:07:cb:28:64:9b:d1:27:b7:f3:
                    a4:8b:cd:18:a9:41:d4:d2:34:c3:18:71:4b:ba:2c:
                    6f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:61:07:75:AB:49:7D:57:01:DA:9E:07:F9:73:88:6B:79:6F:FB:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:ce:74:95:e8:2a:ad:f7:21:82:3c:5a:66:d1:18:40:cb:
         e4:98:a3:b7:b6:a4:b5:00:d0:5c:63:03:b8:93:50:5e:7c:af:
         19:f7:41:0b:c1:33:47:65:70:95:18:e5:cd:6e:02:36:4d:9e:
         03:22:ed:b4:26:2b:92:6f:bb:cc:56:f6:39:22:2c:17:0d:a8:
         bc:a7:2d:b6:37:88:47:67:53:ff:6d:14:0c:eb:5b:7b:fb:a8:
         42:8c:16:fb:4d:c9:0e:c7:bf:f4:1a:39:f1:b5:62:0d:0a:61:
         88:b4:e1:33:f2:33:78:20:33:13:f4:69:40:32:ff:29:07:c1:
         21:c0:f3:3a:c1:f1:1b:d2:be:5b:6c:09:fc:1f:db:e2:65:7c:
         dd:01:2f:1c:9c:52:ec:c8:90:65:fa:7d:fc:55:80:47:59:64:
         e7:c5:a3:6e:2c:c0:47:27:65:95:92:4f:62:90:e9:4d:bd:67:
         df:74:1e:e9:a8:24:cd:5d:24:76:bf:ab:1b:28:6f:44:21:91:
         42:1d:de:ab:8e:64:2a:44:21:2c:e3:c8:a8:f2:7e:a1:46:e4:
         47:e6:e2:03:b9:93:93:3f:fc:8a:fe:45:76:c1:e5:7f:70:3a:
         b1:fc:a3:29:94:f5:e2:57:6b:48:44:2f:14:8c:82:b2:64:b6:
         de:ab:1b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:45:22 2024 by rpki-client on console-ams.rpki-client.org