Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa
File:                     6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa (raw, json)
Hash identifier:          npq+mmMwtGDVBXALu9/lfo8mTBP44IqP623BoTDy3Fo=
Subject key identifier:   B8:34:33:22:99:C0:20:09:54:1A:2C:30:34:B4:D8:35:31:AE:36:F5
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584737907C71562439A2379877C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa
Signing time:             Sun 15 Sep 2024 01:00:30 +0000
ROA not before:           Sun 15 Sep 2024 01:00:30 +0000
ROA not after:            Sat 14 Dec 2024 02:00:30 +0000
asID:                     3356
IP address blocks:        20.134.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:90:7c:71:56:24:39:a2:37:98:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Sep 15 01:00:30 2024 GMT
            Not After : Dec 14 02:00:30 2024 GMT
        Subject: CN=f0c2294b-c10b-4486-923f-79d042fcccdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:a8:67:61:f6:31:86:a6:e9:2d:d5:73:be:
                    7b:ca:c6:5e:66:65:f5:53:5a:31:0f:4c:78:23:fa:
                    4c:02:15:61:3e:f9:e0:9f:b1:15:4f:fa:24:ed:d6:
                    a3:df:8c:58:7c:9a:e3:e9:e8:94:3d:a4:ce:83:e4:
                    32:fe:11:9e:20:ba:78:8e:03:8f:f2:bc:c6:e9:17:
                    1d:93:f9:aa:9f:63:bc:47:7a:8b:f1:1a:f2:c9:b1:
                    06:23:eb:9b:bd:5f:7c:24:11:6d:92:60:b7:39:22:
                    ab:67:8b:fa:d2:df:53:d0:b4:be:14:9f:36:e0:47:
                    0d:5f:a2:d6:2d:f2:0d:c8:7b:a8:91:6f:53:f2:a4:
                    07:c5:60:a2:bb:90:84:ed:bf:1f:98:ac:ef:66:61:
                    81:1c:50:f9:be:ed:0a:3c:b1:62:1f:fe:fc:3b:19:
                    84:8e:09:6d:15:a1:37:e7:34:fa:3b:03:e6:26:ed:
                    3e:e5:ba:4e:42:8e:62:86:54:6f:f5:86:79:c1:40:
                    a1:b7:ad:7f:f7:61:dd:8a:62:e1:3b:a6:b4:24:ff:
                    45:5f:e4:e2:47:23:aa:d5:cf:b9:13:18:36:2a:32:
                    73:46:37:7e:44:5f:4e:62:9c:86:c5:ad:02:db:78:
                    e3:30:eb:a2:6d:ac:fd:7f:97:e8:18:9f:3e:ac:11:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:34:33:22:99:C0:20:09:54:1A:2C:30:34:B4:D8:35:31:AE:36:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6559b64a-ae54-3b0b-afd5-2c5ae186ce80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:5e:ac:c4:78:75:f2:a9:72:21:f6:0c:24:a2:24:1b:3c:
         23:c9:9f:a6:c6:4a:2c:ef:80:ed:6c:b1:52:29:a8:33:b8:dc:
         b5:d1:1c:5c:66:a1:6e:97:e4:5c:ea:35:02:39:d5:99:cf:c3:
         a7:38:7a:78:f2:d7:93:80:a0:82:e8:b3:cf:97:eb:eb:d2:10:
         28:c7:60:5d:2c:db:0e:94:c8:3b:46:72:35:76:3b:15:5a:1e:
         ac:f0:1f:81:53:f5:ca:0f:95:bd:4c:af:79:5e:0c:2f:06:c0:
         a5:60:d8:07:1b:cd:c6:16:cf:fd:57:cf:93:2f:ef:23:26:97:
         58:45:52:f3:d9:67:2b:63:e8:ad:d0:22:4d:73:f4:71:b9:d7:
         16:80:7f:be:10:65:e2:1c:1c:de:7b:46:70:06:00:40:fd:a9:
         48:c4:10:d5:9a:d8:8a:3a:d6:69:a3:da:33:44:41:b1:27:10:
         12:a1:d9:92:8e:7c:58:d9:cb:80:85:3d:b0:45:08:98:d6:12:
         1e:af:ba:49:ef:a6:c8:97:4f:99:71:dc:b6:90:a2:06:4f:e1:
         9a:f3:bf:37:65:fe:56:a4:3e:7b:0e:bc:47:cc:89:97:a9:5d:
         d6:56:29:7a:e3:6a:44:dc:92:8a:d0:6d:da:38:d5:42:75:7c:
         f9:18:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 22:27:10 2024 by rpki-client on console-ams.rpki-client.org