Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa
File:                     74c04573-b423-34d6-a92c-a33a7e85298a.roa (raw, json)
Hash identifier:          UV8wD3LDiHgaZDjufUtaYEQnWPXXmiWknNca5bl4D1E=
Subject key identifier:   6B:F3:B6:5F:30:53:A5:84:48:6D:4C:52:30:1F:22:C3:F7:FD:6F:27
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849D6FA488C34256E7F1952CD60
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     203
IP address blocks:        20.139.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:48:8c:34:25:6e:7f:19:52:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=403218f7-1b51-426e-8342-85d54c19a5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:14:4a:f9:98:82:31:c7:4b:cb:d9:05:1e:
                    bd:1c:1f:e5:9e:1b:4c:ce:1d:bf:22:a1:32:3e:4c:
                    a3:ef:d0:26:a7:c1:dd:88:ee:23:e7:45:c0:fd:33:
                    4f:db:e4:6e:58:dc:54:37:d2:8d:d8:4b:df:92:78:
                    f2:ce:5c:11:26:07:2a:36:b0:62:77:20:69:98:1d:
                    d5:75:a7:a3:85:a2:25:88:1e:83:c6:9e:5d:db:cf:
                    4c:41:72:69:a5:ec:aa:7a:93:02:bb:b2:f7:be:6d:
                    d2:3d:3d:00:b2:b1:1a:60:6e:d6:3c:4d:46:15:75:
                    ab:4e:f2:1c:1b:4b:31:75:47:91:32:65:c9:d1:8d:
                    d3:3f:02:e5:a0:77:4c:3c:a0:55:3a:03:54:ec:26:
                    cd:4e:a6:61:e3:92:9c:bf:f8:f6:a6:75:91:97:ca:
                    f8:cb:9c:ce:f8:9c:0a:de:c8:f1:27:7f:21:f9:5c:
                    dd:40:42:84:60:cb:38:ca:c9:6b:0c:57:93:d9:5c:
                    2c:d6:c9:73:63:23:0f:43:eb:15:02:04:2c:a1:45:
                    9c:e6:b2:8e:24:d1:2d:a8:c1:20:29:aa:c7:8e:1f:
                    a1:fd:b5:59:a6:4f:8e:3b:75:32:19:cf:4e:73:3b:
                    db:5f:b5:0c:84:fc:8b:bc:3d:d6:fa:87:1b:a0:36:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:B6:5F:30:53:A5:84:48:6D:4C:52:30:1F:22:C3:F7:FD:6F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:84:b2:e0:5d:48:06:78:33:9a:5c:34:6f:21:9d:60:25:91:
         e6:b1:5d:fd:23:f4:78:c0:ea:c5:96:fb:fd:e5:85:43:9c:48:
         ab:5c:d8:1b:ab:70:f3:ee:cb:b4:17:b2:5e:3d:ae:d7:84:cd:
         69:96:5f:75:7b:be:05:27:21:b4:f5:6c:c0:4f:bb:1f:a9:f8:
         3b:48:6c:44:5c:94:fa:c0:dc:56:70:67:98:14:46:23:44:07:
         9c:3c:d6:fe:b5:11:d6:b8:26:d5:54:62:c6:c0:bb:1b:b1:6b:
         79:20:ec:13:84:61:6a:52:d5:a4:11:37:ac:d2:4b:be:67:a3:
         f8:f3:18:4a:cd:4e:08:ac:a6:77:3f:ba:ff:d6:13:be:c5:fd:
         2c:cc:85:f3:d8:09:a2:95:ac:88:11:66:e8:b5:70:ca:87:b0:
         a8:f1:ec:83:f1:20:ef:d1:bf:2f:8f:a1:21:90:16:d6:b6:ca:
         8a:71:fb:d5:3b:74:99:79:f4:73:40:7d:0d:37:a0:93:70:28:
         a6:38:78:0b:d1:3a:69:cf:24:73:01:9c:3e:00:49:3d:f1:ad:
         aa:c9:b2:3b:26:8d:f1:e3:30:80:a7:ac:2a:7f:99:9c:f6:7e:
         1b:5c:8f:f4:21:3f:cd:4d:15:20:92:b3:1f:8b:19:a0:51:6a:
         ba:58:52:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kiMNCVufxlSzWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk
NDAzMjE4ZjctMWI1MS00MjZlLTgzNDItODVkNTRjMTlhNWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOAUSvmYgjHHS8vZBR69HB/lnhtMzh2/IqEy
Pkyj79Amp8HdiO4j50XA/TNP2+RuWNxUN9KN2EvfknjyzlwRJgcqNrBidyBpmB3V
daejhaIliB6Dxp5d289MQXJppeyqepMCu7L3vm3SPT0AsrEaYG7WPE1GFXWrTvIc
G0sxdUeRMmXJ0Y3TPwLloHdMPKBVOgNU7CbNTqZh45Kcv/j2pnWRl8r4y5zO+JwK
3sjxJ38h+VzdQEKEYMs4yslrDFeT2Vws1slzYyMPQ+sVAgQsoUWc5rKOJNEtqMEg
KarHjh+h/bVZpk+OO3UyGc9OczvbX7UMhPyLvD3W+ocboDYK4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvztl8wU6WESG1MUjAfIsP3/W8nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzRjMDQ1NzMtYjQyMy0z
NGQ2LWE5MmMtYTMzYTdlODUyOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKEsuBdSAZ4M5pcNG8hnWAlkeaxXf0j9HjA6sWW+/3lhUOcSKtc2Bur
cPPuy7QXsl49rteEzWmWX3V7vgUnIbT1bMBPux+p+DtIbERclPrA3FZwZ5gURiNE
B5w81v61Eda4JtVUYsbAuxuxa3kg7BOEYWpS1aQRN6zSS75no/jzGErNTgispnc/
uv/WE77F/SzMhfPYCaKVrIgRZui1cMqHsKjx7IPxIO/Rvy+PoSGQFta2yopx+9U7
dJl59HNAfQ03oJNwKKY4eAvROmnPJHMBnD4AST3xrarJsjsmjfHjMICnrCp/mZz2
fhtcj/QhP81NFSCSsx+LGaBRarpYUnY=
-----END CERTIFICATE-----
Generated at Fri Jun 6 12:15:02 2025 by rpki-client