Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa
File:                     7ec506b0-9799-3a53-982d-39afbe885b36.roa (raw, json)
Hash identifier:          6/nOUvcAto03vkgMlE5W1VG0aq9ho04qJrLx8X3/DCg=
Subject key identifier:   93:7A:E1:55:E8:F8:BB:7D:27:B7:FE:5B:9D:44:06:88:9A:37:EF:BB
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849D6FA46A7915373D7A5BAC940
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     203
IP address blocks:        20.134.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:46:a7:91:53:73:d7:a5:ba:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=46b04970-66d0-4320-b3c6-ca8bc6dccaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:d9:44:c4:b7:4c:c5:a0:0e:22:ea:a4:b2:
                    26:cb:3d:5c:e7:d3:cd:f6:f1:19:c0:94:ed:54:df:
                    e9:94:3b:45:e3:d7:33:91:b2:f9:58:98:e0:b8:20:
                    22:73:05:7b:03:9e:e8:5e:fb:dd:c9:3f:d9:1d:3d:
                    5c:fc:d5:61:77:8e:e0:84:1f:1e:43:91:81:b4:1a:
                    34:4c:60:e7:9d:b0:96:4d:60:ff:db:9e:35:fd:7b:
                    9e:84:66:b0:d5:1c:e6:4c:cd:09:cc:94:ab:66:02:
                    ac:97:5c:c8:39:d5:ae:0b:23:b0:24:8f:c5:05:4f:
                    6f:03:90:6f:43:99:4b:16:34:95:34:5c:84:28:22:
                    96:4e:36:c8:ec:de:d3:9a:b3:ed:4d:ab:72:ae:a2:
                    ac:10:d2:46:16:49:13:db:dc:c5:ed:77:63:e9:4e:
                    69:fc:5b:98:c8:c9:7e:84:4c:80:7e:39:4e:39:51:
                    c4:0e:31:d8:3e:f0:8e:65:36:32:12:cb:65:30:13:
                    95:19:1b:00:c7:13:a0:74:5b:13:26:ae:60:7d:09:
                    95:97:b7:04:e9:5f:c3:17:b2:95:95:9f:f0:65:16:
                    45:7a:7a:f3:4f:d0:e4:8f:92:6e:8c:1a:6c:78:42:
                    e8:e9:8f:b1:7a:94:b2:f7:c3:59:24:bb:50:aa:37:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7A:E1:55:E8:F8:BB:7D:27:B7:FE:5B:9D:44:06:88:9A:37:EF:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:55:5c:27:ae:91:cc:a5:7b:12:a9:e4:42:48:a9:65:74:95:
         a6:4b:6d:3e:6b:5f:2f:d8:02:0e:49:77:d0:74:8c:fc:0e:1b:
         b3:c9:90:e3:e6:ed:54:fb:62:17:e5:1b:e9:f4:7f:1d:1d:59:
         16:1f:18:31:e2:d4:35:77:b0:82:7b:e8:28:43:09:0f:8d:aa:
         55:00:32:d6:dc:26:ce:bb:fd:4c:4d:8c:2a:8b:2f:46:57:fd:
         59:fc:af:03:93:39:5e:8f:e9:95:d5:00:6a:50:38:e7:e4:a2:
         9c:1f:b1:40:91:a4:0f:e2:43:21:5c:b4:4e:60:ce:c7:64:f8:
         0e:7b:25:25:60:7a:c2:8d:58:b1:b6:0c:3c:7a:6b:06:0e:f4:
         9c:38:08:7f:41:94:2b:47:bf:86:27:a3:fe:a2:49:a8:6f:6c:
         e5:3a:c2:c9:45:a4:72:f8:97:4a:8b:ff:bd:8a:aa:b3:ab:c5:
         bb:91:7f:9f:cd:59:81:37:4d:96:df:d2:5c:cf:7f:d1:e5:a4:
         ee:80:6d:54:bb:30:05:80:bd:1f:ba:3f:5c:ab:0c:11:50:c3:
         b9:9f:4e:a1:70:86:51:7f:37:a2:aa:0a:e4:b9:c4:e3:a4:1c:
         f5:40:9d:6d:89:bd:93:61:d8:42:3c:24:7d:38:86:ea:bc:56:
         5b:d8:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:34:04 2025 by rpki-client