Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b91b125-6125-3a2f-8309-02516c7fe510.roa
File:                     9b91b125-6125-3a2f-8309-02516c7fe510.roa (raw, json)
Hash identifier:          FhlUJ+udqZ418t6RXn4bxeq6uR+8zDCjzilp8uoezUQ=
Subject key identifier:   E1:38:89:6E:03:C0:AF:C9:F1:0B:2E:F1:24:D6:73:AB:32:F7:B5:3E
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584A0C056C960205B2406E8C8C00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b91b125-6125-3a2f-8309-02516c7fe510.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     203
IP address blocks:        20.148.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6c:96:02:05:b2:40:6e:8c:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=2ef62211-8b7c-42a8-8923-257de9be4c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:9d:b2:61:c4:af:fb:48:cf:39:e3:db:6e:
                    3e:fb:c7:52:7d:05:3d:3b:08:18:c6:60:85:89:be:
                    0c:57:aa:53:a6:e8:17:e3:e6:ae:10:9a:7f:01:5c:
                    4e:da:c2:bc:5a:9b:af:d5:d8:8c:f1:eb:aa:5b:e0:
                    33:43:23:21:4a:52:61:b6:e5:6a:09:d8:03:6e:45:
                    9f:a1:0b:ba:06:26:6c:30:8a:f8:22:55:f6:50:a7:
                    50:b3:d6:db:c3:68:f9:01:94:f2:6d:87:e6:2c:0f:
                    cb:dd:2f:cd:07:34:19:d4:f6:2c:21:ce:35:9f:ed:
                    05:97:5c:86:65:56:f7:f2:8a:a9:24:8c:ad:1c:29:
                    34:3d:ec:e6:61:8e:44:50:0a:db:ba:31:93:cd:af:
                    5c:db:10:b6:b7:21:9b:ca:1d:dc:9e:ac:61:55:78:
                    ab:d4:ee:d7:2b:94:db:67:36:25:f3:8f:fe:0b:90:
                    ab:40:12:86:06:ff:5c:6a:cc:29:7f:21:7c:2a:8f:
                    81:e2:ca:2c:f4:d8:06:88:20:9e:63:97:5a:3c:b1:
                    78:62:db:40:ba:29:8f:3f:4b:60:e5:ac:d4:7e:eb:
                    ba:5a:b4:f3:a6:13:ef:b0:ef:9b:4b:d2:74:b6:6e:
                    f0:6d:25:53:17:8f:fc:73:62:35:17:6e:65:3c:e0:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:38:89:6E:03:C0:AF:C9:F1:0B:2E:F1:24:D6:73:AB:32:F7:B5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b91b125-6125-3a2f-8309-02516c7fe510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.148.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:e1:25:d2:7d:89:28:0a:48:82:02:6e:74:bd:a4:df:d1:
         d1:5b:be:6b:5c:3d:e5:80:bd:ea:09:1e:11:ef:2f:10:c9:52:
         13:22:a7:a8:19:46:68:09:67:f2:8a:c0:9d:32:54:1a:3c:24:
         11:52:e6:73:95:08:da:b7:e0:c6:6e:20:40:00:67:df:29:02:
         77:8a:ca:a5:c4:1b:bf:99:a9:4c:79:15:1c:b4:23:ad:7b:fc:
         a5:89:d0:2b:d0:45:dd:1c:a3:d9:51:87:49:fe:de:22:46:ab:
         b7:a6:dd:f9:83:56:ad:49:fa:8d:4b:73:45:96:fe:cb:d6:3b:
         f1:93:8a:7b:d8:dd:2f:0e:9e:f2:2e:fa:8c:10:8a:e1:4b:af:
         f4:5a:5f:a9:73:04:6f:cc:71:d2:81:9a:e4:c8:a8:ea:36:d4:
         b2:5c:e2:9c:d2:36:47:3f:c2:99:30:11:20:ac:21:4d:71:a2:
         7e:2a:98:c0:33:d8:6e:ec:78:95:0a:95:18:1a:69:bf:4f:37:
         f5:e9:98:81:d3:5c:4e:1f:0e:33:1e:7b:10:ce:2e:62:1a:b0:
         7d:ed:32:3d:ed:76:ff:c4:62:86:6f:b2:a9:a0:59:c6:f6:ff:
         ad:60:aa:cc:c0:75:9f:56:d8:b8:c5:6f:2f:5d:b9:8c:2a:2b:
         95:ab:9d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:39:38 2025 by rpki-client