Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d4fd0cc-a059-3f38-8414-67b2197b7505.roa
File:                     9d4fd0cc-a059-3f38-8414-67b2197b7505.roa (raw, json)
Hash identifier:          ka6c1YEDwp+PgSWKa/ReXlZa2mKg9UnrQxEw2yQ/mcc=
Subject key identifier:   CC:22:E5:37:58:91:BF:98:53:E0:D3:09:77:6B:8C:E3:23:B4:F9:C3
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584A03A556CBA85DF3D86D567F00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d4fd0cc-a059-3f38-8414-67b2197b7505.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     203
IP address blocks:        20.137.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:56:cb:a8:5d:f3:d8:6d:56:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=551335ac-85b1-4bc4-a111-1b102627d520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:e1:58:42:fd:24:d1:00:88:be:f9:a7:b5:
                    3e:ad:8c:98:1f:30:b6:11:51:d8:b2:45:3b:f5:e2:
                    6a:3c:ec:14:3e:18:74:d5:b4:bd:4d:71:a2:b5:8d:
                    36:78:82:cd:9b:4c:9c:76:50:a7:07:53:6e:a1:04:
                    99:2f:e6:7e:5d:c1:3c:7b:b6:87:45:25:34:d7:6b:
                    75:f2:2c:c8:70:00:34:cc:20:87:a8:e5:f7:2c:08:
                    20:49:e3:2c:0e:5d:e9:53:1d:ca:91:1a:23:1d:94:
                    e0:78:66:6d:25:ba:7a:03:a5:f2:13:2b:49:06:54:
                    ac:c8:2d:67:0f:01:a0:f0:34:68:25:ce:5e:1e:21:
                    99:47:dd:29:fc:0c:3b:d6:2e:1c:4e:ff:5d:27:47:
                    fb:47:eb:c8:72:bb:b9:b2:23:55:97:1e:ef:99:c5:
                    2e:1c:68:7e:cb:ed:0a:7c:1c:fe:9a:5e:84:67:00:
                    ee:8d:f0:44:70:45:6c:33:f4:85:b8:c3:bf:8d:3d:
                    79:e3:e1:c1:eb:f5:30:4a:c1:a0:3b:11:31:59:ba:
                    de:4e:ab:6b:f1:9a:a3:5d:99:9f:cf:49:25:a3:48:
                    47:c4:81:3a:2a:3b:d0:17:01:ae:2b:63:79:4b:21:
                    fb:ce:60:19:c6:83:c7:42:4a:2d:a1:0e:3f:2f:d2:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:E5:37:58:91:BF:98:53:E0:D3:09:77:6B:8C:E3:23:B4:F9:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d4fd0cc-a059-3f38-8414-67b2197b7505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.137.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:ee:a5:5d:9a:4b:7f:0c:f0:a3:c2:a0:c0:3a:9a:77:c1:
         91:57:55:85:83:bb:50:e4:3c:36:86:16:48:da:01:6b:b3:9d:
         cf:6f:15:25:09:9f:2d:95:c1:2c:a0:63:ac:3b:d1:52:6f:6a:
         50:60:eb:3a:ee:c2:86:c1:a3:e2:5a:75:77:b3:dd:df:e8:01:
         06:73:23:07:66:9b:a9:74:a1:99:3c:c9:d0:55:fd:6a:28:82:
         c4:6b:09:7f:6a:9a:36:ca:b9:58:94:04:e8:5f:f1:50:9f:13:
         80:17:28:0f:52:e6:6b:d0:a0:06:14:e5:4b:db:72:13:89:71:
         e6:b0:fe:5d:06:46:19:1a:32:db:a4:46:26:43:2c:a8:9a:e7:
         64:5b:4f:9c:d4:95:fe:a7:a6:95:26:03:47:64:14:e3:bf:3e:
         3e:66:ae:4e:31:25:fb:44:90:a5:0d:27:cb:3a:17:ba:13:f2:
         ff:48:f1:ad:63:e9:d9:91:44:6e:95:01:b6:22:e1:42:18:60:
         0e:49:2f:0f:68:8c:9a:b8:c3:58:1e:27:4b:92:2c:de:8e:45:
         27:b0:28:2a:5a:5b:06:b8:96:47:84:8f:8a:43:ac:e6:81:02:
         9f:5d:ac:0b:e0:15:da:b4:c0:ae:b0:93:65:f9:84:97:ab:48:
         77:61:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:38:34 2025 by rpki-client