Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa
File:                     9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa (raw, json)
Hash identifier:          Nyi3B3rLRj7h+73jCW3/sNiQolwz+9dmFQ2/MB+QrHU=
Subject key identifier:   94:1B:8C:1E:74:34:92:10:3D:0B:97:2B:DE:95:20:BD:1B:9B:7D:BF
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584737907BA01B3CAC1650890300
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa
Signing time:             Sun 15 Sep 2024 01:00:30 +0000
ROA not before:           Sun 15 Sep 2024 01:00:30 +0000
ROA not after:            Sat 14 Dec 2024 02:00:30 +0000
asID:                     203
IP address blocks:        20.134.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:90:7b:a0:1b:3c:ac:16:50:89:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Sep 15 01:00:30 2024 GMT
            Not After : Dec 14 02:00:30 2024 GMT
        Subject: CN=0716a2c6-69b1-4d67-9881-b13aeb96a4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:42:80:62:9f:15:d6:0f:9e:e5:77:21:ce:
                    03:a9:12:22:c0:9b:83:f7:53:9e:bf:09:33:20:d0:
                    55:5a:bb:79:46:16:b3:50:08:ca:7b:ab:4d:8e:87:
                    f4:bb:41:10:d5:ee:03:88:ec:72:e3:cf:f3:8e:29:
                    77:9e:81:67:b6:e3:a6:74:d3:44:c9:43:b9:91:84:
                    9d:66:40:e2:db:91:69:4f:b9:7d:96:c3:9e:74:e1:
                    d1:c5:eb:6e:1d:2c:89:9d:da:91:05:e5:58:4c:0e:
                    43:80:98:dc:5f:6f:b1:1f:d8:fb:8d:38:59:d5:3e:
                    3c:a3:9d:ff:a0:7e:80:20:60:90:f2:13:0b:11:18:
                    f6:ae:11:e3:b1:c2:e0:31:e4:a2:b7:53:f4:de:f6:
                    85:32:3e:9a:32:75:fc:d3:51:fe:9e:32:c6:07:6b:
                    ed:e3:be:b6:26:9b:61:02:39:d7:ec:41:81:ba:eb:
                    7a:d1:e2:b1:7c:c0:11:ea:d4:fe:d3:55:1f:0f:29:
                    1c:a5:41:fb:b4:6d:9c:10:41:3f:09:b3:13:3c:5d:
                    04:15:be:e8:e9:c0:2a:b7:a9:4a:a1:77:f7:a2:7b:
                    7b:d6:90:2b:d5:6f:9d:5c:68:9b:ba:7c:eb:b3:8f:
                    28:05:37:37:48:c4:8f:08:3f:00:e3:c7:66:cb:5f:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1B:8C:1E:74:34:92:10:3D:0B:97:2B:DE:95:20:BD:1B:9B:7D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9dd0edd9-6235-3d23-b7a3-6f9708df65ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8c:34:f1:da:b9:32:a7:d8:54:09:b1:76:f2:3f:d7:51:03:
         3b:55:58:4c:eb:2f:15:a9:92:d6:c6:19:18:82:22:c5:46:c3:
         46:e7:8a:4a:e5:4f:b2:d2:4c:71:70:67:13:57:8c:2a:7d:c6:
         e1:c4:28:7b:9b:91:e8:12:e3:63:32:50:2e:81:bd:3c:70:45:
         6b:2a:94:eb:02:eb:90:21:c5:64:31:fe:ab:cc:b0:3e:a4:aa:
         07:a5:8a:99:b6:de:1d:89:cf:32:a1:00:47:46:ea:27:8f:62:
         13:91:6a:5f:c4:8c:70:f5:49:6e:af:45:8d:04:0b:a9:35:20:
         22:4b:e3:cf:20:36:c5:a7:a9:41:77:66:8f:2f:62:96:6c:23:
         01:0f:f5:3c:51:f4:51:45:4e:13:e3:f5:ed:fb:d3:55:fb:a7:
         d7:6c:0a:ee:07:83:a6:97:75:6d:25:f3:b5:32:9b:55:54:a6:
         bc:79:aa:3a:b2:f9:09:3e:23:6a:ed:90:5f:b1:7a:a4:16:43:
         a3:61:53:d8:9c:18:a8:7c:a5:40:6e:d4:b1:4d:18:df:09:5a:
         55:22:02:c4:e8:ba:e2:39:16:8b:ae:a7:27:ed:ef:d5:c2:02:
         77:09:b8:02:e6:b1:43:f0:ce:3e:4a:b6:81:9c:2b:fd:49:4a:
         ac:52:53:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 15:10:54 2024 by rpki-client on console-fra.rpki-client.org