Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac7e5964-f652-3724-a0ba-235f4627f21f.roa
File:                     ac7e5964-f652-3724-a0ba-235f4627f21f.roa (raw, json)
Hash identifier:          LlxsVm/YE2j8CGqYatundGkEd/Gbu58J/hk7pENl/Jw=
Subject key identifier:   E4:FB:BC:E5:A1:27:9F:0F:FE:C2:51:32:7E:22:A4:77:38:A0:45:BB
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849D42FB3B779B2EEEEDF4B2D80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac7e5964-f652-3724-a0ba-235f4627f21f.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     3360
IP address blocks:        20.134.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b3:b7:79:b2:ee:ee:df:4b:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=3ef3df3e-e318-4ba2-8a57-a0269d16efa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b6:8e:a4:22:35:2b:e5:45:71:89:94:4a:2c:
                    9b:dc:58:01:95:7d:f1:c2:e1:d6:ee:a1:fd:03:cb:
                    85:3c:de:33:75:1b:f9:2c:d5:5c:73:52:72:61:b4:
                    23:84:0e:5c:be:b4:b0:6a:94:3e:f2:c6:b2:df:c3:
                    72:91:cd:cc:e3:f6:2a:e7:7f:06:03:37:c6:66:54:
                    04:1a:11:d9:c7:e9:21:6e:f3:2c:54:ab:66:73:c1:
                    a8:85:6a:7d:91:8f:e5:ce:89:41:99:ee:38:cc:3d:
                    da:11:0e:73:a4:eb:f2:a2:0c:cb:07:76:2a:02:6c:
                    8f:db:88:c1:d4:ca:44:a7:ee:79:b5:d1:56:ad:fa:
                    49:b6:cb:af:8d:8e:86:6e:da:dd:a7:3c:4e:4c:ac:
                    5f:9d:14:fd:02:2d:e1:89:fe:40:77:85:a4:ab:dc:
                    d2:06:9a:de:9f:3b:e4:ed:22:53:77:ca:d7:b0:d6:
                    f4:c6:2a:98:17:70:fd:e0:67:1e:76:0b:4e:d8:94:
                    2f:16:22:7a:ec:42:79:ea:61:96:f1:0a:56:88:7e:
                    23:5d:b3:46:0f:69:f3:a7:e5:e2:bb:5c:6e:b0:c3:
                    5d:cd:68:5e:5d:cf:38:23:4c:11:28:61:75:e3:d8:
                    9f:ff:b5:8e:2a:e4:4b:6a:56:c8:8f:b1:39:53:f0:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FB:BC:E5:A1:27:9F:0F:FE:C2:51:32:7E:22:A4:77:38:A0:45:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ac7e5964-f652-3724-a0ba-235f4627f21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:56:63:f4:ce:be:bd:0e:17:64:61:cd:f8:53:c8:c3:aa:a8:
         7f:5b:74:e6:d4:82:61:1d:13:a6:f2:cc:3f:6f:68:1d:94:d3:
         cf:76:7f:fe:a3:ad:c5:d8:21:00:4d:2e:c4:28:78:2b:1a:64:
         a0:b8:fc:c9:5b:1f:f9:d5:5a:dc:0b:fe:f2:6a:ec:26:87:e8:
         17:04:bc:6d:13:4b:02:8f:48:f1:79:2c:37:7a:e3:4b:b5:bc:
         3b:a8:6e:80:4e:b0:a4:da:d6:23:89:5e:8f:67:5f:db:ca:9e:
         6d:b8:a0:28:6a:89:e2:6c:1f:fc:60:36:cd:41:0c:a7:65:87:
         25:6d:c8:7d:80:fa:64:d1:f0:35:6f:22:59:12:ed:93:24:b8:
         96:d3:c1:c6:cc:95:8e:51:15:db:d0:89:23:85:57:9a:48:90:
         15:af:2f:02:19:c2:e8:cf:02:e3:16:50:ee:38:2b:f1:b9:ad:
         47:c4:4a:06:79:60:46:fc:e7:b8:0f:c5:2d:80:45:c2:b1:cf:
         3a:92:db:d6:08:9c:cb:f4:91:b1:44:be:05:b8:83:6f:e8:53:
         70:47:91:ce:57:01:ea:4c:ca:ef:cb:3a:2d:c8:91:56:a1:81:
         e0:32:e0:cb:bf:d3:56:59:46:e5:5c:be:65:4f:99:f5:eb:d7:
         43:b8:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:18 2025 by rpki-client