Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa
File:                     ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa (raw, json)
Hash identifier:          80Xmb4CDKVE3Mu0x7bw7e+HequodK8gF5QTmPQwGm4I=
Subject key identifier:   3E:F6:EA:30:B2:D1:BC:50:9A:EB:F4:CA:73:35:F7:DC:8A:4E:0A:66
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584A71EB51DDBE968CB13F2D3AC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     202
IP address blocks:        20.133.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:51:dd:be:96:8c:b1:3f:2d:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=50997896-5d7c-4659-bf75-d43fe8059cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:43:ad:7b:27:2b:59:eb:0f:27:dc:84:1f:
                    bb:16:a5:df:8a:ed:15:b1:9c:ad:aa:f9:73:04:65:
                    5b:27:43:ae:c8:eb:cc:25:2c:19:57:fd:6f:d8:4f:
                    11:48:8a:3a:e5:9b:f5:85:2e:ea:b3:6f:f9:30:4c:
                    59:b6:ec:2f:e1:83:3d:c4:a9:b5:90:e6:10:f5:f4:
                    3d:b1:38:58:4e:18:cb:f0:4f:25:a4:d4:a3:2b:60:
                    9a:04:fb:35:79:fb:5e:db:a8:73:13:08:81:af:83:
                    29:29:9c:68:fa:88:a7:ff:e0:72:8d:0f:c7:50:df:
                    64:43:27:21:04:b0:37:98:bc:da:b7:a1:bf:7e:e3:
                    50:2a:30:f3:b3:f3:e5:de:19:37:4a:e1:d0:b3:df:
                    83:bc:ad:86:19:6c:4b:7a:a1:1c:b8:1f:3b:80:f3:
                    07:83:f3:ea:d0:b8:ed:1f:32:a0:0a:72:1b:8b:16:
                    8b:01:47:8c:d8:12:ea:e3:8b:d3:a9:a8:67:46:43:
                    18:26:da:3f:74:f3:2f:7c:2a:80:e9:ce:96:36:17:
                    a5:23:ea:22:4a:fb:55:a9:ef:0e:b1:04:89:4c:56:
                    c7:ee:7c:2f:1a:15:28:92:ca:4d:a5:5f:2c:44:cc:
                    f4:66:07:08:0a:76:24:a0:fd:29:3e:5e:b1:13:8c:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F6:EA:30:B2:D1:BC:50:9A:EB:F4:CA:73:35:F7:DC:8A:4E:0A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ad1d3994-ca3f-345f-8dbe-9fee7dd97481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.133.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:68:79:58:01:04:00:a2:61:89:c6:c2:cd:52:3a:36:7b:37:
         96:27:c1:9a:99:ec:15:f1:2f:d2:a2:af:bc:87:d2:73:20:f3:
         a3:cc:50:99:8f:d2:c3:a5:26:59:de:70:e9:1e:38:6e:7a:f4:
         0e:1f:c2:a4:1c:2e:4a:f9:21:30:4d:01:bc:f3:62:00:33:f7:
         8a:72:f5:a1:25:d3:49:4f:a8:d3:31:6d:3a:9c:5d:7c:89:8c:
         02:46:06:10:ee:34:71:da:be:8f:cc:6e:52:51:f7:a2:f6:a6:
         70:60:77:82:39:d5:9a:27:a5:a9:e1:40:8c:c6:4a:47:bc:a8:
         76:f2:4d:31:7c:2c:ec:1b:c4:b3:bf:d8:f3:bc:e9:be:cb:f1:
         2a:20:a4:d3:f1:83:85:49:7e:bc:79:cb:75:0e:20:0c:d9:cd:
         60:eb:5d:ae:17:2c:de:fb:08:28:72:ef:85:a1:70:ba:11:1f:
         ba:8d:73:90:ca:24:97:21:ba:c9:22:bb:50:b2:ca:15:ae:b8:
         26:eb:ad:d6:4f:0f:5f:c2:f4:cb:74:06:bb:99:5d:c6:3f:68:
         55:a7:20:59:f6:ef:dc:4c:81:f6:b6:8f:d6:a3:ba:25:5d:e6:
         a5:c9:fe:58:5a:f1:a5:e7:29:69:59:fb:61:f0:b3:f8:c0:69:
         04:fc:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:46:44 2025 by rpki-client