Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa
File:                     b012200c-09b0-31d7-a7d9-1df154b56fae.roa (raw, json)
Hash identifier:          rXLJbnWnOrd7A3qZEWCKyFBiSyB7ZloX8dinkYqB9YI=
Subject key identifier:   25:22:83:07:34:82:D7:4A:61:BE:E9:23:50:39:89:FA:3F:A8:C9:B8
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285848F7C13C0B35BA9E1854AD8500
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     202
IP address blocks:        20.134.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:3c:0b:35:ba:9e:18:54:ad:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=27833a5c-92ea-434f-ae0a-5cf149dc2d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:72:cb:4b:d4:ed:76:af:b6:25:23:58:d9:
                    77:0f:0d:68:4a:d0:17:d4:ac:89:13:b8:4c:9e:da:
                    0d:3d:a6:ca:85:c2:00:8d:23:c3:15:9e:1b:47:1a:
                    8d:ea:26:01:55:ae:04:6a:c0:f0:91:b2:59:b1:df:
                    c7:fe:94:e9:16:35:ee:d7:81:72:36:35:4d:5d:7a:
                    98:87:bf:33:7a:b0:dc:9d:8a:de:69:27:5c:93:67:
                    db:ae:fb:3e:07:9b:20:30:95:56:cd:39:b3:27:ba:
                    2e:95:cd:f7:3d:37:0f:13:45:37:74:27:2a:92:c9:
                    8a:0e:6c:59:60:d7:71:53:cd:5a:f1:28:b0:75:d2:
                    ea:9e:84:f3:f6:4b:b3:d8:eb:f4:9c:c5:9e:e1:44:
                    43:b5:6d:66:dc:93:d1:87:41:28:22:c3:c1:38:3d:
                    f9:8f:12:6c:18:f6:f6:c8:d6:74:d4:20:ae:b3:f3:
                    4a:d1:7f:5f:27:ae:99:83:e6:54:c7:98:3c:14:11:
                    64:d5:4a:30:e4:5e:3d:70:30:0f:06:96:46:38:ff:
                    ab:d3:fe:7d:db:48:44:4b:98:6d:f6:bf:99:e7:84:
                    b3:b2:ce:04:c0:3c:43:2c:fd:db:ab:ef:bb:d8:8a:
                    b7:e0:5c:45:0a:02:9a:bc:59:90:79:3f:6c:6b:0f:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:83:07:34:82:D7:4A:61:BE:E9:23:50:39:89:FA:3F:A8:C9:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:19:b4:ad:aa:14:16:54:16:d0:43:c0:41:d4:95:d9:22:cb:
         a7:fc:19:8e:86:1b:4e:b0:a9:17:b7:76:3b:29:de:f4:a2:b3:
         3e:12:07:f2:47:1b:30:a1:50:bb:ed:6d:f4:7a:4c:2d:35:01:
         1b:e8:d0:06:fc:97:10:3d:56:5a:43:27:4e:61:78:f7:fa:d1:
         4f:71:d4:ee:09:62:2c:27:d1:25:03:22:68:1d:78:2f:fe:a6:
         3f:27:f3:4c:8a:f0:df:2b:2e:49:34:08:34:6b:86:bc:3a:28:
         ab:d4:da:c9:d5:ee:6b:8d:28:ab:94:08:7e:e8:f5:63:69:8b:
         ce:4c:bd:59:a0:90:94:72:1b:bc:63:c2:cd:d4:58:3e:9e:94:
         f9:4e:c9:1f:3c:60:80:66:8c:19:63:bc:af:96:40:21:fb:1e:
         a4:0a:87:96:a4:32:d1:e8:33:5a:2a:86:a2:cb:e3:f6:dc:07:
         76:15:35:03:dd:f9:88:07:b2:99:64:84:ef:2c:77:20:48:d8:
         67:53:a2:b1:87:f0:97:a1:bf:93:55:62:36:4f:95:88:ae:f9:
         19:59:ae:18:0d:d4:b8:74:3c:58:bc:39:d7:aa:e5:11:a3:a7:
         a3:bc:df:af:d7:94:7a:71:f0:9c:fe:81:c4:c8:95:65:f4:10:
         d3:84:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:32 2025 by rpki-client