Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c964f79f-8fc6-3edb-83f1-2eb650271acf.roa
File:                     c964f79f-8fc6-3edb-83f1-2eb650271acf.roa (raw, json)
Hash identifier:          Vrsj99mV+tvI1XiZmSu6GzGjbryBATovE6YSipeaJLw=
Subject key identifier:   A0:4B:E2:F1:95:81:78:4C:09:D9:E0:0B:A1:7D:C5:A9:A7:F5:87:E2
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584A0C056C560389E29C42A52EA0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c964f79f-8fc6-3edb-83f1-2eb650271acf.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     203
IP address blocks:        20.148.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6c:56:03:89:e2:9c:42:a5:2e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=340de307-0d06-4571-8ffa-bd859815f5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:7f:4d:b6:fe:3c:cf:38:cd:73:7e:10:70:
                    fa:d6:51:e9:4a:aa:64:c1:36:b5:1a:7d:3d:82:4a:
                    0a:b9:35:f8:dc:67:9e:97:15:2a:9c:86:38:b1:b1:
                    31:46:f1:86:92:a7:aa:bc:22:2f:a5:21:fe:b7:d4:
                    74:12:e7:84:77:00:45:fe:63:5e:84:e5:66:fa:a7:
                    b9:1a:90:77:9b:b3:83:9f:60:dd:8c:d9:c1:92:06:
                    25:cc:cc:61:3d:3e:f1:da:49:f2:7f:8e:aa:77:82:
                    93:a0:19:d1:17:64:1d:43:7c:c0:e1:9c:17:64:a9:
                    4b:7a:94:9f:58:56:e4:39:2c:27:10:2e:93:74:77:
                    7b:ad:dc:50:cc:e5:8d:eb:8e:cd:a4:f1:d5:61:66:
                    c1:c7:ba:87:b8:30:f9:f7:ab:4b:79:b3:2d:58:a5:
                    18:1b:a6:66:58:4e:da:52:9a:bd:f3:75:6c:0d:e7:
                    38:34:85:e7:4f:85:ab:9d:2a:3a:08:0b:f4:58:87:
                    e3:75:5b:e5:86:87:f3:db:5d:bf:6c:84:7b:a0:3e:
                    62:80:4e:e6:d6:67:62:84:0f:85:8a:82:32:08:1c:
                    07:b0:c2:3a:06:2b:aa:13:50:21:a6:ed:a6:df:54:
                    11:53:d6:58:da:a1:4f:2f:04:5b:e8:5d:e2:d6:69:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4B:E2:F1:95:81:78:4C:09:D9:E0:0B:A1:7D:C5:A9:A7:F5:87:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c964f79f-8fc6-3edb-83f1-2eb650271acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.148.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:99:3c:2f:53:d9:01:e2:29:4e:ae:58:f3:b8:02:9c:ac:c9:
         f9:3d:8b:d6:d5:51:2c:72:54:39:de:93:3c:91:98:a9:d8:62:
         74:4a:d8:ed:b7:b0:28:69:4c:62:ca:7d:20:af:ac:de:03:ed:
         3e:0e:23:4a:8a:ef:3f:43:70:33:56:5c:2e:c3:a7:52:a4:58:
         2e:ed:72:6d:fc:90:fe:63:bb:5f:95:21:32:6e:f4:7b:22:80:
         81:33:c8:df:b9:9a:c1:ec:2e:0d:89:ab:31:24:29:d9:de:41:
         c4:68:62:bd:61:e9:be:fd:ac:a5:6a:db:df:2f:95:2d:2d:7e:
         27:02:58:f2:fe:14:78:fd:d1:70:07:74:33:c3:d7:a7:df:12:
         f6:78:df:1c:ba:6c:8c:6c:95:9d:fc:54:31:05:41:e4:0c:48:
         f2:35:13:f8:2c:0e:0c:bc:89:46:f8:34:be:f1:0b:dd:5a:45:
         f5:fe:e6:e9:79:67:a9:ff:68:a0:da:e3:ba:97:7f:e0:8b:e0:
         03:35:34:d0:5d:52:fe:1d:91:4f:16:db:10:0e:8e:d1:d3:b7:
         ac:54:c2:69:87:b8:f3:9f:d0:5f:9a:06:61:29:9a:3f:db:4f:
         c4:49:87:05:3f:13:1c:cf:4d:e4:2c:6a:57:27:21:b0:20:b7:
         1e:d2:f8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:16:40 2025 by rpki-client