Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ecf6ba20-636b-3ffa-9a76-00138358f501.roa
File:                     ecf6ba20-636b-3ffa-9a76-00138358f501.roa (raw, json)
Hash identifier:          Zj6GXnvXkOFL9fRuAj5jXA9Fc04sPSFIEKGPZNT+E/E=
Subject key identifier:   0B:6B:57:D0:E4:26:EF:F1:62:24:A3:75:73:4A:22:B2:3A:83:A0:42
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285845E494A5FC0B521B0F4C4AFBF8
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ecf6ba20-636b-3ffa-9a76-00138358f501.roa
Signing time:             Thu 16 May 2024 14:49:53 +0000
ROA not before:           Thu 16 May 2024 14:49:53 +0000
ROA not after:            Wed 14 Aug 2024 14:49:53 +0000
asID:                     203
IP address blocks:        20.132.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:94:a5:fc:0b:52:1b:0f:4c:4a:fb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 16 14:49:53 2024 GMT
            Not After : Aug 14 14:49:53 2024 GMT
        Subject: CN=17a68b0a-2938-4f14-9bb7-636c13560db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:08:60:de:b1:b4:98:b1:48:cf:17:64:97:
                    b7:6e:dd:13:a1:58:b5:7b:06:b7:9d:2f:74:5a:5d:
                    50:cf:ec:14:1c:f5:81:9b:11:72:ed:95:9a:aa:40:
                    db:6f:4f:67:2c:cc:88:ac:6d:04:16:f7:66:22:90:
                    6e:b5:cd:68:6f:cf:16:d9:2a:ac:1b:bd:00:54:4e:
                    d6:41:2c:c8:a1:b2:eb:3b:ec:de:9d:45:36:b4:0a:
                    06:4a:1b:46:d8:86:6d:84:f6:a3:80:9c:51:2b:1f:
                    a0:33:45:da:b3:04:0b:0b:5f:80:a1:51:61:ca:48:
                    d2:1c:21:64:58:ab:ee:63:7c:d3:39:8d:ae:97:2c:
                    69:69:70:83:26:07:ba:73:8d:8e:b0:fd:21:ae:69:
                    55:94:6c:e5:b0:9e:29:0c:04:27:50:55:60:84:6a:
                    13:ea:4d:5f:21:26:70:af:61:d3:51:89:d7:17:63:
                    67:d7:03:29:9d:79:f2:68:e6:79:ab:20:f1:d4:99:
                    1a:ff:c4:f1:27:b4:66:b6:f0:ff:9b:52:6d:5d:2d:
                    27:c4:0c:2d:b1:49:6f:31:2e:9d:87:ed:54:bb:b6:
                    45:54:65:37:2c:23:86:93:30:91:fa:53:32:7f:f7:
                    14:62:81:76:a8:7d:bd:82:d3:63:7f:4f:67:27:8c:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6B:57:D0:E4:26:EF:F1:62:24:A3:75:73:4A:22:B2:3A:83:A0:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ecf6ba20-636b-3ffa-9a76-00138358f501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.132.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a4:6d:02:27:0d:31:8c:31:a5:59:a7:ad:8c:f7:ad:3b:50:
         da:41:8f:cb:b8:18:c8:54:64:05:48:75:8f:c5:72:58:c4:e1:
         08:59:f7:0d:49:98:64:9f:fc:b6:a8:48:a3:77:d7:75:2b:32:
         f3:e7:9a:49:cd:a6:ca:9e:3d:3e:90:97:2f:c8:21:65:89:c4:
         25:1c:03:35:8d:fa:8c:e2:75:b0:73:f1:87:1e:c6:4e:d7:70:
         ea:67:50:54:50:f1:60:d3:63:48:1b:d3:06:f6:f2:d4:54:e7:
         95:32:ba:1d:ef:f2:eb:6c:a4:5f:6c:d5:4a:1d:5d:74:ef:30:
         93:31:94:77:b6:6c:8c:95:f9:e1:bd:6d:20:fe:8d:6d:e5:27:
         ad:54:80:c4:22:e0:97:d1:30:59:a2:5e:10:ec:1c:8e:8c:93:
         ec:96:02:63:64:6b:72:1f:1d:e6:31:fd:52:a0:71:14:f0:cf:
         af:1a:09:8a:75:cf:2d:7d:a7:6e:bd:57:56:9c:7b:18:c9:37:
         7f:d0:f5:07:e9:8f:80:1f:12:9c:8d:e2:80:b6:96:51:40:b7:
         68:f2:94:18:4c:49:81:7a:71:fd:9e:9d:2f:9a:fb:85:0d:f9:
         ab:c1:24:75:d6:75:43:51:50:0b:cd:fa:23:0a:b9:41:9c:45:
         3d:2f:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:15:22 2024 by rpki-client on console-fra.rpki-client.org