Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa
File:                     16646b1c-7273-3e1a-9ca3-efedf58284e9.roa (raw, json)
Hash identifier:          ikBuUgSKHucYGNfygO5x/WeGNwLiyuqi4dWG9/Ynvn4=
Subject key identifier:   AB:E4:A4:73:0D:5D:53:C2:27:81:42:F1:3F:EC:FC:0E:01:A8:19:B6
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858493673BA1E99CEDA3CA6469480
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa
Signing time:             Mon 17 Mar 2025 01:00:37 +0000
ROA not before:           Mon 17 Mar 2025 01:00:37 +0000
ROA not after:            Sun 15 Jun 2025 01:00:37 +0000
asID:                     8069
IP address blocks:        20.153.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:36:73:ba:1e:99:ce:da:3c:a6:46:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Mar 17 01:00:37 2025 GMT
            Not After : Jun 15 01:00:37 2025 GMT
        Subject: CN=286cd222-b629-45f6-82f5-3e93c000fd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:da:b7:34:00:e1:2f:9f:fb:bc:5e:a7:47:
                    87:8f:c4:db:c1:be:5f:30:a3:df:9f:c8:ab:0c:de:
                    d8:ce:55:b0:8e:08:13:ff:55:f3:e5:3d:b1:c5:ca:
                    0b:e6:04:a8:8f:60:07:c4:dd:be:2f:54:4a:8a:f7:
                    f0:b1:58:b2:a3:d1:a7:c3:ba:6c:46:3d:4c:aa:51:
                    7c:03:f6:6a:77:d2:49:da:90:8d:40:b6:c9:a5:21:
                    58:13:56:4b:f9:25:01:52:9b:bc:11:1b:b9:1c:24:
                    63:54:7b:99:d3:0f:b4:d5:d5:7f:64:3b:78:23:d7:
                    0e:b2:7a:9e:07:f5:7d:60:e2:83:55:15:5d:07:84:
                    3c:ee:4c:9b:a7:b0:70:d2:1b:f3:c8:0d:30:39:a4:
                    0d:2a:0d:e4:93:30:9a:ce:12:25:f2:f1:1d:14:a1:
                    d6:86:86:66:82:74:0a:22:87:0a:e1:06:fd:c1:49:
                    30:7b:31:ee:c1:9a:da:e5:b0:00:00:91:d7:c6:15:
                    92:f6:84:2b:e5:ef:f0:36:72:04:4d:56:cd:8a:3e:
                    e8:95:13:35:1b:0f:5f:aa:39:0b:79:a0:fc:5f:c6:
                    b2:13:81:e2:86:d8:f8:8c:a9:6c:48:9b:33:ef:01:
                    29:20:ed:90:68:3e:a8:75:9f:62:fc:5a:59:25:f9:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E4:A4:73:0D:5D:53:C2:27:81:42:F1:3F:EC:FC:0E:01:A8:19:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b6:50:fe:e6:4c:5c:44:a1:8d:82:1b:3c:9e:33:2d:c4:84:
         6b:cf:21:f3:ab:1f:54:6b:97:78:e6:a9:5e:9b:bb:81:47:5a:
         40:b7:e1:2d:2b:07:31:f0:8f:42:5f:b1:c3:85:28:7f:1f:1f:
         3d:fc:cd:b6:ad:8b:21:ac:fb:47:af:41:c4:9a:8e:e0:2c:7b:
         86:26:46:5b:3e:48:58:d9:94:b7:33:c4:11:a2:eb:a4:d3:0e:
         89:48:23:d3:5f:ed:22:df:b5:cb:4a:40:c5:aa:c8:5e:7e:56:
         5e:e7:13:16:ee:c2:72:23:23:99:32:6e:f6:f1:3d:92:6f:6c:
         99:45:3f:41:ea:95:28:30:5c:0d:c6:22:03:26:51:91:ee:e2:
         83:ba:45:36:9f:78:6e:52:76:73:0d:db:cf:f2:1e:b2:6f:4e:
         99:06:2b:5c:58:5f:81:08:34:1e:0c:10:1e:14:63:91:ea:ab:
         81:64:4e:92:4d:3e:57:1d:fd:79:ac:56:47:a3:fb:8c:6e:12:
         18:cc:b7:ec:08:b5:76:26:58:c8:d6:5d:0f:12:9a:98:9d:10:
         b4:bf:9a:d5:31:d8:62:e6:0d:23:cf:8e:e0:2a:a9:08:88:f1:
         c6:a6:2f:5b:0c:43:bb:56:d8:4b:99:7d:1f:1f:21:8b:f8:f9:
         97:45:67:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:40 2025 by rpki-client