Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/382f88bf-202b-36d2-b132-4cab93ad15d5.roa
File:                     382f88bf-202b-36d2-b132-4cab93ad15d5.roa (raw, json)
Hash identifier:          vw0q9L+wWE+73U1cSu8FGYw08NcY33yO0gJ574+rz4o=
Subject key identifier:   33:6D:1C:74:48:D2:71:EE:8B:99:5A:EC:F6:FD:A5:B6:BD:58:B3:5D
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584A549B2201C0904D6E89C82200
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/382f88bf-202b-36d2-b132-4cab93ad15d5.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     4237
IP address blocks:        20.137.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:22:01:c0:90:4d:6e:89:c8:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=2fd84dfb-0d90-409f-a45f-fe58baaf5d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:22:a9:ee:b7:3d:fb:e3:7e:f7:79:62:96:
                    cf:fa:94:44:45:59:96:dc:c4:26:8d:71:c3:e6:5e:
                    9d:17:93:6d:a6:0b:1d:e9:00:72:6c:f6:03:1a:47:
                    4f:2f:c7:01:77:10:fd:56:ee:b1:c6:2b:22:c6:e5:
                    6c:01:8b:d8:f0:dc:b4:30:5e:37:87:cc:01:d5:1e:
                    3a:0e:3c:a1:c4:df:6f:32:d4:79:a4:3a:bf:86:d5:
                    30:82:3c:ad:c1:22:f9:28:b7:d5:a5:46:c3:78:6d:
                    aa:ef:0e:42:6a:86:c3:8b:0c:87:34:18:20:4c:cb:
                    44:ee:e6:4b:f8:de:71:09:69:75:05:e5:d5:c5:35:
                    65:d2:17:66:37:89:fb:48:77:37:5b:00:fe:f0:2b:
                    30:db:ca:65:a2:83:3c:af:34:63:fc:d4:fe:16:7b:
                    e6:82:b1:fc:e8:e3:fa:a7:0d:93:0c:d1:59:da:eb:
                    f8:0d:c6:34:25:9b:1b:0f:df:46:a7:77:5e:4a:73:
                    4d:b1:bd:ae:eb:d9:86:f8:a6:a1:0d:32:15:1b:50:
                    32:bb:07:4d:32:56:e4:70:75:bf:85:2d:74:2f:dc:
                    46:1c:aa:df:74:ed:36:68:08:b4:be:73:94:12:31:
                    47:25:bf:a5:3e:bb:a0:70:23:74:60:6c:8c:4c:5c:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6D:1C:74:48:D2:71:EE:8B:99:5A:EC:F6:FD:A5:B6:BD:58:B3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/382f88bf-202b-36d2-b132-4cab93ad15d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.137.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6f:76:08:b5:b7:0f:13:25:be:ed:8f:bb:ce:ca:03:0f:32:
         96:93:dc:f0:8b:63:9c:72:fb:29:7a:52:77:43:eb:f8:39:7c:
         a5:db:4f:e7:8d:c1:39:4e:46:44:b5:d5:6f:cf:b1:28:9b:a1:
         82:cf:7c:e1:e3:12:38:f5:69:0a:39:f3:a9:c1:1a:4d:35:80:
         61:8c:20:82:c3:c1:5d:26:06:62:48:c8:fa:c9:85:72:2c:ac:
         bc:43:05:eb:9a:34:31:f7:a7:09:c9:69:6b:1b:1f:28:25:40:
         af:e8:47:36:13:29:e1:42:a4:97:21:4b:fc:f6:82:4d:97:77:
         74:44:8c:8d:c9:c3:38:1d:e4:3c:f3:cf:43:33:a5:85:63:0f:
         99:97:f3:ce:75:d3:b5:00:20:3d:f5:3a:73:17:4e:55:75:cf:
         03:e5:95:3a:6a:65:31:2c:b5:7e:7a:0c:aa:83:0a:01:09:ca:
         99:68:58:68:63:66:89:2d:71:06:0e:9f:96:7e:22:45:41:6a:
         6d:ac:35:51:69:29:03:68:e1:e0:25:55:b1:7b:ed:a6:ee:b0:
         ec:36:c9:84:14:bd:7b:a1:f1:c1:84:eb:ca:4a:ee:ad:4e:cc:
         36:ee:b2:b9:6d:6d:4b:d4:22:6a:6c:61:e6:8e:a8:a2:b1:e6:
         60:72:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:07:14 2025 by rpki-client