Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54b784cf-056e-32e3-992f-a4eed480d314.roa
File:                     54b784cf-056e-32e3-992f-a4eed480d314.roa (raw, json)
Hash identifier:          tj1BGhDpk3f6qpdS9/vgr1b+U27H3f6Nj5fjX5tk120=
Subject key identifier:   64:D2:B1:EE:39:ED:F3:E2:FD:B0:8F:27:0F:BD:7E:7C:3B:B5:C5:4F
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584A549B2182DDFBC8A0816CD0C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54b784cf-056e-32e3-992f-a4eed480d314.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     4237
IP address blocks:        20.137.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:21:82:dd:fb:c8:a0:81:6c:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=3894c66e-f9fa-4305-b667-28fae4dffb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:f2:06:9d:d8:c0:ec:25:1e:7e:f8:46:70:
                    5d:3f:3a:1f:68:99:8a:b9:2e:35:0d:75:eb:5c:e8:
                    ff:8d:58:14:dd:f1:8f:1f:d7:e4:32:8a:74:e7:33:
                    e3:0b:3e:7c:ca:ec:47:84:70:bc:69:1a:96:3b:de:
                    f0:28:63:8d:8b:8e:b9:99:cd:b1:3b:4d:17:fd:19:
                    38:f5:3e:0b:ef:82:d7:42:f6:ec:da:25:37:41:5b:
                    08:71:d9:f3:6f:6b:dc:a6:1a:6e:14:8b:bb:65:0b:
                    e7:f8:f3:15:7b:bf:3e:6d:c4:59:bf:74:5b:d6:35:
                    e6:dd:39:96:ba:71:31:d0:1d:3b:37:ea:14:df:dc:
                    f2:49:b3:67:41:3c:20:b9:f9:44:d8:63:22:66:a7:
                    61:d7:bc:00:6e:67:89:32:93:0d:a7:8f:cf:ad:18:
                    df:11:56:99:c7:5d:7e:f5:28:d5:fa:1b:c3:1a:f7:
                    11:d2:d6:61:6a:15:ab:06:89:fe:cb:50:a7:d1:2c:
                    42:e6:60:cf:63:5f:94:12:9a:5e:50:8d:95:68:44:
                    8d:29:8c:16:3d:a2:b2:0f:8a:9c:50:c3:d9:f6:8d:
                    1c:f1:33:da:fe:0a:31:69:a9:12:92:54:88:c8:40:
                    0c:e0:23:40:c4:0b:c5:03:98:c7:f7:ec:fb:6e:5f:
                    25:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D2:B1:EE:39:ED:F3:E2:FD:B0:8F:27:0F:BD:7E:7C:3B:B5:C5:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/54b784cf-056e-32e3-992f-a4eed480d314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.137.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7d:5d:78:3f:43:14:73:ea:b4:fd:d2:ec:ec:52:93:ec:8e:
         55:82:f3:c1:af:c0:2a:f3:b7:30:ce:d6:84:f7:6c:2a:5c:ad:
         3b:9a:df:98:d8:0a:b3:4b:12:25:68:3f:55:c0:f4:66:34:dc:
         9b:70:27:34:c9:4f:29:3b:31:d9:26:28:99:f8:42:10:62:60:
         a9:46:68:b4:6a:35:e6:4b:b1:0f:af:c4:da:10:7d:6a:88:2b:
         e7:29:93:4e:7c:09:f3:b0:07:2e:f8:ce:f1:f2:1c:bb:03:1d:
         d5:0e:01:ac:12:81:d4:7f:da:ac:a1:62:8b:b0:88:f0:77:51:
         b4:7f:08:8f:0b:c2:ea:37:82:f4:28:96:82:09:f3:d3:b4:96:
         cb:a7:ff:87:08:6e:da:71:88:ff:b3:44:38:9e:2e:7a:7a:d5:
         06:4c:04:fc:eb:59:4f:1d:6b:94:a9:5d:7b:7a:a3:aa:77:4f:
         e0:b5:f1:e6:7f:41:91:44:24:04:ea:da:74:4f:14:cc:ff:c1:
         9d:7a:4a:a9:16:b0:15:1e:14:75:84:17:25:3d:c3:e5:2e:8c:
         ca:76:50:77:dd:e4:9d:16:07:88:10:ab:7a:26:89:1f:8c:ba:
         54:4e:fd:c1:ab:f1:94:ec:b7:c9:4a:95:da:71:9f:aa:1b:25:
         97:72:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:11:45 2025 by rpki-client