Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa
File:                     b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa (raw, json)
Hash identifier:          w6Ymqcf84KIEIBMhgJ96eR+vVKI2RMKzhi2mkiNgDsE=
Subject key identifier:   A2:83:EE:4E:35:47:D4:46:C9:A8:5B:43:20:A8:F3:FA:94:52:23:32
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849B9A9F4C51AAC7595C5244780
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     3360
IP address blocks:        20.138.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:f4:c5:1a:ac:75:95:c5:24:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=226dc4d5-dd76-4d7f-8c70-8c4867bd16cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:47:42:d2:d6:14:6f:81:98:f6:fd:ef:24:
                    ca:ce:8e:6e:8d:17:95:f0:5b:6a:49:4f:c6:f2:4b:
                    b5:fc:af:ba:18:ec:78:df:4f:90:de:17:4a:a8:95:
                    84:9e:8b:ca:78:b6:3a:1c:c2:72:e3:ee:21:ba:a9:
                    43:42:06:08:9e:3d:f3:ab:19:5b:b7:ab:50:1f:45:
                    15:a1:e5:cb:d7:2c:81:31:ea:83:78:27:d8:53:38:
                    a6:04:2a:9a:9e:01:3c:74:2e:9f:dc:7d:d8:db:99:
                    a6:44:49:fb:80:fa:a9:fc:e4:6d:69:45:12:83:2d:
                    08:00:31:86:99:ff:c1:e8:f6:78:f0:18:75:92:9c:
                    d2:71:ba:04:e2:f3:c7:f0:6b:62:e5:e2:77:ef:a2:
                    11:02:75:c3:1b:cc:4b:21:87:36:6f:fb:9a:cf:5b:
                    70:06:3a:5b:e4:2e:f0:40:3a:98:f9:d5:c4:28:27:
                    04:da:a8:19:e0:e2:7d:11:e4:4f:0a:b2:32:47:5e:
                    64:21:5a:05:7a:40:94:d3:c4:44:10:a0:1b:03:a5:
                    61:af:f9:fe:61:f9:28:ff:22:ce:75:89:a6:ac:df:
                    91:79:75:ca:85:bc:3a:2e:da:8b:40:71:ef:49:6c:
                    cb:9b:95:20:92:74:27:b9:cd:22:6e:86:bc:c5:6a:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:83:EE:4E:35:47:D4:46:C9:A8:5B:43:20:A8:F3:FA:94:52:23:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b5edcee0-26fd-34b3-866d-df4b2d2d2c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.138.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:df:ec:3b:7d:01:65:9c:3c:1b:02:05:fb:e2:7a:1b:39:72:
         c8:b9:d8:75:8e:6b:ff:6f:c3:f8:a5:c2:18:d8:49:5a:fd:f3:
         d6:da:55:fd:7b:41:e7:9f:55:b2:b0:0b:67:ac:46:91:a3:c1:
         da:ee:86:fd:2a:cb:5f:3d:b8:d5:49:34:30:26:45:15:f7:e8:
         f5:e0:ec:ba:8b:ae:54:77:e0:5b:c5:b8:5c:0e:5b:5c:12:b2:
         b1:db:dc:f9:b8:cb:49:32:ef:47:c6:aa:34:cd:c7:40:56:f5:
         12:19:8f:72:5f:34:5a:d4:61:9a:b4:a9:94:57:52:50:2f:81:
         b0:ae:b4:4f:31:34:ee:37:e1:58:a7:91:9e:23:88:3d:0f:25:
         fe:74:20:5d:b9:3c:3f:79:56:13:ba:a4:42:02:28:dc:2e:06:
         42:f1:b4:82:9c:8d:7c:73:52:c0:16:1f:3a:de:0e:88:c3:a3:
         c1:38:d0:14:1b:c5:30:a8:b0:56:59:36:a3:32:b8:a6:21:36:
         15:cc:70:99:a4:d9:e1:4d:08:4b:3f:f0:69:d9:c8:48:85:2b:
         ce:ea:0b:83:6f:fc:03:3b:81:12:40:8f:16:4b:40:23:7d:09:
         5e:b5:3e:44:01:7b:59:c2:77:73:9e:85:c0:7f:96:2e:ae:0f:
         74:c8:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:18:03 2025 by rpki-client