Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0398dae-4a02-3265-bb03-9b79515304ed.roa
File:                     e0398dae-4a02-3265-bb03-9b79515304ed.roa (raw, json)
Hash identifier:          jR4dviKQoDmNKyGGAKcVTPUoBZShOS3ERZYdyTfm8rY=
Subject key identifier:   BE:56:6F:8B:E8:81:1A:74:37:EA:86:48:C3:B1:BA:D6:D7:09:35:53
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849B9A9F8287699544FEE62BDC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0398dae-4a02-3265-bb03-9b79515304ed.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     203
IP address blocks:        20.156.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:f8:28:76:99:54:4f:ee:62:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=d6cc292e-ffd1-4787-acc0-ae2658e4216f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:dd:94:a2:5c:c8:66:6c:44:fd:e1:78:07:
                    9e:a5:19:ed:6c:64:a6:b8:22:3b:81:a2:38:79:fa:
                    dd:4e:87:da:37:f9:2f:ab:b7:1e:0d:85:bf:0d:21:
                    04:49:f3:8d:ae:b4:a0:ce:52:38:8a:25:a9:a1:71:
                    99:07:b2:bc:53:d7:a2:8a:e2:ed:87:ba:52:75:83:
                    c3:50:23:4d:2a:34:27:b0:70:0c:35:50:29:75:db:
                    56:61:cf:29:a5:9b:f3:08:7a:98:2a:61:bb:7d:55:
                    00:2f:13:8f:97:8c:34:87:9e:e7:e5:6c:57:de:c4:
                    75:e2:ab:cb:a7:8b:36:db:bf:f0:88:04:ae:cc:da:
                    96:04:20:fd:c8:58:af:78:15:41:cf:84:9a:16:60:
                    1d:ad:c5:e6:81:b7:dd:ad:da:3d:6a:e4:90:88:2f:
                    47:d0:4f:79:13:ed:d1:89:b6:1f:d3:ec:e8:53:ca:
                    8e:de:97:54:b8:7a:93:9b:29:ef:e4:b0:0f:54:87:
                    9d:4a:10:46:7e:ae:80:95:18:f4:91:50:bf:84:6f:
                    22:9a:df:00:bc:5e:c4:ef:5a:0e:25:f2:b7:78:7f:
                    6f:ea:0d:c5:f7:6e:91:79:9f:2f:ce:e7:00:0f:f2:
                    0e:15:40:42:39:81:1a:7c:ed:21:bc:05:4c:72:7e:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:6F:8B:E8:81:1A:74:37:EA:86:48:C3:B1:BA:D6:D7:09:35:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0398dae-4a02-3265-bb03-9b79515304ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.156.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:5f:34:19:df:5b:aa:2f:cf:a2:99:32:cf:73:14:58:de:
         88:92:59:4e:45:1e:92:1a:62:ac:08:06:8f:25:7a:cc:4b:5a:
         57:03:85:8e:12:31:8b:ca:ad:4a:75:e3:46:b6:ae:a3:50:1e:
         07:84:1e:99:2b:51:a9:cf:65:f6:65:a1:5f:a8:b2:1b:25:da:
         6b:8a:5b:f3:f7:14:27:02:a9:25:cf:c6:48:9e:67:7a:83:c2:
         82:02:1b:2f:0f:0e:f5:db:44:73:5a:49:16:9a:7d:75:6a:5c:
         c9:53:55:c6:5a:ba:1e:b4:63:b3:74:0e:b5:91:e8:25:22:21:
         86:f1:12:f3:63:93:b0:19:e0:81:c9:50:70:ca:97:93:ce:ad:
         64:e5:0d:9a:83:e1:d8:8c:1c:67:7a:7a:15:8a:81:3f:b3:7e:
         90:d8:20:a7:d1:58:a5:3d:ce:4a:47:d0:eb:c8:c9:0c:ab:78:
         ab:b6:e1:ca:f7:5a:e3:7c:6e:2e:e2:44:64:95:24:f3:08:e5:
         c8:09:e7:c8:bd:8c:09:b0:de:29:5d:96:d0:46:c6:c7:1d:1d:
         f5:fc:2a:26:05:0c:4f:09:ce:00:8c:06:cd:bf:bd:c9:36:79:
         8f:11:ea:07:83:87:82:43:fa:fc:b6:44:79:1d:a5:64:f3:39:
         16:18:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:02:10 2025 by rpki-client