Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/93242c1c-8311-3020-83b9-759d0f5dc914.roa
File:                     93242c1c-8311-3020-83b9-759d0f5dc914.roa (raw, json)
Hash identifier:          rzm3vwCnsLll1eqjaVZff4M+e3RleOEtWP3C8yx56Ks=
Subject key identifier:   0E:98:21:4A:60:89:FA:B2:F9:33:4F:60:97:65:B1:15:08:3C:35:CB
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849DED9AE39F561A637A42C7A80
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/93242c1c-8311-3020-83b9-759d0f5dc914.roa
Signing time:             Fri 16 May 2025 08:41:53 +0000
ROA not before:           Fri 16 May 2025 08:41:53 +0000
ROA not after:            Thu 14 Aug 2025 08:41:53 +0000
asID:                     14114
IP address blocks:        169.145.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:de:d9:ae:39:f5:61:a6:37:a4:2c:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 16 08:41:53 2025 GMT
            Not After : Aug 14 08:41:53 2025 GMT
        Subject: CN=5a82a525-b580-4148-a65e-969390606a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:3e:a4:df:a9:87:51:47:7b:6d:f6:35:fb:
                    5e:1e:ea:28:ed:d8:5f:6b:fb:5a:59:b0:47:c6:c9:
                    a0:1b:a7:09:c7:1a:31:0a:70:32:a9:07:de:85:eb:
                    ee:eb:27:17:2a:a4:f1:f1:87:1f:d1:b7:c2:b5:f5:
                    35:18:4a:3c:b1:cb:2b:e6:48:bf:a6:1c:96:0c:11:
                    b1:0a:98:c7:6d:7a:8e:fa:f2:e3:3b:35:97:13:62:
                    c0:68:1e:ed:72:6e:3e:28:7a:a8:a8:a9:f7:02:65:
                    ce:a3:d2:46:d9:35:4a:7d:2d:56:ac:92:46:0c:78:
                    84:00:21:60:b4:72:3d:21:c4:ec:df:f7:97:0c:d5:
                    82:00:01:84:fc:f1:bf:f1:f5:24:f8:68:a5:8d:65:
                    cb:49:e1:f4:c9:e4:c8:08:88:9e:bc:89:cb:4e:b9:
                    f4:a4:4e:5b:ba:81:86:32:b7:80:8b:a9:a9:64:da:
                    60:cb:ff:d4:30:02:7f:f1:71:6e:72:91:73:9d:76:
                    fb:66:9e:62:67:01:98:34:c1:dd:06:4e:da:46:6a:
                    95:d4:c4:1f:d5:ae:d4:cd:92:4e:55:89:ec:8c:95:
                    3a:06:94:51:b7:70:ec:47:22:92:d7:bf:fc:b3:c8:
                    cb:4f:4e:2e:d0:31:9e:e2:25:13:fc:27:4e:1e:c2:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:98:21:4A:60:89:FA:B2:F9:33:4F:60:97:65:B1:15:08:3C:35:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/93242c1c-8311-3020-83b9-759d0f5dc914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:47:d5:e1:ff:8b:ef:fa:50:bf:eb:90:24:72:3d:05:7d:05:
         b0:1c:79:7b:3e:ae:2e:5b:59:14:19:80:1d:98:7c:b9:63:cd:
         8b:34:1b:84:85:57:31:8e:c2:fe:a0:d8:64:53:78:18:0b:8e:
         3b:aa:f2:db:d1:5a:d6:be:f9:8b:2a:6d:a6:cb:36:5d:fa:2f:
         09:03:63:e5:5b:40:62:7d:4f:0d:51:ef:c1:28:f7:cf:1d:cb:
         75:e0:ab:0c:4f:f8:94:a1:ce:5b:f3:91:74:40:8f:c6:da:c0:
         85:15:88:4b:37:c4:59:ed:4d:aa:59:72:79:4d:12:0d:ec:5b:
         fe:69:54:a7:75:01:56:b9:92:54:35:b0:cf:ec:17:7c:95:17:
         f5:3c:01:cd:89:c5:a4:f7:49:a8:79:28:c1:ac:0d:2e:29:2c:
         d9:1f:7c:a2:c6:3f:83:00:77:df:33:3e:81:b4:da:f2:4b:a9:
         d7:c5:0d:e0:42:8f:f6:66:3e:5e:d8:2b:6f:d0:79:7e:dc:84:
         0c:7a:1f:ad:be:fb:8a:d1:68:88:9b:5d:d1:02:1d:32:a1:e1:
         4b:2d:89:9f:ee:27:b5:2b:60:ec:9d:a9:fc:fd:ef:0c:bf:9b:
         95:4a:a6:ea:b5:95:f1:c8:05:36:25:40:55:10:cb:f1:7b:9c:
         bd:4c:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:40 2025 by rpki-client