Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a304203-6418-3094-b438-7bfeba4f88ca.roa
File:                     0a304203-6418-3094-b438-7bfeba4f88ca.roa (raw, json)
Hash identifier:          SpQc8JByRqh65anj/Fdm+6RmS/62o4FJ2WepDw6epos=
Subject key identifier:   E6:CC:3D:46:AE:0E:DB:4D:7E:0D:F8:99:7C:B7:FB:48:A3:D5:40:68
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7850806871722CAD309A900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a304203-6418-3094-b438-7bfeba4f88ca.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.68.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:08:06:87:17:22:ca:d3:09:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=672c8398-e948-4e38-ae9e-2227830aaa24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:35:8f:20:55:65:63:9d:26:49:ee:14:03:
                    9b:14:19:1d:d0:96:b2:52:e7:3c:61:2b:7f:d5:73:
                    df:01:bd:5b:06:f7:7e:75:6d:a1:bf:dd:e9:78:27:
                    4d:ef:c1:58:b2:bf:23:6b:b3:57:65:ca:3e:4c:53:
                    35:e6:d3:87:61:3f:99:f9:29:77:65:0e:b2:50:8a:
                    6c:12:ff:6d:21:74:09:c1:29:73:ee:f5:01:8e:51:
                    57:fd:40:9e:f4:e8:73:cc:46:ce:e2:e4:a3:b3:1b:
                    44:ab:cf:87:80:4e:98:d2:cc:f0:bf:03:d8:27:e3:
                    3f:89:dd:22:b1:b7:9e:65:5d:78:83:5f:5e:31:0b:
                    f8:7b:f3:35:73:74:0d:cb:d1:f1:2c:73:48:c3:e9:
                    41:0e:4c:c7:52:d9:94:cf:89:2a:88:46:92:96:13:
                    3f:62:32:0e:d9:3b:71:51:c4:e5:56:33:0e:cc:9b:
                    9d:05:b4:a6:a4:bd:fd:07:37:f7:8b:7f:8e:29:2d:
                    92:0f:c8:39:2b:f4:e0:af:7f:2b:d4:59:81:11:d5:
                    9a:55:f6:47:72:51:75:c6:ca:ef:7e:d0:61:3e:d4:
                    ab:af:59:48:6d:34:6d:1b:47:6b:f5:91:dd:c0:a5:
                    a4:49:51:91:b5:2c:4d:7e:56:18:00:e2:7f:f1:d9:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CC:3D:46:AE:0E:DB:4D:7E:0D:F8:99:7C:B7:FB:48:A3:D5:40:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a304203-6418-3094-b438-7bfeba4f88ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.68.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2d:2f:1c:8d:e8:ff:71:2b:d4:ee:1c:72:69:60:f8:3c:23:
         40:c3:da:03:a3:9e:39:3e:28:78:1b:4c:9a:86:75:0a:23:bc:
         89:c4:4e:26:71:32:a2:4d:9f:b2:f5:a7:f0:a8:5d:d6:5a:b0:
         98:62:88:df:d7:6d:7e:dd:7b:19:4d:64:25:aa:5e:22:3c:3c:
         73:6b:91:dc:00:4b:c9:05:22:8d:d4:2b:96:70:20:61:25:fe:
         2e:90:97:73:32:a5:e2:30:ac:2f:f0:a4:e1:a7:2c:0b:4c:e9:
         ae:86:27:06:94:cc:46:af:8b:f5:4a:55:71:41:45:5a:d4:9d:
         0d:46:f3:76:59:0f:11:22:e7:17:71:e1:91:86:34:dd:aa:52:
         3b:be:67:84:fe:c8:72:c4:7e:31:cc:e5:59:e6:f5:c3:3a:48:
         96:7c:48:d5:24:f0:30:04:4e:76:93:51:cf:ab:3f:8e:ba:c3:
         82:de:2d:e8:69:a6:25:d4:26:52:26:1b:85:45:65:75:92:68:
         66:b8:61:cc:79:e1:1f:3b:85:7e:23:1f:42:e1:77:cd:de:9e:
         0c:fb:43:92:84:86:60:2c:79:e7:1d:16:81:05:9f:6b:e4:1a:
         54:ec:96:8f:d8:fe:80:9b:47:5a:31:7d:04:f0:62:8e:96:e6:
         e0:77:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:17 2025 by rpki-client