Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa
File:                     0f78b3fd-1445-384b-b208-6396a085dcb3.roa (raw, json)
Hash identifier:          39QzDJlciWa5RMT1ffNMj+a2HXGYQi5Tyx9Gw7QZ2TQ=
Subject key identifier:   19:28:9D:78:5C:0F:61:21:38:C7:72:AD:91:EC:D0:72:77:DA:B3:AA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BACB267FA65487C4134280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        34.108.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:cb:26:7f:a6:54:87:c4:13:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a4c730e4-af12-4558-8155-1aec7150e18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:7d:fd:d1:10:28:ea:e0:96:ae:a6:e3:4e:
                    36:65:e5:f9:60:9c:aa:83:a3:0c:5c:2d:8b:36:ad:
                    81:ae:c0:30:67:fb:77:09:39:e3:54:d1:cb:2e:c4:
                    59:6b:29:68:20:5e:cf:e8:e5:bf:8e:4a:c8:7a:56:
                    5d:39:3d:be:ee:46:f3:bb:61:32:bd:6e:0e:4b:95:
                    fb:ef:95:ef:e2:b2:e4:c3:dd:e7:5f:51:ea:e9:12:
                    b0:17:c5:3d:e1:3b:dd:4c:e7:59:37:64:be:de:9f:
                    73:e3:69:42:8c:7d:f8:bd:66:4d:15:75:df:e0:69:
                    be:69:97:0e:53:0f:20:50:42:6f:5d:b9:2d:c5:3a:
                    b9:1f:61:b1:20:01:9f:73:a3:ad:fd:7a:48:41:29:
                    6c:df:e3:a9:19:6c:05:44:a7:8d:79:9a:30:dc:dd:
                    10:e9:65:60:53:05:7c:0d:68:4a:bb:56:29:3d:c1:
                    c1:5b:0f:0a:bd:8a:a5:ef:a5:7d:f4:eb:c8:0e:f2:
                    72:be:1e:db:07:9e:5c:c3:e8:be:e5:0b:5f:e3:26:
                    3b:b1:c1:7d:7e:60:3e:1f:d9:ab:fe:b8:1e:0c:bd:
                    d3:9d:e4:f2:1a:f8:9b:db:e9:65:8c:d6:c6:56:6e:
                    bd:ee:aa:fa:3c:e6:71:8b:90:4f:15:14:f8:75:d6:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:28:9D:78:5C:0F:61:21:38:C7:72:AD:91:EC:D0:72:77:DA:B3:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.108.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:25:5c:49:24:49:cb:d6:9f:ae:a8:40:b6:dd:5f:66:52:
         27:cd:fe:66:c6:35:98:1d:e9:55:5c:c7:56:44:fd:b3:c5:90:
         a2:e8:f0:c4:68:1d:fc:78:6c:a7:09:c6:31:38:1f:d8:e5:21:
         8d:8d:ea:6c:25:d9:32:a8:ad:d2:9f:62:8a:4b:3b:01:fa:4f:
         ad:b2:4d:18:f5:66:2b:28:c7:01:41:5b:55:44:71:16:58:ad:
         55:f7:6f:8d:a7:63:74:6c:36:a5:a0:85:ce:03:84:dd:a7:62:
         85:0a:36:b6:66:9f:4a:fc:49:a7:5c:9f:4f:3b:ba:86:70:31:
         31:cc:5d:b2:48:14:8e:85:ed:07:8c:c3:22:7d:86:b0:64:4d:
         7d:70:7a:04:9f:dd:54:1f:83:c9:49:27:54:2e:a3:e4:af:b7:
         2a:af:f7:4a:5c:ee:ca:54:c9:b5:8f:b1:e9:63:cb:f3:a9:85:
         88:ca:e0:10:1a:33:ba:1d:cf:07:54:8f:45:1f:50:f7:06:a1:
         fc:b1:a8:60:36:a1:21:b5:55:21:d1:2d:8a:00:00:d2:74:2c:
         75:3e:90:56:99:57:92:4f:a2:64:ea:e8:f4:38:68:41:58:1c:
         8d:fa:00:03:cc:4a:69:86:c7:0f:79:d2:1a:5f:c2:88:6a:45:
         62:fb:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:57:52 2025 by rpki-client