Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32aaaffb-744a-3d06-95ff-25c741045267.roa
File:                     32aaaffb-744a-3d06-95ff-25c741045267.roa (raw, json)
Hash identifier:          0YtK31RjfigXs9wKbZwYdbGHQjMFFffqAGOupHdLA6U=
Subject key identifier:   EB:20:71:C6:0C:5F:EE:6A:10:AD:35:EF:91:8B:92:C1:A6:6F:36:2C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A785186DA4AAED4766FAC320
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32aaaffb-744a-3d06-95ff-25c741045267.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.22.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:18:6d:a4:aa:ed:47:66:fa:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=c219d62b-ade8-4d91-8252-7081d6f6c124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:fd:0b:bd:50:96:93:69:36:a7:2d:00:2f:
                    52:63:68:63:67:2d:4d:cd:28:78:51:a1:d2:77:82:
                    56:98:f3:fc:6a:a9:d7:05:08:01:4a:ed:66:0d:a9:
                    e0:4e:42:6a:3f:d8:f2:40:ec:4d:17:ba:dc:60:ce:
                    0f:bd:63:f9:d2:12:b3:8d:b2:4d:00:a2:31:6b:8f:
                    00:28:fd:58:08:b3:de:89:43:f4:cf:cd:41:be:84:
                    74:c4:b0:25:a3:0c:4f:c4:93:ff:91:d6:85:cb:65:
                    13:5e:88:8f:4e:3b:a5:1b:82:ab:43:50:15:aa:2f:
                    36:c3:f6:cd:4e:3e:70:1c:7b:fd:9f:75:c7:87:a5:
                    ec:75:9d:3c:06:7d:c7:7f:24:74:36:8a:e7:43:d7:
                    41:2e:56:82:f5:45:a1:60:85:59:12:58:28:71:b2:
                    9c:44:c5:c0:46:10:97:aa:cf:e9:43:67:87:fa:f2:
                    3b:b2:9a:07:85:14:d8:64:8a:b6:cf:3e:56:73:47:
                    52:57:de:aa:6d:4f:a0:83:16:6f:08:38:9d:0c:26:
                    e0:fb:d8:30:07:66:1f:05:b6:1b:c7:6e:35:83:e1:
                    80:7b:39:c9:62:de:7b:53:c0:03:11:22:e1:c2:12:
                    2f:ba:40:37:35:de:4a:31:a3:9b:b2:7d:12:c6:e1:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:20:71:C6:0C:5F:EE:6A:10:AD:35:EF:91:8B:92:C1:A6:6F:36:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32aaaffb-744a-3d06-95ff-25c741045267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.22.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1f:3b:a0:ca:97:7a:33:ab:25:39:1e:29:7d:f3:4a:87:60:
         63:45:28:84:15:f1:49:1c:c3:15:52:b0:2a:57:0f:d7:73:88:
         c0:df:d8:61:6e:f7:bb:22:58:90:a8:46:81:db:1e:06:13:92:
         c0:81:db:8e:42:7e:e6:02:fe:e7:86:b9:aa:30:9c:93:f8:96:
         d9:a6:a8:dd:d0:24:09:58:20:4d:3e:e6:45:33:43:1b:a5:9f:
         2d:90:3e:a9:27:43:2b:34:89:fe:47:c9:9e:e5:ae:2d:f8:13:
         38:76:0f:52:2a:a9:eb:d1:ad:21:97:02:a5:32:4e:9c:ff:dc:
         67:78:60:11:b8:2b:c4:86:25:1d:e1:e1:5b:36:b5:21:e1:bb:
         57:51:a3:24:6d:da:01:4e:30:e4:cd:68:43:af:45:5a:ce:63:
         cb:3f:79:5b:ac:b6:e3:dc:96:37:0e:d8:91:4f:09:df:e6:80:
         57:1a:4a:65:8c:ae:d4:ef:31:8c:a3:ca:17:62:60:f6:f5:36:
         20:62:9d:d1:4d:3e:50:c2:92:c5:ee:27:6d:d2:ad:42:87:9a:
         24:cd:f6:37:8a:b7:4a:d6:a2:e7:f2:44:fc:d0:b3:d2:49:17:
         02:b2:94:77:f9:f8:ee:52:83:5e:4b:51:53:73:a1:9b:bb:31:
         bf:26:35:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:42 2025 by rpki-client