Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35a3f1a8-9d5a-35e2-a70d-a264f5cf0332.roa
File:                     35a3f1a8-9d5a-35e2-a70d-a264f5cf0332.roa (raw, json)
Hash identifier:          JSgsydclvYzCr4PcrkdwgXPxwxgDugLv/aKWTQVPAxc=
Subject key identifier:   92:98:73:14:24:BC:76:73:69:08:8D:F7:1D:0D:3F:78:0F:FA:6C:55
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A2D0EF2904030553656CDB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35a3f1a8-9d5a-35e2-a70d-a264f5cf0332.roa
Signing time:             Thu 24 Apr 2025 20:35:45 +0000
ROA not before:           Thu 24 Apr 2025 20:35:45 +0000
ROA not after:            Wed 23 Jul 2025 20:35:45 +0000
asID:                     396982
IP address blocks:        34.157.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:d0:ef:29:04:03:05:53:65:6c:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 24 20:35:45 2025 GMT
            Not After : Jul 23 20:35:45 2025 GMT
        Subject: CN=40166999-9b7e-4362-8793-a660c46c9170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:27:3c:24:2d:72:24:45:86:00:29:97:eb:
                    e5:d2:04:af:90:c2:db:fd:e4:ec:62:18:f3:6b:fd:
                    e0:7b:e7:bc:58:c8:14:11:ef:67:9c:8f:2f:ba:9c:
                    8f:54:5a:c3:bb:fd:37:20:62:51:71:a4:48:f9:6e:
                    7d:58:8f:c5:b9:41:6b:6d:6d:69:fe:0d:e5:45:f6:
                    d2:7c:40:98:99:c9:df:49:e3:0a:90:93:97:e1:80:
                    ba:4c:54:df:bc:11:24:b0:06:ef:92:52:f6:f7:35:
                    58:b1:4f:07:83:66:ba:a3:53:a4:fa:e7:02:25:08:
                    94:a4:cc:2e:ee:30:88:aa:8c:56:34:fd:93:ac:10:
                    6f:92:8d:b3:50:e9:b7:bf:3a:88:c6:42:91:b7:11:
                    b1:6e:09:c7:88:24:34:e2:6e:c5:0d:13:68:85:89:
                    63:3b:ba:3b:c3:d9:3a:83:26:c6:27:0a:5e:b0:46:
                    fb:1b:3e:f2:6e:e3:71:44:9b:f7:3e:15:30:f3:71:
                    98:29:41:06:80:d0:ac:ba:ba:37:f8:cf:0b:7a:95:
                    56:4c:9f:10:45:6c:89:4d:3a:a4:2b:85:27:1d:5d:
                    eb:7d:d9:89:29:2a:1b:66:46:24:f7:f7:00:72:fe:
                    25:66:c1:af:8e:18:11:79:66:ab:70:2f:09:af:4d:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:98:73:14:24:BC:76:73:69:08:8D:F7:1D:0D:3F:78:0F:FA:6C:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35a3f1a8-9d5a-35e2-a70d-a264f5cf0332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.157.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:68:19:2c:d4:fc:85:e9:ea:26:8e:fd:dc:36:95:83:ab:cf:
         d7:5f:7f:6f:c8:f4:9f:51:6c:2f:47:3f:2d:f0:fb:c5:c6:e3:
         30:59:51:9c:67:07:9a:9d:ee:51:63:47:6d:fc:e7:b1:af:20:
         ce:4b:f5:fa:95:82:c5:66:8c:fc:ae:b3:1e:aa:d5:83:dc:b5:
         0f:a1:e0:d1:e7:74:aa:ff:6d:d1:f0:b9:d3:a7:eb:0c:f2:ed:
         8c:78:47:51:9f:64:1f:54:08:2f:2e:a9:84:fe:63:c5:9c:a4:
         d8:ec:22:1a:b5:2b:6b:e5:b0:a3:8a:28:71:37:bc:cb:d2:d4:
         44:47:57:59:27:e4:62:90:13:80:20:2b:42:59:ff:fe:c7:fb:
         86:3d:39:c6:fa:6a:e8:0a:10:c4:f0:2c:c0:05:8d:a1:dd:48:
         63:07:c0:e3:4f:0e:40:e5:18:02:17:cb:47:ac:9c:88:1d:8b:
         d9:55:cb:0e:7d:a6:08:32:55:a3:7f:ab:e0:69:ac:2a:9b:2d:
         ea:6d:46:c2:64:2b:55:4a:48:ca:00:75:16:57:17:f9:9e:41:
         4e:31:ee:d8:70:62:2f:a1:b8:cd:4b:3e:86:3f:49:1b:bb:32:
         0b:72:de:40:b3:0d:81:9a:5b:75:86:58:99:19:85:a7:86:d7:
         28:9d:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:49:20 2025 by rpki-client