Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36f8eb71-ed4b-39de-a500-a1db423f28f8.roa
File:                     36f8eb71-ed4b-39de-a500-a1db423f28f8.roa (raw, json)
Hash identifier:          pyXiy2qBuc7qbAYcQbzj8dDdxJefd/wTKrlna1fVafc=
Subject key identifier:   CC:98:18:33:CD:7A:19:FA:71:15:E1:36:B2:EE:F8:96:32:2F:98:69
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584973DEE02AEEED7209A911D4E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36f8eb71-ed4b-39de-a500-a1db423f28f8.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     15169
IP address blocks:        34.2.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e0:2a:ee:ed:72:09:a9:11:d4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=decf6890-d19b-4209-b7d9-96b4f3ab4179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:8f:d2:40:83:18:2e:ec:16:8d:3e:39:d0:
                    1a:d5:6c:e2:df:03:e3:dd:20:87:ef:87:63:2e:53:
                    e6:41:5c:b4:1d:db:67:ca:2c:65:bd:b7:db:c1:7b:
                    49:37:b2:c3:29:cb:69:04:6d:79:57:df:e4:f3:8c:
                    4f:0d:a2:eb:73:7b:8e:b3:b1:b5:92:bc:cf:61:c5:
                    d9:86:08:a8:3a:2b:23:4a:ef:4d:7c:42:76:27:90:
                    f0:25:9b:4f:f3:94:6f:82:d2:e6:5a:87:d8:c1:49:
                    1c:e2:66:f3:f9:2b:00:39:65:61:6a:12:77:6e:ab:
                    56:7a:9f:da:70:39:94:c0:cd:34:54:da:3b:ac:83:
                    76:ab:9e:1f:41:1f:eb:10:2a:21:22:f4:80:94:de:
                    4f:28:d7:07:35:11:9d:4b:35:0c:e6:5d:4d:6b:64:
                    05:53:03:78:49:d1:48:5c:20:d6:10:26:92:53:ec:
                    b0:7f:3c:dd:46:32:bc:0d:8e:b6:56:d4:f2:83:e8:
                    13:ef:42:14:8e:4f:9f:b6:a9:f1:a2:ca:78:83:62:
                    d3:19:12:fe:76:4f:8b:b3:7a:9e:78:06:5e:61:ca:
                    b8:37:3b:3b:21:7c:f2:de:0f:d6:9b:5e:e6:f5:2a:
                    40:fd:e6:26:ac:9e:c0:5b:76:85:c6:71:30:47:6c:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:98:18:33:CD:7A:19:FA:71:15:E1:36:B2:EE:F8:96:32:2F:98:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36f8eb71-ed4b-39de-a500-a1db423f28f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c9:2e:34:81:52:77:28:39:d8:6f:91:bd:67:3e:10:69:1e:
         20:4e:a6:7d:ed:54:f4:9f:2e:69:1a:2e:40:23:fd:67:5d:71:
         26:58:9b:7e:44:af:16:db:9a:f5:70:d1:bf:5e:71:77:d6:c9:
         96:1c:c0:8c:12:28:99:3e:d1:31:32:1f:e4:f9:ee:0c:ae:6f:
         51:d1:19:8b:4f:31:49:e0:41:54:1a:d6:43:e5:5d:13:4d:67:
         1c:b8:a9:cd:0a:4d:f9:3e:46:ef:93:97:0e:ec:34:e2:bc:f1:
         d9:a6:28:89:98:76:7e:5d:98:fb:2a:35:89:15:b5:5e:a0:4d:
         f6:df:ae:c3:58:45:b3:5b:e1:0d:cc:12:20:09:81:0e:6f:05:
         fd:ee:56:d8:34:4e:68:11:6d:62:2c:46:33:1e:7e:8f:a6:1b:
         5c:ad:60:80:80:b6:74:ce:52:c6:11:df:3e:73:69:c8:63:3d:
         cc:0a:6d:f8:4f:88:d5:d4:d1:fe:51:5a:2c:d9:9e:c4:51:a9:
         6a:95:e8:49:d2:fc:98:f6:4f:49:1c:23:3b:97:57:5c:e8:6b:
         e2:57:39:55:76:a2:df:ba:21:93:1a:a2:12:ec:9e:78:02:19:
         00:9f:9a:8d:1a:d3:dc:90:68:dd:c4:74:74:1a:13:cb:93:be:
         5d:ca:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:26 2025 by rpki-client