Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/398fb419-e600-3f6a-a695-bd52e5c106cb.roa
File:                     398fb419-e600-3f6a-a695-bd52e5c106cb.roa (raw, json)
Hash identifier:          CiNYWl7yrifK6+8f3N3JMGalRu076TCNhB8HLHek76I=
Subject key identifier:   40:68:E2:24:34:0D:57:E7:AF:1B:2F:72:98:47:82:16:20:E3:D4:EE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB66C7A917CBFA0D0B7BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/398fb419-e600-3f6a-a695-bd52e5c106cb.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        34.122.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:66:c7:a9:17:cb:fa:0d:0b:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=1afb6dd5-27d5-4bea-bc4f-b8e0520104b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:cd:7f:ba:90:f4:b1:0c:5e:f4:d9:ae:d9:
                    f9:7c:71:d9:53:87:c1:27:81:aa:e8:f8:62:6b:a5:
                    0e:1c:21:17:e7:66:71:88:23:b5:b4:4d:20:cb:bf:
                    93:44:75:0a:f2:ef:6f:87:2c:f0:94:0e:a6:cc:fa:
                    1b:bb:6b:df:76:61:94:2d:2b:7f:e9:92:02:83:9e:
                    4b:56:94:e6:5a:1a:86:d6:ee:32:9d:4c:45:48:8f:
                    65:32:d0:bd:c9:3a:5f:c6:2f:d5:c6:56:1f:06:7a:
                    a2:8c:5f:9d:8d:0d:89:da:4d:17:5e:ab:08:3b:31:
                    d7:d7:95:9e:cb:54:07:1f:22:61:a8:f6:68:02:24:
                    e9:e2:31:85:7f:23:16:8f:8c:a4:2d:9a:a0:a7:8c:
                    a0:cc:f6:d8:29:44:e7:a6:70:90:7b:c8:98:85:e4:
                    9d:9f:85:d0:66:f7:4f:09:77:42:5b:7f:9a:26:a2:
                    9b:22:53:1b:b0:e9:e9:0f:94:2b:f2:42:05:b2:c9:
                    a5:e7:10:80:08:1a:9c:36:09:d7:de:8d:ce:2d:60:
                    39:31:dc:20:0c:31:bb:3e:83:d4:c8:82:49:1b:2b:
                    0c:c7:e1:94:39:a2:9e:63:51:bb:5d:34:55:d8:5b:
                    38:6a:c2:be:eb:76:4a:97:46:78:df:5d:83:f3:38:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:68:E2:24:34:0D:57:E7:AF:1B:2F:72:98:47:82:16:20:E3:D4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/398fb419-e600-3f6a-a695-bd52e5c106cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.122.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:b3:cd:b9:63:50:29:1b:b4:03:e0:14:73:0b:fb:e2:51:
         de:fd:05:b2:73:51:e7:2b:eb:e4:86:72:14:2f:b8:b7:d1:3f:
         82:ba:49:5e:dd:2f:2a:76:1d:c7:1a:56:1e:98:7c:04:4f:c8:
         3c:42:a3:b6:28:09:c6:b8:48:1c:44:3e:f9:7f:ba:1f:f3:54:
         87:73:60:37:f6:8a:22:61:09:08:a5:e4:64:3b:51:59:67:bc:
         41:da:81:51:d0:73:f5:01:2e:80:69:94:4b:6a:a5:22:ce:b8:
         a3:89:67:4d:db:c9:19:ec:c8:d2:4b:44:9a:17:ae:80:69:15:
         0d:03:cb:c3:09:7f:4b:ec:d5:49:35:6c:04:e3:b5:f1:69:d5:
         b5:45:3b:df:3d:c1:64:a6:2b:fb:c4:86:ad:e5:58:c7:a5:1f:
         69:be:49:14:b9:91:74:69:b7:13:e8:b4:6e:f5:a2:66:76:5f:
         7b:f5:13:aa:bb:76:be:28:eb:18:c9:69:b5:96:b1:bf:57:2b:
         9f:1c:6f:99:63:a5:12:a3:3f:70:a4:b5:c9:d5:32:7b:85:7f:
         d3:da:ee:3c:50:99:1f:f1:67:8e:df:7a:84:74:a6:70:e7:e1:
         45:cf:4b:22:04:62:74:45:a6:10:dd:22:58:18:a2:75:1c:af:
         28:ab:25:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:53 2025 by rpki-client