Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4122e695-a997-3680-87b5-1212f27a1ce2.roa
File:                     4122e695-a997-3680-87b5-1212f27a1ce2.roa (raw, json)
Hash identifier:          nGFziGm8nUVookLMNJo6YCcW/aZOqZppppld1HFHDXU=
Subject key identifier:   79:43:A6:1B:4A:85:05:E1:5C:CB:33:11:F0:03:D8:B6:36:0F:F0:34
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB6582F5D15504B97582C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4122e695-a997-3680-87b5-1212f27a1ce2.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        34.0.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:65:82:f5:d1:55:04:b9:75:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=70b23bb6-12a4-40ce-ba6f-113cef3b4298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:a3:3d:89:26:ae:11:8b:b6:cb:2c:53:2d:
                    0b:ed:d1:4e:31:4d:1a:8c:58:d6:d5:97:dd:29:60:
                    4d:95:2f:98:97:dd:5a:c4:45:e4:d2:0e:65:de:14:
                    80:de:f7:43:ee:12:b2:c9:94:d1:e6:91:fe:b5:57:
                    ee:ee:04:4a:7a:2a:7a:12:a0:25:60:e9:08:58:6f:
                    ba:75:e4:50:72:b3:33:8c:ea:27:78:ba:62:7a:16:
                    ab:36:9d:c2:e6:7f:b2:59:c6:a4:69:38:70:59:1a:
                    2a:d2:ba:7a:25:58:9f:3e:46:d9:2d:03:8a:40:e6:
                    f9:a3:e4:a3:b4:62:69:77:df:99:69:02:13:86:d6:
                    cb:63:35:d4:34:e3:a0:5a:16:7e:a7:65:78:9c:8c:
                    41:cf:a4:22:55:cb:ef:f6:8f:71:41:f0:5a:af:1c:
                    e9:5a:88:27:f2:94:ba:f5:30:6f:23:4a:00:37:e5:
                    31:55:6d:28:19:6f:b9:44:95:7b:e4:6d:d1:f4:26:
                    0d:24:60:43:44:e2:33:81:1c:c1:60:c7:02:c2:84:
                    26:5b:a7:fb:14:30:f7:0f:cf:9b:aa:6d:2f:8d:3c:
                    59:22:6d:1a:fb:33:e8:fd:76:ae:3b:35:45:94:30:
                    36:b1:b9:aa:91:0d:0e:7a:6e:15:e0:c5:56:1d:c9:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:43:A6:1B:4A:85:05:E1:5C:CB:33:11:F0:03:D8:B6:36:0F:F0:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4122e695-a997-3680-87b5-1212f27a1ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:52:2a:1e:3b:53:d8:55:0f:98:fb:59:ec:a7:ac:47:2f:dd:
         97:2e:21:d9:f2:1a:dd:58:10:05:ec:f4:27:9a:19:7d:0b:99:
         83:1b:08:be:eb:4c:ba:d1:6e:38:66:bb:29:da:c4:ac:dc:98:
         46:cc:ea:90:ca:69:84:a1:23:99:41:b6:73:ff:af:c4:02:24:
         09:5e:da:17:63:27:cf:34:5b:05:21:51:2d:53:a6:4a:83:d8:
         70:b1:04:95:08:68:c9:40:9e:6f:ff:cf:3c:60:52:cf:37:54:
         cf:52:8a:93:f2:af:7b:b4:3b:8f:8a:51:a3:69:ba:00:ed:6c:
         11:97:af:f1:00:2a:17:50:55:17:ac:f4:5f:ac:23:86:6c:59:
         f2:75:11:f9:26:e0:97:4a:7c:a5:23:2a:3a:9d:73:aa:21:8c:
         a1:01:b5:e9:c6:18:62:14:39:6c:fa:cd:41:fe:47:cb:26:23:
         19:f4:b1:cc:a1:83:ec:2e:3c:b6:9e:78:bc:fb:66:cf:c1:18:
         dc:43:a8:2f:1a:27:73:00:63:aa:68:81:22:af:a7:c0:a6:68:
         a0:39:74:9b:89:8f:ca:b9:16:11:87:95:c8:ba:f1:28:df:fd:
         3c:29:68:d3:72:ce:b8:00:bf:5a:c7:7a:75:09:1c:49:87:5b:
         4a:50:0f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:59:31 2025 by rpki-client