Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5228171c-d5e8-3783-b72a-c823fbca25f1.roa
File:                     5228171c-d5e8-3783-b72a-c823fbca25f1.roa (raw, json)
Hash identifier:          gXxxGIS+AhZP1cH2auDQga+qTPtoNLl2LCuIADawGLM=
Subject key identifier:   D3:DE:5B:9A:32:ED:A5:81:42:5F:09:EC:4C:49:1D:FB:A8:1E:62:0D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584930DE7B19F7639E9ED40FC830
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5228171c-d5e8-3783-b72a-c823fbca25f1.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     15169
IP address blocks:        34.0.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:7b:19:f7:63:9e:9e:d4:0f:c8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=00d52f1b-d598-4358-a3fe-ecde7ee2c050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:90:6a:c7:f0:2f:7b:92:fa:0f:11:71:4a:
                    ad:b2:53:8e:64:2a:9f:9e:38:20:30:49:65:a9:04:
                    be:23:26:27:af:f5:1b:be:fd:c3:04:87:6c:c6:db:
                    45:2b:9c:33:75:5d:1d:f7:bf:13:c1:e3:ed:c3:a0:
                    6f:25:f2:78:cd:34:cb:33:2c:ad:d4:d2:73:26:1d:
                    cf:11:b0:56:56:27:6c:dd:ed:ca:fe:33:95:c5:3e:
                    3e:1e:72:4d:91:70:ff:a1:99:bf:4b:39:82:3c:f4:
                    2e:b3:25:da:13:0f:76:31:6e:11:93:97:98:b8:df:
                    a3:ff:ca:80:a1:c8:87:e5:23:bf:8f:08:5b:c8:c7:
                    52:bb:df:22:90:3d:07:ce:64:49:11:60:b9:b0:a9:
                    4d:99:c5:f9:d5:4d:ba:9a:5e:5d:5a:3e:bd:1a:e2:
                    7f:9a:ff:20:94:91:28:7b:8f:d0:c1:a7:13:e4:be:
                    fc:48:33:f7:6e:53:ee:c6:0e:68:63:a0:c4:b2:27:
                    00:83:44:20:b9:3f:99:80:7d:18:82:df:7e:16:d3:
                    be:20:e9:83:ab:e0:f0:9e:a7:03:ad:0b:1e:e4:ac:
                    d6:cc:cc:45:f2:42:e6:4b:7b:78:c7:5b:ab:24:93:
                    30:9f:27:4a:af:60:c7:1b:d7:94:04:77:e6:cc:c5:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:5B:9A:32:ED:A5:81:42:5F:09:EC:4C:49:1D:FB:A8:1E:62:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5228171c-d5e8-3783-b72a-c823fbca25f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:90:f4:3d:03:a8:7b:ab:5d:3d:20:17:be:03:0b:86:63:ac:
         2c:2c:00:d4:ba:c0:73:05:01:3f:ce:3f:14:ba:7a:98:6c:53:
         2a:35:e2:cb:85:c5:a7:e9:95:62:d8:3d:5a:52:86:6d:9b:b0:
         24:ab:ea:db:4a:ce:48:48:af:da:6e:73:60:5e:cd:31:de:4c:
         07:4f:f8:51:92:2d:25:4d:e0:48:f2:74:41:11:40:e9:58:43:
         58:83:25:97:e1:0e:86:82:39:62:0f:04:cc:75:c3:52:f8:b3:
         1b:c3:1c:be:9c:a8:4d:7e:53:63:9e:7d:7e:d2:72:57:f9:c6:
         25:12:66:4a:40:a5:43:8a:b3:50:e8:71:3c:4f:ae:b4:37:17:
         11:76:47:9d:84:c9:d6:c6:98:77:0e:5b:3c:4c:87:3a:22:51:
         d3:32:b0:c8:91:c7:7a:71:0a:f8:97:41:df:68:86:53:a6:67:
         2f:4b:73:41:09:22:94:37:cb:fe:bf:7b:d1:37:d6:18:a3:97:
         86:d0:2b:4a:f6:1a:cd:21:76:5d:92:4e:c2:08:9c:bf:38:dc:
         01:f4:c6:e8:03:9d:f0:de:3d:9f:42:f3:af:bb:6e:f0:07:b8:
         c1:02:1d:66:c2:1d:16:0b:97:01:aa:a3:33:40:75:02:88:02:
         4f:ac:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:27 2025 by rpki-client