Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59941c14-7b02-3c7f-ac0d-2294b7ae119f.roa
File:                     59941c14-7b02-3c7f-ac0d-2294b7ae119f.roa (raw, json)
Hash identifier:          +dWIJH3o9HEz/2fcM96k6frPxU7p+Dzxc291zmwIcxc=
Subject key identifier:   95:C3:7D:1D:C5:76:0F:82:1C:48:38:BC:62:4C:1A:11:E2:E6:F3:42
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A785414E65BD767A7A75F300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59941c14-7b02-3c7f-ac0d-2294b7ae119f.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.161.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:41:4e:65:bd:76:7a:7a:75:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=20939fc2-a1c4-4ad8-87e5-4b4b5b715984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e4:77:05:3f:d1:22:20:55:66:ed:53:3f:87:
                    85:74:a8:b1:da:a8:d7:86:eb:3e:03:bd:87:58:0a:
                    96:f0:ac:c0:a4:d0:1d:bd:e1:e9:30:37:86:88:ef:
                    7c:e0:69:81:44:2c:05:3e:d0:69:d2:de:bc:6f:43:
                    f3:02:f7:28:49:d4:97:56:40:c5:48:39:c8:9a:6e:
                    a8:be:7e:82:fc:98:ff:14:7b:bd:5f:bb:e2:6a:ae:
                    80:71:62:53:15:c0:7b:1a:ee:5b:7c:59:36:c2:47:
                    b9:f2:27:88:9b:29:46:8e:58:0a:4a:66:f6:01:72:
                    bc:63:68:57:f7:15:d2:8f:0d:37:c6:16:bc:55:5f:
                    26:ff:f3:33:96:65:a5:8e:51:39:03:05:af:c1:3e:
                    0f:fa:de:8d:37:37:64:c2:a4:71:cb:31:c1:60:ad:
                    73:b9:7c:90:bf:2f:f0:25:10:bb:cf:bf:87:19:16:
                    2a:ee:ab:ae:57:a0:5b:e5:40:46:99:28:39:ee:5e:
                    59:80:10:3f:23:60:25:91:4c:d6:2c:8c:a7:f3:e1:
                    7d:6d:c2:92:9b:a4:b7:17:5e:42:0d:11:9d:69:fa:
                    5f:48:47:f8:4c:12:04:1d:a8:86:ce:02:16:ba:9c:
                    d1:9a:f7:9f:24:ca:02:7d:e3:44:65:79:71:10:d6:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C3:7D:1D:C5:76:0F:82:1C:48:38:BC:62:4C:1A:11:E2:E6:F3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59941c14-7b02-3c7f-ac0d-2294b7ae119f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.161.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1a:5e:4e:f1:7e:8f:9c:0b:d4:20:56:3a:e0:8a:60:fa:04:
         20:50:63:32:f2:1e:35:f6:31:e3:e3:e4:df:45:ac:ff:de:1a:
         3e:5a:c7:dc:96:88:d1:c1:be:64:7a:47:73:ed:82:5c:0a:e2:
         09:a9:2b:85:dc:da:a7:5b:37:ea:d8:e0:fb:77:ac:a4:0f:83:
         78:33:7b:e1:86:38:ef:54:a9:33:09:ce:0a:58:e1:f0:cc:c8:
         2a:e5:1f:0f:08:c1:9e:83:fc:91:ca:44:50:75:81:04:0c:af:
         d7:9a:c1:a3:ed:f7:7d:40:a8:d1:5b:91:9f:56:62:96:9c:dc:
         0d:60:95:7e:38:3a:32:57:de:5c:b3:4f:1c:83:8c:6b:01:10:
         89:ea:03:82:12:a0:58:e1:6a:a7:a0:46:b0:3c:f7:23:67:c8:
         31:01:32:5a:01:fd:6f:84:7b:70:b5:97:60:63:df:3b:ce:a0:
         5f:54:e6:14:b4:95:a5:8f:58:48:47:7b:00:74:86:18:80:d9:
         d2:5d:b4:46:61:c4:fd:e7:78:7a:da:cf:bd:84:fe:a8:32:ec:
         f1:31:3a:d6:de:78:8b:d7:66:d3:48:af:ba:10:80:be:af:92:
         66:4e:b0:92:f6:67:5e:f9:f4:2e:77:25:7b:b2:d0:01:19:d6:
         6a:1e:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:58:27 2025 by rpki-client