Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5eb91346-843e-34d3-b271-640b9d1a2b41.roa
File:                     5eb91346-843e-34d3-b271-640b9d1a2b41.roa (raw, json)
Hash identifier:          3B34tNqy2qa+Nzkrxt7JpIsN7x9X7NCIV2zMQSlzm5o=
Subject key identifier:   D7:6C:29:5D:83:20:3A:34:C1:E0:C8:54:B1:E6:1E:39:9F:02:05:3A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7852C533F38FE2BD8987E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5eb91346-843e-34d3-b271-640b9d1a2b41.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.165.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:2c:53:3f:38:fe:2b:d8:98:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=381197f9-a8f4-4106-b5e7-34cfeb05ec20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b0:b8:ec:69:14:53:04:cf:04:3f:bf:91:62:
                    49:43:74:12:04:a5:76:7f:3c:b0:20:d1:e0:be:f6:
                    3a:95:70:d3:6d:89:a3:4c:48:24:c1:22:bd:29:c5:
                    fc:c3:80:1d:86:5f:a5:85:68:4e:ce:e3:e4:c0:50:
                    95:ab:5a:bc:56:2a:2b:d7:d0:d1:2d:f2:6f:90:74:
                    3a:11:a4:79:b6:ba:ba:39:12:23:35:d3:e8:06:50:
                    fc:f4:b2:be:5a:2d:92:8b:fd:b1:0a:42:b6:d9:a8:
                    aa:89:61:38:21:b0:56:8f:3c:f2:b8:c2:59:51:79:
                    1b:13:d4:84:51:1b:e2:e1:b9:6e:f7:4f:2d:62:85:
                    df:84:ff:96:f3:8f:06:83:70:70:e2:04:d6:bc:84:
                    37:fe:bf:b4:9b:2e:41:35:22:fd:86:59:fe:37:58:
                    cf:7f:89:bc:70:d4:52:6e:ae:35:e5:34:27:54:47:
                    a1:f5:56:15:28:b2:a8:e0:e7:91:f2:4e:9f:af:cc:
                    1e:a1:a7:6c:75:1b:eb:dc:79:43:33:9e:b8:c4:51:
                    5f:06:c6:7e:f6:39:a8:f6:ae:ff:45:2a:dc:94:ef:
                    17:3b:53:c0:9d:ec:40:58:78:1a:7c:30:ba:d8:75:
                    b5:dd:bd:31:4a:e6:08:6b:96:ae:ce:0e:fd:90:76:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6C:29:5D:83:20:3A:34:C1:E0:C8:54:B1:E6:1E:39:9F:02:05:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5eb91346-843e-34d3-b271-640b9d1a2b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.165.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e5:56:7a:00:53:60:66:5c:7f:77:72:61:9b:98:74:1c:55:
         f8:55:25:e4:af:13:48:f0:a8:0c:a3:da:03:d9:1e:80:64:4a:
         07:c9:93:1c:8c:82:67:69:2f:7b:64:e9:f6:ae:88:7b:2f:23:
         3f:7e:6d:f2:7c:3e:27:32:60:80:07:d1:df:0a:44:57:76:4e:
         f5:e5:1f:7c:3d:1f:96:55:da:7e:21:05:b7:03:8a:29:f7:7c:
         7c:78:02:a3:8b:55:b2:8a:aa:37:93:ae:c0:fd:89:f1:c8:d7:
         23:d0:c4:a1:90:5d:32:59:1c:3a:90:34:84:8b:cd:95:da:37:
         50:4b:e5:da:8c:d8:a3:af:aa:78:3a:c7:8c:00:26:34:46:2f:
         02:fe:79:73:26:bc:46:a0:84:16:90:5e:dc:01:bf:29:54:d7:
         b7:3a:9a:03:ea:3d:32:a1:30:aa:ca:9f:a3:76:0f:0d:6f:de:
         7e:fb:f5:32:8c:62:53:a3:a3:6b:60:06:f7:5b:39:36:a4:36:
         b1:14:dc:29:94:e3:cd:be:fc:68:8e:5a:3f:db:fe:34:4c:a7:
         08:0b:5c:78:6c:0c:c6:a0:5e:67:46:0f:73:7b:50:d3:da:13:
         a4:fd:72:c6:bf:2b:7f:ad:c4:56:35:8d:ac:7c:b1:e1:a3:c5:
         45:e4:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:07 2025 by rpki-client