Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f3e1f12-13a0-3197-8659-1978cf81a943.roa
File:                     5f3e1f12-13a0-3197-8659-1978cf81a943.roa (raw, json)
Hash identifier:          8sKCHwNvGJtud1aJOjar9KyHnaXLkSWz/ISBQe2q3NI=
Subject key identifier:   69:B5:D7:7F:3B:C7:4B:70:39:02:1C:26:FA:19:6A:08:2F:38:99:EC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784C84E2AF7A6B8585D5660
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f3e1f12-13a0-3197-8659-1978cf81a943.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        34.161.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c8:4e:2a:f7:a6:b8:58:5d:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=ac05edd3-1efb-4407-a406-fbec14f7f323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:e4:3b:0b:60:03:82:47:e1:3c:a3:fa:61:
                    3c:ca:81:c0:8a:3b:3e:f1:13:79:11:1f:ac:14:5e:
                    1e:da:2a:79:31:a7:f9:9c:80:18:46:6e:8c:d9:ed:
                    13:d2:5e:94:b6:16:6c:81:45:c7:86:7c:1e:3d:26:
                    25:b6:22:4a:07:1e:8a:b3:79:e1:c6:0c:4e:c1:1f:
                    9e:61:04:bb:72:de:a8:7f:68:42:77:ed:d5:23:b9:
                    03:64:ce:6c:52:79:23:04:dc:b4:5d:09:63:95:77:
                    31:a1:32:9c:19:ed:48:b5:5f:c1:7c:f6:4f:7a:e7:
                    e0:85:05:b2:dc:2a:7f:d6:8b:b9:6d:41:bb:f6:1f:
                    15:dd:99:ad:c2:81:32:5c:52:cd:c8:e4:b5:0c:b1:
                    b7:bd:58:db:e1:43:fd:97:75:c7:a3:d5:78:b2:60:
                    32:9c:9a:ea:33:81:4c:79:b9:3c:d7:65:05:e8:84:
                    2b:ec:11:0a:57:6b:e1:38:7d:55:fe:94:ba:1e:d8:
                    e7:ff:75:5c:87:4f:6f:c0:ab:7f:fa:30:88:52:05:
                    12:49:a9:d5:39:e5:72:a4:7c:63:b5:10:f8:3a:06:
                    60:df:b0:61:5a:99:77:ea:00:db:91:a9:8a:0b:e2:
                    43:11:e0:f9:a1:13:92:47:db:10:8a:05:84:58:48:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B5:D7:7F:3B:C7:4B:70:39:02:1C:26:FA:19:6A:08:2F:38:99:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f3e1f12-13a0-3197-8659-1978cf81a943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:10:51:fd:9c:c6:52:bf:d3:d3:db:1f:c0:ce:44:d8:c9:41:
         0f:87:5e:bd:cb:1b:b1:b2:57:db:8b:78:0d:e4:79:b7:4c:1b:
         40:19:f9:55:87:d5:17:11:7e:63:ab:a7:ba:cd:65:ec:ff:d0:
         9f:a3:11:77:0f:2a:31:bc:ce:d6:f5:fa:53:b9:97:f4:a5:ed:
         d9:77:22:37:a7:9b:0a:25:4d:d5:57:20:c9:40:87:2d:bd:ed:
         a6:4f:fb:2b:c2:04:72:fd:f4:4e:96:b2:e3:46:60:f0:1c:ef:
         d7:53:67:ac:24:68:83:d3:9c:4e:7b:15:ff:a0:56:c5:d0:af:
         e2:f0:0e:4b:13:fc:9c:f4:23:04:0d:d6:95:6a:60:89:08:15:
         62:0c:7c:66:43:4c:6d:b6:dc:98:8c:7d:57:8d:4b:44:05:98:
         05:51:eb:9e:73:77:8d:79:39:98:1f:16:3a:da:53:0e:85:98:
         b1:a8:77:a9:e3:cb:c0:93:9e:db:37:71:22:16:43:14:62:45:
         7d:64:6a:b9:e3:25:c4:c2:63:12:6d:f0:d4:bc:92:17:47:8a:
         c0:ef:7c:0d:c1:3d:19:3a:40:7e:b7:6b:14:2d:bf:e6:38:72:
         95:55:e0:c5:7a:51:c2:0c:b8:66:fe:51:e0:9b:e2:39:5a:45:
         16:30:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:59:18 2025 by rpki-client