Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d8998e3-ac11-3f32-b82a-54ac26370783.roa
File:                     6d8998e3-ac11-3f32-b82a-54ac26370783.roa (raw, json)
Hash identifier:          kWl7hVOb3N00dyI4gDQVqt8VU0pcgNJ94Z6EcFwEwdg=
Subject key identifier:   6F:06:B5:08:3A:F1:07:5D:86:96:33:01:70:12:9C:20:BA:2B:76:9C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7851AA64CC61BBCCA36F790
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d8998e3-ac11-3f32-b82a-54ac26370783.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        34.144.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:1a:a6:4c:c6:1b:bc:ca:36:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=dd1e199b-38b5-4a48-8ca0-bd3d8cfa1a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:12:dd:73:23:74:59:62:38:82:a1:54:75:
                    be:fd:3e:e7:61:2e:f7:35:ab:f1:10:72:21:9a:fd:
                    19:a6:1b:00:e2:65:be:c6:54:2a:73:6d:c9:48:1b:
                    17:0a:fa:04:80:14:1a:17:09:78:e9:7b:13:73:a1:
                    8c:14:7b:49:00:e4:79:98:ab:b7:d5:53:1e:c7:c3:
                    fd:46:65:5a:89:06:c9:49:91:4e:2c:5e:4a:8f:84:
                    22:fb:79:5a:bf:b0:27:84:f3:33:9f:af:21:aa:62:
                    d6:cc:fb:0f:f4:d8:a0:85:cd:f2:a8:6b:e2:5e:45:
                    3e:ef:96:04:cc:e3:b6:fa:c4:c9:73:e1:4c:ab:75:
                    4f:27:f6:6c:fb:25:04:71:07:02:fb:ef:57:ec:01:
                    ab:a8:8e:52:09:55:f8:5a:84:66:b8:68:16:49:ad:
                    9a:33:24:b2:97:b1:59:84:b9:a2:c6:66:13:d3:37:
                    ef:f8:88:2f:37:9e:00:bd:8f:03:71:19:24:19:b0:
                    1c:45:13:73:98:2c:7a:af:98:8c:af:80:a5:2f:55:
                    d8:60:0c:94:f9:b9:0c:20:0b:a5:f1:11:e7:9f:3e:
                    18:1b:f3:9b:39:09:64:4a:e2:f3:ed:d2:11:be:4e:
                    92:b0:16:f6:81:6b:b4:ce:44:52:9e:93:0c:d2:38:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:06:B5:08:3A:F1:07:5D:86:96:33:01:70:12:9C:20:BA:2B:76:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d8998e3-ac11-3f32-b82a-54ac26370783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c3:61:00:c3:31:07:2b:6b:ed:d1:b6:79:c6:c8:e8:d6:5d:
         23:a0:2e:11:a6:64:e7:eb:65:e0:6f:9a:79:f9:5f:2c:dd:73:
         21:5f:7c:9f:cd:bb:6d:7b:68:cd:82:af:46:fa:17:b5:a8:e4:
         77:97:61:8b:89:5b:b5:d9:27:f1:dc:7c:96:14:66:61:8c:55:
         f2:a7:23:57:b2:83:f9:0d:b7:83:52:2e:f3:58:54:ee:9a:20:
         0a:97:fb:0a:71:71:84:de:8b:3f:5b:8c:c8:39:c8:26:90:38:
         b7:e1:21:3b:01:ff:d2:35:a9:c7:79:9f:53:e8:9c:16:4d:0a:
         a7:64:cd:db:08:a1:3a:4c:1a:a6:34:36:85:85:3f:b9:88:4c:
         6f:52:3c:c1:13:5c:22:fa:35:69:be:41:ff:79:d3:fe:06:13:
         79:23:5e:ea:e9:1b:f1:3b:30:6d:9e:62:ed:2d:72:5b:73:0d:
         ef:99:99:6f:df:31:f4:7c:12:68:6c:15:2d:d3:6d:14:66:b3:
         29:ba:c7:45:06:5f:67:b5:e5:90:47:91:45:61:c8:9d:2d:13:
         25:b0:74:5f:e1:eb:9b:14:11:a0:ab:7a:3d:27:be:fb:59:90:
         8c:34:55:d9:31:4c:35:cb:ca:3b:68:24:24:09:9d:f4:75:ab:
         90:78:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:54:14 2025 by rpki-client