Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a02121f-3fd1-3ab3-8d47-cc90668174ef.roa
File:                     7a02121f-3fd1-3ab3-8d47-cc90668174ef.roa (raw, json)
Hash identifier:          bPFmSB37f16rkPThu6BRysQeEsjo05/za0i8iqT8kQ0=
Subject key identifier:   22:3F:81:CF:E7:AD:C7:41:C6:3D:34:B5:E3:C6:59:AD:F9:AE:FB:AE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BAB981BBB0AB7FB4D3CE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a02121f-3fd1-3ab3-8d47-cc90668174ef.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        34.105.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b9:81:bb:b0:ab:7f:b4:d3:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9ff63196-9322-46d9-a60a-ae04d1bdcfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:22:ef:e5:16:fb:6f:83:f5:7b:1c:e0:21:
                    41:bc:10:93:75:56:68:bb:92:11:8c:fd:63:fd:95:
                    e0:52:b5:f9:0c:01:5b:8d:58:ae:ad:8c:3e:a1:66:
                    db:61:c5:26:a6:5c:c9:b8:f4:02:15:57:c4:45:91:
                    09:4d:a7:2b:c0:a2:e3:74:2b:03:b6:af:2d:25:c2:
                    29:ad:9b:07:dd:20:7b:49:ff:fc:03:8a:b9:08:93:
                    76:58:22:be:a7:6e:98:c1:77:ec:38:30:50:52:ca:
                    76:d3:28:ee:0c:91:fc:f6:a5:d5:1f:b6:46:32:85:
                    b3:5e:9e:c3:b4:d3:e7:0b:d1:7c:29:6c:b4:87:73:
                    60:3a:eb:9f:2b:12:21:e0:05:74:b1:0a:f7:d7:a7:
                    5a:96:de:11:02:3f:61:f9:c0:68:07:10:8b:77:c6:
                    ba:b2:da:2e:44:b0:92:eb:7d:43:8c:04:b5:dc:20:
                    3e:d4:c2:f4:89:e2:4d:80:7d:e8:57:4f:ca:bf:17:
                    48:a8:e5:38:14:06:cd:ee:5a:cf:7a:09:c1:40:11:
                    87:07:e0:bc:e9:95:89:24:aa:ff:3a:ca:2c:81:1d:
                    2c:93:06:9e:db:8f:19:7c:2b:32:4c:7e:b2:b4:cd:
                    c6:98:c6:26:f0:97:23:e1:02:6b:49:0d:92:0b:26:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3F:81:CF:E7:AD:C7:41:C6:3D:34:B5:E3:C6:59:AD:F9:AE:FB:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a02121f-3fd1-3ab3-8d47-cc90668174ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.105.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:6f:d2:f1:53:dc:df:31:3a:06:12:7d:7f:2b:4c:d8:45:5d:
         c2:ec:24:37:37:b8:76:9e:1c:76:c9:c7:bf:a0:c7:78:93:62:
         d2:ca:ea:d1:db:c7:ad:80:c4:88:ce:76:fe:6d:f5:71:67:12:
         8c:66:00:46:db:af:15:61:50:ab:5e:3a:39:ed:9f:8b:44:99:
         f1:0d:14:62:de:b5:2a:69:05:31:a4:db:10:ab:d0:9d:4d:7f:
         7b:f6:38:0b:68:44:7a:33:1b:f7:2e:38:14:02:76:b3:2e:02:
         e2:f1:16:72:35:0b:d1:51:0c:eb:76:4b:25:7a:3f:c2:9b:78:
         f2:25:15:8a:b2:ff:09:3f:fb:9c:7b:a3:8c:7f:be:f8:b2:1f:
         20:00:f7:59:26:0a:c0:99:fd:6d:86:2a:df:c3:65:ff:93:6d:
         ab:19:ce:ff:ee:f0:46:0d:ce:34:41:f5:82:c9:4d:1c:52:3a:
         ac:8b:8a:66:8f:ed:8f:f0:2a:ea:85:1e:ae:9e:45:d6:2f:a9:
         ad:0b:c7:96:9a:cc:f4:ed:1b:0e:c6:1c:d7:a2:15:27:13:ce:
         de:0b:e2:52:cf:51:96:20:0a:ec:be:db:a8:d6:b4:49:9e:c6:
         7b:6f:08:f9:95:61:41:30:e3:d0:e8:6d:98:19:2c:33:05:ed:
         8b:b8:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:11:02 2025 by rpki-client