Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7dc78314-5418-3464-9034-fb56a35094fb.roa
File:                     7dc78314-5418-3464-9034-fb56a35094fb.roa (raw, json)
Hash identifier:          0+Dl+LoC8ywm7LUBGPg+Dycio/6HBLAJGYngvKOyTXY=
Subject key identifier:   8D:58:A4:E6:AE:9D:9C:25:2E:74:C8:7C:8E:CA:BF:99:74:5F:B2:E8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB5CB23442A4262AE26200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7dc78314-5418-3464-9034-fb56a35094fb.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        34.105.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:5c:b2:34:42:a4:26:2a:e2:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=3681c12b-2089-4c53-a97f-0c798e6f408e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:d1:8a:31:2a:e2:fb:02:13:42:98:c6:02:
                    b2:7f:bb:23:e5:d0:42:88:13:c2:04:32:86:4b:20:
                    e1:80:23:0a:ef:e4:7c:be:23:f6:37:13:f7:f6:05:
                    c2:58:a1:40:87:bb:ff:62:02:56:04:3b:8d:a9:d2:
                    5e:f8:ba:26:45:86:55:da:8b:f7:6c:4a:b2:52:74:
                    7c:6c:a6:07:4d:56:79:4e:8f:da:1a:70:3b:18:f1:
                    36:44:35:3d:79:fe:c9:b6:51:f3:7f:f2:21:1c:6d:
                    75:71:87:5f:21:07:1a:4c:db:f1:12:a4:45:6d:17:
                    aa:ce:b6:eb:d0:23:7f:6c:9a:e3:d2:9a:cc:43:d1:
                    f6:da:7d:79:f1:8c:e4:0b:ed:80:ee:eb:c2:b3:a7:
                    f2:00:d2:de:25:f7:1d:35:fb:27:71:66:40:f9:44:
                    9f:8b:7e:c2:e7:ed:84:fc:e5:d1:59:aa:c3:94:dd:
                    cd:49:68:59:e1:93:71:7c:df:98:06:1e:82:09:e6:
                    a7:b1:f4:22:c5:2e:48:ce:83:11:c7:f0:73:0f:60:
                    00:6c:84:10:e1:0b:09:b8:d3:12:29:4e:14:4b:14:
                    e4:b8:18:48:e7:49:a4:dc:1f:d8:4d:12:70:71:44:
                    52:9f:9d:fc:9d:01:f5:45:fd:7c:44:ee:7b:de:28:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:58:A4:E6:AE:9D:9C:25:2E:74:C8:7C:8E:CA:BF:99:74:5F:B2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7dc78314-5418-3464-9034-fb56a35094fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.105.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:26:44:b0:30:d5:e5:89:7c:98:26:93:a3:15:ae:7c:2d:8c:
         f1:b9:cb:f8:17:10:be:5d:65:9d:ad:47:01:d3:46:a9:b3:51:
         22:04:95:40:10:ba:65:c6:3b:1b:f8:0d:12:64:9e:30:9a:d4:
         98:46:e2:24:75:cd:82:38:bf:5c:33:09:5b:5d:62:a4:f6:be:
         9e:ea:c3:e9:f3:48:60:ec:bf:e2:5b:8d:43:09:7c:1b:2d:24:
         8f:0f:30:91:61:73:84:92:3e:d2:74:40:fd:3a:cc:71:79:b4:
         fa:5c:d0:ec:a8:a0:05:0b:b5:5e:3a:0b:b2:d8:c6:d9:2a:c9:
         2c:12:a8:2f:53:71:1f:04:0a:39:f6:90:d1:4b:25:95:f4:ab:
         93:0f:42:c8:ee:3f:dc:9a:fb:48:af:b6:5c:06:93:06:0a:33:
         4c:5c:f6:c5:00:a1:b1:3e:96:99:c9:8c:69:59:83:f3:f7:e8:
         11:95:a9:09:40:58:1d:da:2c:19:e4:bb:b4:b1:bd:73:29:50:
         1c:dc:8b:96:e9:90:68:16:9d:b2:a4:cc:8a:ee:9e:a6:86:c5:
         f3:8a:c7:ce:06:ed:02:a0:af:ae:57:8b:65:e7:4d:c1:d7:20:
         6c:49:94:48:ad:f8:6e:41:9a:13:a6:4f:a6:1e:18:52:10:ba:
         a5:50:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:02:01 2025 by rpki-client