Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fce05a4-bccb-3fd9-808c-8fd42d9c911f.roa
File:                     7fce05a4-bccb-3fd9-808c-8fd42d9c911f.roa (raw, json)
Hash identifier:          RwAeKxYqe7hfGOsthAoULyM3hZwGoX8WwZZPIJZcULA=
Subject key identifier:   88:3F:CF:C9:98:2C:6C:34:3F:91:EB:0F:61:D8:57:0A:04:D0:FC:8D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7850DE20297799AB4250700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fce05a4-bccb-3fd9-808c-8fd42d9c911f.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.82.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:0d:e2:02:97:79:9a:b4:25:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=6f78fe19-f9d8-4d25-a4d7-5eaf028262b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:fd:80:12:7f:cc:e6:13:ba:b4:89:59:55:
                    b5:74:5d:96:f1:5f:7c:68:96:ac:e3:38:3d:7a:96:
                    02:09:e8:68:47:8f:5d:88:15:1e:2b:f5:25:08:f4:
                    3e:3c:df:5e:d2:74:9a:09:4b:5d:78:63:2c:24:62:
                    f8:27:57:44:0f:ca:ed:04:eb:d8:20:e4:c1:a8:66:
                    72:a7:31:39:12:c7:61:7b:fb:12:b5:dd:4f:f5:b4:
                    fb:af:c7:46:e6:01:34:ca:27:c4:81:4d:f3:e7:be:
                    0f:f7:e8:67:44:f6:1f:24:ab:c7:da:fe:b4:2d:8f:
                    06:59:9f:91:45:55:de:59:79:dc:c3:94:a6:96:6f:
                    b0:f8:a5:86:c9:ac:87:b9:89:3e:06:4e:1a:d0:75:
                    66:44:fb:02:84:0a:9f:2e:74:f7:23:69:25:37:bf:
                    bb:b1:20:cc:3e:89:ef:ad:8e:da:19:53:a0:ab:63:
                    10:0e:33:0c:1c:56:e8:cb:3c:a7:c7:24:4c:a2:65:
                    0a:4a:62:bf:f5:79:13:ae:bf:fe:55:5e:61:7a:5e:
                    9d:6d:9e:74:1b:33:1e:9e:bd:b3:13:1a:5d:3e:ee:
                    88:9b:e2:58:f4:ba:6a:90:77:11:68:d8:a0:d5:7d:
                    59:44:3d:03:49:28:90:38:e7:97:23:6a:86:92:2d:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3F:CF:C9:98:2C:6C:34:3F:91:EB:0F:61:D8:57:0A:04:D0:FC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fce05a4-bccb-3fd9-808c-8fd42d9c911f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.82.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4f:c3:5b:ed:a6:bd:10:30:6e:07:04:1b:a0:59:07:88:a4:
         54:32:a8:b0:0d:6c:e0:98:63:fc:0f:f6:05:ca:35:2b:03:1b:
         cf:3f:d3:94:5c:b3:5f:be:13:a7:fd:04:42:19:52:50:4a:34:
         e8:b6:bc:f3:16:9c:0f:ed:2c:cc:3e:3a:58:37:96:69:d1:ad:
         37:8b:3d:a2:d6:7a:bc:4b:49:bf:13:e1:c6:d0:54:ad:25:be:
         6b:37:1f:be:ac:09:d9:0c:17:45:43:e3:e3:b1:92:55:67:db:
         ec:62:7b:be:0a:93:6a:a0:95:aa:46:98:51:3c:e0:ab:91:ed:
         77:cc:c9:20:0e:e3:64:46:db:12:d1:cf:7e:25:ba:4f:a3:ba:
         1d:02:34:a8:be:38:bd:58:9a:e0:f7:6c:d9:d7:d7:4c:41:05:
         70:5c:85:c6:0e:df:4c:52:fe:24:91:ae:8b:cc:cf:75:7c:78:
         9b:d5:72:4c:77:eb:05:a2:ab:e6:8d:36:77:98:1a:2c:17:78:
         f6:5f:d3:b3:e4:5f:90:91:ae:d2:55:80:7e:54:dc:66:3e:45:
         71:cd:51:3f:41:99:b2:8b:0c:16:a6:f9:cc:01:50:db:3c:5a:
         4b:a0:95:62:9d:7c:db:20:4f:24:96:ff:8f:18:15:01:ef:b0:
         e7:27:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:34:02 2025 by rpki-client