Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ce2b548-a7d4-3a52-89dd-58ed757e00a3.roa
File:                     8ce2b548-a7d4-3a52-89dd-58ed757e00a3.roa (raw, json)
Hash identifier:          WIwXgTWOb0SIgYCmgUgpsfAoPaFZEKXpvvPEHU9kBUE=
Subject key identifier:   AF:19:00:B8:64:BE:49:EA:6D:C9:36:EB:E5:8A:5D:77:91:9D:8B:5A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784D144E04236EC04E9E7A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ce2b548-a7d4-3a52-89dd-58ed757e00a3.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        34.176.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:d1:44:e0:42:36:ec:04:e9:e7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=99293d88-9579-44e3-923c-a75785f25083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:ee:1b:17:05:eb:e6:1a:53:8d:43:a6:e7:
                    07:6f:16:4e:c2:42:41:75:33:47:57:1f:4d:bd:3b:
                    7d:8e:fb:60:f7:99:5d:bd:33:39:70:73:45:ca:d1:
                    a1:21:4c:16:62:ea:d9:f8:05:f2:cb:fd:e5:eb:5c:
                    d5:ff:ab:cd:42:a6:42:12:f9:5a:d4:3f:6a:6a:e0:
                    05:83:5c:4c:40:29:66:58:e1:31:4f:ba:6c:b8:14:
                    31:60:36:8a:88:39:22:99:47:50:ae:3f:bf:7a:d1:
                    78:42:e8:74:5c:88:16:a7:c5:9e:bb:f5:b3:f5:06:
                    63:86:21:b1:1c:3b:bb:ab:20:a2:bc:af:05:4a:f4:
                    3e:55:5c:08:2c:1c:9e:5c:fa:af:3d:6b:b8:99:38:
                    56:51:24:b9:16:e8:c3:ea:53:5c:f0:2d:48:9c:02:
                    7e:ec:f2:3a:8d:30:8a:bb:19:6d:da:61:b9:f0:e8:
                    c7:3d:c1:90:47:a0:ed:06:6d:32:19:81:79:3a:05:
                    e5:c3:c2:67:be:21:8d:cc:e9:67:c3:30:dc:26:ba:
                    0b:c6:94:5e:29:a4:60:9f:6c:be:df:ce:91:89:5b:
                    6b:d7:37:03:3f:7c:06:9d:4a:e4:3c:41:1f:20:dc:
                    33:fd:31:5b:42:c6:ac:6a:fc:f5:72:99:ca:30:b1:
                    e3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:19:00:B8:64:BE:49:EA:6D:C9:36:EB:E5:8A:5D:77:91:9D:8B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ce2b548-a7d4-3a52-89dd-58ed757e00a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:75:ec:bf:b6:b8:37:b8:82:09:84:af:ce:37:ed:4a:28:a4:
         2b:e6:78:5a:0c:76:93:a3:ea:e6:d4:6d:0f:e6:49:b2:73:06:
         84:c7:e7:3c:4f:6e:14:90:e3:b1:14:34:c7:6f:9d:3c:c2:e2:
         1f:c5:ff:a4:99:08:14:86:91:1f:e4:4e:fd:49:45:22:04:00:
         33:3d:e8:1e:2b:68:1a:a0:36:ec:ee:bc:8d:96:19:96:a3:2b:
         97:f7:6f:fa:39:4f:6b:7c:43:3c:f2:22:8a:c2:1a:08:da:8f:
         83:66:bb:b0:46:3d:3a:fe:67:5b:9a:81:a0:78:38:89:29:c6:
         67:93:35:d2:7e:85:bd:6f:91:7d:eb:08:17:3c:1d:a4:a3:e8:
         c6:e7:13:04:b9:92:66:13:30:01:9a:f4:ee:dc:c5:aa:db:bd:
         48:73:bd:c1:6b:b0:c3:7b:24:18:76:86:c3:b9:3d:78:fa:ff:
         d0:33:36:d9:90:19:5e:05:ff:d5:43:eb:db:a6:68:88:8a:56:
         59:43:cf:8b:3c:df:d2:be:0d:d9:cf:db:b4:66:c8:a1:dd:22:
         86:15:5b:96:5e:c0:6f:23:7b:12:a6:d4:43:23:67:e5:60:85:
         90:df:1b:1c:96:f5:26:57:c0:9e:db:29:8d:f7:29:49:0c:8f:
         8a:22:f5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:00 2025 by rpki-client