Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9920f80f-2118-3005-9e83-91f8ec9c82ba.roa
File:                     9920f80f-2118-3005-9e83-91f8ec9c82ba.roa (raw, json)
Hash identifier:          lgVNUK/jwodiRTFBZi30vhLA/fThWbyh4qgcYCBCeio=
Subject key identifier:   1E:EB:CC:6C:F2:BC:D0:59:71:A3:DC:1C:D6:D0:6F:8C:E8:42:0E:3C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A785134DC226F430FCBB7BA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9920f80f-2118-3005-9e83-91f8ec9c82ba.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.146.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:13:4d:c2:26:f4:30:fc:bb:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=9274dead-e5ba-43be-9bf6-94f1d56f74ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9c:39:a7:68:1b:e7:3d:e8:5a:0e:39:72:a1:
                    61:b4:25:d6:ce:e1:3f:16:ca:13:64:e6:44:37:ba:
                    bb:d6:cc:09:76:ad:c0:1f:9a:95:c1:5d:6b:a0:b8:
                    74:ed:f5:3b:9e:35:f3:96:7d:17:0e:9b:ba:b0:7d:
                    23:c8:cf:b6:43:d6:eb:0c:f1:98:09:e0:6b:65:2c:
                    4f:36:6d:c9:f7:de:86:3d:67:65:69:33:54:f0:5c:
                    6f:64:91:f2:20:54:3e:b0:2e:c4:c3:02:63:c5:d6:
                    ca:bb:ca:4f:1f:7d:cf:f0:0a:96:89:aa:a3:00:e5:
                    3f:42:a0:6d:7f:37:b8:1e:4a:c5:2c:0e:5a:67:39:
                    8c:f6:72:0e:63:e8:fa:e1:fd:e5:19:a1:a8:b2:a5:
                    73:6d:30:0c:fa:a9:23:f6:a1:66:59:77:78:b5:dc:
                    0b:fc:a7:6e:a3:68:53:81:23:fe:49:74:95:72:4d:
                    27:2b:e1:a0:ed:c6:94:f6:fb:60:29:0b:80:af:2e:
                    9d:8f:f7:d0:fa:3d:2c:d5:cf:0d:f2:4c:c2:04:89:
                    76:e4:b5:84:fb:95:4c:6a:6e:03:bb:fe:6d:2e:cb:
                    cb:58:69:44:a9:b0:8d:d4:95:39:e2:f4:a5:da:eb:
                    3a:37:28:50:df:50:fd:09:dd:bc:f7:c1:28:50:d7:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EB:CC:6C:F2:BC:D0:59:71:A3:DC:1C:D6:D0:6F:8C:E8:42:0E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9920f80f-2118-3005-9e83-91f8ec9c82ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.146.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:75:12:32:02:09:b0:95:81:93:12:36:95:1d:2e:3b:c6:
         b0:5a:99:d2:a4:8d:41:18:ac:9d:52:b9:2a:7e:78:fd:95:ad:
         af:66:fb:6c:f4:58:83:f5:ff:d4:e4:ee:f8:04:cf:51:66:c7:
         15:c8:43:4d:71:4e:e3:99:71:6b:a3:ef:d5:26:97:2f:18:f3:
         f0:bb:22:09:6d:1f:33:5c:4e:ea:ed:1b:67:ca:d9:7f:ba:3a:
         2e:e5:18:d6:2f:98:31:48:9c:3c:59:f0:c9:c5:88:ef:d6:1e:
         9f:1c:2b:bd:0a:36:05:d1:28:6a:0e:6f:4b:ee:bd:a6:66:a2:
         0d:9e:df:bb:28:88:d2:2e:28:92:c1:65:38:26:03:e6:16:64:
         2e:d8:3c:bf:68:47:d6:26:9d:a2:83:d9:4c:39:06:2e:98:b8:
         9f:6e:da:2a:21:bb:f2:7a:58:16:7b:15:ac:93:7e:55:a5:26:
         c0:32:32:5a:47:61:03:15:c6:56:9b:94:1b:94:0e:6c:cb:77:
         d2:53:9a:b9:64:20:eb:da:de:1c:f6:97:d6:48:fa:11:41:b0:
         95:c9:8e:e6:ae:b9:81:cb:77:e5:61:15:26:6e:2f:a0:83:31:
         d7:6c:43:6f:28:e4:cd:69:79:b7:b1:c3:16:0c:57:4c:6f:72:
         68:87:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:09 2025 by rpki-client