Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a14b29ac-7824-3a55-ac48-e34f261071d0.roa
File:                     a14b29ac-7824-3a55-ac48-e34f261071d0.roa (raw, json)
Hash identifier:          XoRmSmx1SrchD9Xe/9THjQ6lrV9zKWut0YVROPNfGBU=
Subject key identifier:   E7:83:08:93:2D:90:10:C8:07:DE:99:0F:E6:C8:62:EF:A9:3A:20:6B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7853416090F145B19339B40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a14b29ac-7824-3a55-ac48-e34f261071d0.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.125.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:34:16:09:0f:14:5b:19:33:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=7e69c557-76a8-426a-a4b3-fbd35055a83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cc:ad:31:56:df:92:c5:91:03:6b:86:e9:8e:
                    24:8b:c5:00:4f:f7:d4:dc:4f:29:9b:10:51:e7:0f:
                    ef:eb:8e:b0:b3:be:a2:8d:05:85:70:e0:33:81:26:
                    07:af:81:3c:ce:f2:90:ed:6d:2b:a8:7d:ba:bc:47:
                    7d:7a:95:af:43:dc:ef:c0:57:17:05:4a:f3:92:83:
                    bf:44:38:91:af:af:77:2f:d4:f1:54:a6:1a:20:07:
                    28:88:4b:71:40:05:bf:b9:7f:b4:63:b0:b9:d2:11:
                    99:be:e9:85:7b:f4:7f:2d:b9:11:3f:43:ee:56:72:
                    dc:a8:3a:47:d4:1e:2a:74:ac:17:f3:d9:ef:5b:f2:
                    bc:ea:ea:84:a8:a1:22:85:34:36:4d:1e:f8:05:99:
                    b5:80:0e:ae:b6:d9:ff:25:31:c3:be:05:af:a5:5c:
                    45:92:7d:fe:26:f0:af:45:29:ba:ea:7d:22:4b:33:
                    e5:34:23:63:f6:50:d4:71:4e:15:80:30:ba:2d:9d:
                    71:27:1d:40:85:99:47:76:06:72:89:c1:86:68:eb:
                    b9:dd:67:2a:a1:74:26:28:ca:ea:d9:37:ed:39:0b:
                    12:d9:ac:6a:aa:1c:27:e6:f8:5b:e0:19:8b:22:99:
                    b5:73:53:49:87:0f:6f:76:2a:88:b2:4f:5b:8e:ff:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:83:08:93:2D:90:10:C8:07:DE:99:0F:E6:C8:62:EF:A9:3A:20:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a14b29ac-7824-3a55-ac48-e34f261071d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.125.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:d6:cf:88:07:da:d3:f5:fe:5d:f0:f6:f4:5c:48:1b:14:
         5e:3e:28:93:75:31:cb:21:83:f9:eb:e3:c3:13:32:19:a0:cb:
         29:19:77:87:9f:6d:78:41:f3:5a:af:b0:6f:79:7d:ab:a9:02:
         8a:05:11:6a:bb:25:ef:0a:92:74:ea:70:25:c1:f7:28:c3:30:
         f5:49:f2:a6:fc:bd:9f:85:c5:11:b6:c7:c3:8a:0f:f8:56:55:
         28:8c:9b:a2:1c:2e:c0:b1:2f:11:ee:b9:b4:ce:d4:1b:25:c3:
         d3:11:da:dd:96:b2:8c:f8:51:98:0e:3e:98:e9:01:e5:e6:43:
         5c:4a:c5:f6:ce:a7:b9:3b:f7:75:61:66:4d:ad:18:af:50:e0:
         af:ef:1c:40:17:84:48:01:13:bd:95:f4:10:92:c8:e0:65:01:
         1e:b7:5b:34:99:d2:d9:4e:8f:29:f8:2f:e3:b0:91:46:17:2c:
         66:08:a8:93:ee:26:cf:15:aa:41:2b:41:d0:3f:f7:92:c0:12:
         42:95:67:91:96:69:33:8d:c7:46:7b:62:69:42:da:71:fb:21:
         20:cc:2c:97:f6:73:87:a5:ed:ba:48:30:6b:59:6a:c8:ef:a1:
         5a:b7:45:1a:46:5e:ac:87:82:5b:e7:17:41:30:31:b3:a6:6e:
         e8:bd:76:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:08:16 2025 by rpki-client