Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3fe4dad-7969-3e69-99b6-3193ca58f0b2.roa
File:                     c3fe4dad-7969-3e69-99b6-3193ca58f0b2.roa (raw, json)
Hash identifier:          vM554sDiCo/noQjab2d63XkShwRt4JKEK1b9bk5r11E=
Subject key identifier:   7C:21:90:07:F7:67:E0:17:E0:6F:EF:06:69:A9:7E:B8:C0:02:9D:81
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7851C188D2447CF573F037E
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3fe4dad-7969-3e69-99b6-3193ca58f0b2.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.144.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:1c:18:8d:24:47:cf:57:3f:03:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=8de7940c-ee8b-49b2-8fdd-8db249743da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:b7:5e:ba:ab:54:c8:b9:1b:0f:3f:05:b1:
                    d1:68:2c:a2:12:9e:98:a5:a8:4c:9b:02:40:67:13:
                    2f:35:2e:95:a8:64:09:4d:b9:32:bb:7b:6c:15:16:
                    84:39:6f:ef:25:9c:a0:42:bc:e8:67:1f:ab:50:9d:
                    47:d2:51:ac:ed:db:dc:9a:19:84:05:fb:94:b1:4f:
                    24:14:d2:5a:d7:7a:aa:59:47:d0:73:d9:c7:01:8e:
                    2e:b2:bc:2f:d0:2d:ae:f3:15:cb:d1:21:37:e0:39:
                    94:ae:54:73:30:8b:6c:04:ed:18:97:8c:8e:b1:ca:
                    a9:f8:b6:56:c0:1a:e6:a5:0a:63:ad:ee:92:a8:29:
                    2a:9a:b4:3c:40:c2:02:7c:90:af:91:c3:16:69:0c:
                    f5:dd:ef:76:41:50:a3:f3:e3:37:2a:d2:99:f6:dd:
                    88:2c:3e:78:57:7c:0a:97:42:c4:49:7e:99:58:91:
                    95:da:c0:aa:8e:7f:b7:19:28:4a:fe:d1:80:ce:c4:
                    12:40:1c:8b:42:30:08:24:c4:8e:4d:40:09:25:f7:
                    80:0d:57:6f:23:b1:1a:c3:35:e4:63:b4:fa:39:6e:
                    f8:41:ae:30:a1:f9:c1:fd:f8:62:c0:d4:b4:84:cc:
                    c2:41:4f:ed:4f:a8:b4:76:64:fe:f5:db:b5:7e:a0:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:21:90:07:F7:67:E0:17:E0:6F:EF:06:69:A9:7E:B8:C0:02:9D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3fe4dad-7969-3e69-99b6-3193ca58f0b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e1:42:8c:92:10:87:d1:25:28:40:fd:4c:e5:dd:64:01:60:
         95:94:a2:8c:a1:b8:66:f0:6a:0d:b5:a7:62:69:57:58:1b:3f:
         f4:08:0e:1f:dd:09:10:cb:1f:0c:9c:f9:0b:21:33:d1:7f:46:
         e7:d5:d4:4e:d1:7c:e1:80:79:08:c2:b3:4f:4b:34:0c:1b:c7:
         24:9d:5b:c3:da:6c:52:91:58:d8:05:5c:9b:db:0a:a1:1e:d3:
         41:c2:1d:af:7b:26:fd:eb:23:c0:88:e0:9f:ed:da:c5:d6:25:
         1f:d7:cf:ef:a3:df:34:79:1e:97:aa:71:d2:6d:27:3b:56:75:
         08:01:ea:24:a7:3c:80:69:aa:c6:0b:4b:84:41:05:3b:02:ea:
         c6:0d:52:2e:ca:47:62:ab:ca:70:57:7d:0d:95:fb:90:8a:54:
         cf:68:27:38:8c:a0:77:67:98:6e:74:5c:50:d3:19:f8:b5:9b:
         45:20:da:9c:ff:95:65:d9:b8:2e:8d:85:3e:57:7b:9d:61:42:
         51:83:50:5e:f7:7c:2a:77:5f:57:1f:04:b6:31:f1:ce:1c:4f:
         4a:27:1c:41:d8:f2:4c:f6:93:29:76:7a:9f:d1:b0:14:b7:f1:
         30:a7:b8:fe:18:89:3f:8b:9b:62:0a:f8:62:c7:f6:1d:42:ea:
         98:01:8e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:03:48 2025 by rpki-client