Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf7a6722-c795-3b59-a299-e24c3c2e9875.roa
File:                     cf7a6722-c795-3b59-a299-e24c3c2e9875.roa (raw, json)
Hash identifier:          u1RmKFP+XJq5SlOFrGaGR6nIsGEzhlka/VVEbLqXLPk=
Subject key identifier:   69:A8:B5:DD:01:F0:2B:21:93:72:5F:61:0A:05:DE:D2:61:E6:54:BB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB6DF2AFE306D07BBE1540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf7a6722-c795-3b59-a299-e24c3c2e9875.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        34.0.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:6d:f2:af:e3:06:d0:7b:be:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c165f229-395c-46de-8982-4d061d096d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:c3:88:72:09:8a:dd:d3:5e:84:91:e6:4a:
                    bc:e7:7c:0a:fc:61:74:3a:e4:b7:f8:63:56:5e:cb:
                    43:20:51:3a:93:59:53:72:09:3d:6d:23:2c:ac:9a:
                    d0:24:bc:ed:e7:ac:40:68:69:c0:05:4c:ce:b9:da:
                    d4:3d:54:05:30:57:83:e7:0a:be:4d:90:1a:64:a7:
                    fe:ad:3c:fc:d3:09:08:f8:25:f7:ab:e2:67:f4:d0:
                    aa:62:a2:30:14:d4:a7:ca:76:c2:cf:28:14:64:e4:
                    38:84:38:90:3e:30:e7:91:be:1b:b6:11:b3:24:d7:
                    00:60:6c:f8:cf:e2:ed:2f:41:28:9f:ec:c7:de:d0:
                    27:c6:78:4e:36:a5:b1:ca:f6:5d:8a:2e:72:5e:f8:
                    65:bc:05:14:42:3b:6d:c8:fe:8d:7d:e5:be:c7:1d:
                    21:7e:df:49:ef:df:2d:56:d8:59:18:f1:4c:09:e4:
                    e8:ee:85:13:68:6a:47:cd:3d:8a:83:e6:56:d3:80:
                    2a:d8:01:e8:ed:4e:74:59:78:da:a2:40:39:fc:4c:
                    bf:42:d7:9a:2b:10:8b:bb:48:8a:1b:e7:7c:52:37:
                    10:b7:1d:12:26:82:52:cc:b5:15:dc:60:60:e4:01:
                    9b:81:0f:53:57:a4:61:28:97:23:91:a5:ef:fc:6b:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:B5:DD:01:F0:2B:21:93:72:5F:61:0A:05:DE:D2:61:E6:54:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf7a6722-c795-3b59-a299-e24c3c2e9875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:15:18:60:bd:e6:3f:66:f1:34:59:a2:9a:34:87:ac:de:27:
         49:44:52:fc:86:a1:bc:ed:ee:21:c1:19:35:97:eb:81:d2:bc:
         be:a4:64:8a:df:aa:fa:30:12:86:51:f5:eb:98:6d:62:6b:98:
         a9:1d:99:5e:0a:c5:85:50:a3:52:71:01:0c:80:61:8f:9d:b8:
         0c:0a:ed:3d:fe:06:6a:92:d8:5d:f2:9e:66:75:76:d9:d5:f4:
         f5:f9:20:51:8a:6d:4e:2c:90:cd:e2:9a:5a:6f:b5:cb:cd:e5:
         79:9e:44:eb:5c:0e:69:6a:bb:f7:b8:d1:55:eb:f3:b2:be:33:
         72:29:52:b5:e3:85:ed:33:63:07:cd:30:05:12:f9:94:9d:33:
         58:5a:5d:1a:b5:a5:84:58:9b:33:e3:be:d8:d8:89:f5:3c:bb:
         3d:4c:cc:ac:cb:00:55:c2:0f:cf:74:0a:cf:e5:05:8c:b6:af:
         f6:de:f9:e5:d0:0f:37:92:e4:0a:c6:78:c7:86:d3:5e:70:30:
         2e:ea:69:09:e7:ec:9c:b1:73:76:87:86:85:2a:be:0e:ee:d0:
         cf:de:49:da:fb:ca:0f:5d:c6:72:92:43:e6:04:81:7d:12:97:
         89:50:d0:3e:71:cd:60:ab:89:27:0a:09:b4:4c:2c:1e:77:b1:
         c5:cf:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:50:05 2025 by rpki-client