Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b558c6-0f69-344d-b777-07adb5db7399.roa
File:                     d4b558c6-0f69-344d-b777-07adb5db7399.roa (raw, json)
Hash identifier:          7iyUrfd8MFOeeutSzQDoRDO/PzdxxxncsbiHWU2Ln0U=
Subject key identifier:   7B:BD:79:6F:53:D3:3B:76:6F:0E:35:67:3F:46:1C:D9:52:CF:F4:DF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7853052BC7BC03D10878A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b558c6-0f69-344d-b777-07adb5db7399.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.138.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:30:52:bc:7b:c0:3d:10:87:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=955f27bf-133c-4b41-886f-b6949b50d94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:14:12:75:3b:d9:56:6c:97:16:36:c2:bc:cd:
                    3d:31:43:63:cc:ca:60:ac:84:c7:92:3c:3f:00:df:
                    44:38:8a:ad:3f:d6:02:a4:6d:3b:09:6e:3c:db:95:
                    a4:39:df:12:cf:c2:8d:d7:3c:95:75:db:58:22:95:
                    a3:37:4b:f3:d7:47:ff:94:d8:91:6c:8b:75:37:57:
                    d4:6b:da:ba:2b:a6:7c:9c:37:f2:77:3a:1a:1e:3e:
                    38:e3:31:ca:f7:9e:a7:63:4a:98:9a:be:c1:92:21:
                    40:ec:f4:73:b3:e6:5c:f1:8b:1e:3d:09:f7:54:79:
                    f9:a5:db:8f:d8:ff:d8:06:6d:da:9f:af:a5:88:31:
                    c6:c7:07:f6:6f:fc:0f:09:ea:b0:9d:07:c2:8b:2e:
                    26:af:a7:46:f0:8a:e5:70:fb:58:43:43:cf:de:90:
                    b2:72:92:90:32:ae:e6:85:05:d4:cf:f5:e3:7b:e3:
                    6b:2b:19:c3:d0:b3:dc:5e:35:74:cb:aa:ce:25:02:
                    95:eb:b7:8e:08:5d:b4:42:5b:05:39:c2:fb:b5:ba:
                    ce:7c:b9:39:18:dc:64:87:68:94:53:8e:ac:fd:1c:
                    5d:4d:ba:47:ec:5e:74:94:f9:ae:ef:69:36:71:db:
                    fb:7d:79:3e:22:13:fd:38:52:2e:e6:20:98:f7:ce:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BD:79:6F:53:D3:3B:76:6F:0E:35:67:3F:46:1C:D9:52:CF:F4:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4b558c6-0f69-344d-b777-07adb5db7399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.138.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:37:63:ad:b2:e7:94:59:5e:c7:06:89:79:25:4e:e6:cb:ad:
         e4:60:8a:e1:ac:9f:8d:00:79:9f:ba:67:75:89:3c:e6:7e:d9:
         ce:6c:a6:0d:15:78:2f:65:00:b3:5d:22:22:9f:24:f5:93:b6:
         05:04:05:a1:b6:dd:84:15:12:7f:a0:f2:4f:87:77:eb:be:60:
         0f:d8:a4:36:d2:45:13:0a:35:d3:bc:44:c3:bc:49:25:7d:85:
         c5:2b:d0:44:33:34:73:93:a9:6e:80:f7:5b:46:3a:74:5d:eb:
         27:db:4c:3e:86:30:2d:46:32:2c:4a:84:57:98:3b:b9:ec:83:
         09:53:05:c6:29:b7:f9:41:7a:72:c3:f4:77:44:87:53:57:c3:
         06:70:93:17:9a:47:98:83:33:6a:36:bb:77:06:ac:8e:84:21:
         39:4c:eb:b4:30:ee:7b:2b:c0:38:1d:4f:62:34:56:e9:7d:21:
         8e:ec:76:59:c3:0a:41:05:33:0a:b3:fe:ac:28:52:93:22:fa:
         36:a7:ab:f5:38:3e:e2:d0:19:26:5b:bd:39:09:fc:2a:a8:ee:
         97:a9:bb:97:5a:48:89:bb:52:ec:7c:e4:b3:28:8c:8d:6a:56:
         65:cd:ce:77:8d:61:cb:e1:06:ab:bb:00:4a:6f:d8:cb:de:c6:
         c1:3b:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:30 2025 by rpki-client