Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6692ee5-67fb-3342-b512-75fab0fc1389.roa
File:                     d6692ee5-67fb-3342-b512-75fab0fc1389.roa (raw, json)
Hash identifier:          iBEmh9Xybwb3c9ZCUYfSjJtCCPd9Iy3k4oLJz8vubi0=
Subject key identifier:   86:8D:45:F9:00:39:BE:17:4B:BB:31:68:A6:3E:A1:CF:DF:4F:5C:6F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BAC902F76F2E61481FDCC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6692ee5-67fb-3342-b512-75fab0fc1389.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        34.121.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c9:02:f7:6f:2e:61:48:1f:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d36b0cc2-f7b7-478a-adb5-69bbadabc8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:78:50:28:28:da:69:65:ec:ff:de:f5:05:
                    c1:bf:78:2e:29:3c:fa:11:fd:d5:87:28:b4:9f:a5:
                    24:c2:56:21:21:2f:07:4a:ff:1f:c1:2b:40:36:a6:
                    f3:b0:ec:d8:0c:b1:78:b9:0c:fb:81:ae:6c:4b:84:
                    6c:11:26:d6:a4:e8:80:8a:7f:da:39:0f:66:73:87:
                    5b:23:a8:4e:3f:54:41:ad:2b:8b:b6:6c:c8:41:91:
                    27:34:1f:00:2b:4f:e0:4d:99:11:4c:a1:99:7c:66:
                    b0:1b:67:1d:e2:9d:dd:9d:fa:37:71:f3:f1:8b:1d:
                    d3:ca:62:54:23:ee:ae:c0:11:b7:f1:0a:b3:1a:25:
                    66:02:7c:5c:10:75:69:9b:f0:fe:00:b8:94:c4:f2:
                    6f:c4:51:f3:08:75:ce:27:95:9d:3b:4e:b2:77:8c:
                    96:46:d5:f5:a4:b0:90:fd:83:6e:8d:09:a0:3f:d9:
                    73:63:1d:b0:e0:ae:19:4a:a1:d7:7a:4c:bc:c9:11:
                    25:a2:0a:8b:04:81:6e:35:98:c6:71:b2:9e:85:55:
                    44:f6:b6:43:6d:03:b8:12:62:f1:e2:f3:36:a0:d3:
                    7f:44:6d:e5:0a:ad:61:36:f1:53:9a:15:70:0c:f5:
                    41:67:ed:12:7f:d9:e3:44:86:33:e5:80:ac:d8:8a:
                    4f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8D:45:F9:00:39:BE:17:4B:BB:31:68:A6:3E:A1:CF:DF:4F:5C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6692ee5-67fb-3342-b512-75fab0fc1389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.121.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:19:13:64:f8:84:36:2b:54:d7:e0:77:e8:3a:7a:97:3b:4f:
         5f:03:2a:13:ac:53:a0:45:86:e3:b5:8b:06:8e:e8:7d:c6:ae:
         25:ab:be:15:61:ed:40:ac:25:6f:21:89:13:c0:41:2f:90:b6:
         6d:7a:e0:d1:bb:47:01:7b:05:34:05:e6:63:71:db:25:11:cb:
         aa:fb:63:14:c7:95:c9:da:32:20:46:50:be:20:c6:2c:73:a8:
         b2:90:22:42:35:ed:98:8d:0e:dd:bc:2c:8d:57:b2:a0:3a:4e:
         c9:ea:75:0c:09:a4:d2:fc:c4:f3:7d:99:c4:b5:c9:76:d8:6e:
         91:16:02:eb:05:58:b6:92:a5:3d:62:da:e9:e9:9a:79:fb:1b:
         92:bb:91:a3:db:7f:50:f5:d1:61:cb:3a:77:c4:ad:c5:30:55:
         fe:3e:90:e1:67:a8:09:6e:c2:cc:af:cc:58:c9:a7:13:07:e6:
         4d:65:c1:13:7c:56:44:7b:05:9e:73:bd:17:c1:3e:06:af:ae:
         26:13:1c:7a:d8:6a:d9:99:2e:54:2e:7d:f3:e0:07:6b:39:77:
         ad:5b:03:dc:45:54:39:82:f4:92:ec:f2:a4:d9:9a:75:8d:6f:
         35:0b:d3:f6:f7:7a:8e:42:87:27:42:62:c1:43:9d:b8:54:66:
         0a:c7:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:19 2025 by rpki-client