Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8c771ef-b189-3149-a92f-015c6f614ee5.roa
File:                     d8c771ef-b189-3149-a92f-015c6f614ee5.roa (raw, json)
Hash identifier:          0LIq+0xPEP5C33kAXBdxK5CoePSrcUCU4cxg7kXEGBs=
Subject key identifier:   8A:C5:41:08:83:91:89:A7:56:69:50:7F:0C:74:E7:18:59:53:64:55
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB772C9A1C851ABC3902E4
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8c771ef-b189-3149-a92f-015c6f614ee5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        34.104.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:77:2c:9a:1c:85:1a:bc:39:02:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=fa0d1919-bdac-44d6-b6b0-75f6f91cdfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:eb:95:4a:50:12:a3:e0:6e:39:4b:0b:5e:
                    75:41:db:cf:fd:1b:87:00:cd:8a:95:d9:6b:6c:a5:
                    8c:7f:a3:c7:e6:a4:79:3f:6e:49:9d:af:aa:c0:c6:
                    3b:43:6d:95:a2:bb:1c:46:50:e2:28:cd:54:df:21:
                    81:e5:a4:ae:d7:ab:06:8e:ff:45:7e:9d:3d:c6:1a:
                    1c:f4:7e:d9:08:39:a6:3a:7f:5f:f9:be:4a:a2:e2:
                    5d:da:48:40:4d:e2:70:1e:80:fd:36:89:b1:fc:14:
                    ac:9a:6f:56:27:71:d7:02:22:76:78:1f:80:c7:81:
                    4f:de:50:cb:0d:49:bb:1f:9a:60:2f:fe:55:0a:76:
                    56:33:03:d3:15:fc:bd:a2:de:3d:73:6a:99:07:d9:
                    1e:70:ac:1d:75:bb:d4:72:51:7e:a3:fe:f6:7b:af:
                    d5:ff:a7:46:42:fb:75:65:fa:1a:02:fb:9f:c9:96:
                    8b:93:70:e0:a5:e1:1d:b0:1f:97:f6:c5:64:ce:f4:
                    b5:bf:a9:7c:13:05:8b:81:34:11:b9:ac:b6:fc:6e:
                    5b:9f:51:ef:8e:c9:c5:bb:7c:50:85:5f:ec:8a:28:
                    62:f4:9f:2e:86:8f:f8:a5:fd:cc:c2:3f:5b:9d:83:
                    b7:2a:5a:95:f9:92:04:56:73:39:cc:24:ec:bc:6e:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C5:41:08:83:91:89:A7:56:69:50:7F:0C:74:E7:18:59:53:64:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8c771ef-b189-3149-a92f-015c6f614ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0b:fc:ef:7c:95:17:d2:dd:7d:2f:20:3e:d1:aa:ef:5a:3b:
         d3:6b:48:e8:f4:ea:ff:9f:91:b0:d8:27:ca:47:48:bb:1c:70:
         5f:28:c9:88:6c:66:13:96:e7:7f:6c:88:ab:86:39:34:46:70:
         2f:53:a5:ee:a4:93:f2:89:20:e8:de:43:51:41:b7:4b:8a:14:
         43:95:99:dc:ce:c5:6d:36:36:ec:8e:52:68:31:2e:88:e8:2d:
         0b:7b:bb:76:cc:63:1d:42:81:67:d1:a2:e4:0c:49:26:30:d9:
         37:5c:b2:60:66:03:ab:9a:51:b4:3e:6d:ca:41:43:2a:72:4a:
         df:56:04:41:18:18:3c:b7:e9:ce:72:28:86:6e:3c:89:b6:54:
         de:d3:30:c6:18:ef:ed:43:3d:7a:9e:04:20:50:14:75:e6:cd:
         34:3b:f4:c3:f7:f5:40:5b:6d:ee:99:50:c3:29:c0:c7:b6:09:
         bd:e4:f7:3e:c0:44:03:ff:74:ce:4a:eb:ac:49:6f:80:08:67:
         8a:94:7c:de:d8:b6:f4:35:1b:d0:74:28:cc:e4:42:5b:67:90:
         9e:32:65:63:f7:8a:af:51:20:6c:fe:9d:e2:60:38:61:4f:f0:
         34:c4:f9:9a:b0:f1:dd:93:f7:ae:2c:1b:a6:ff:69:07:1c:f3:
         ae:44:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:51:37 2025 by rpki-client