Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfc2481d-102c-3256-bf46-f9479a3e8271.roa
File:                     dfc2481d-102c-3256-bf46-f9479a3e8271.roa (raw, json)
Hash identifier:          tWhD7FeFeaAdcDtPEdtrkOs2hg1+T0KHC8Ym/2V52Ng=
Subject key identifier:   C7:86:39:5E:F5:2A:C7:47:0A:D6:27:57:3D:39:83:92:51:ED:82:C1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849E65509AF070B219ED3748B20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfc2481d-102c-3256-bf46-f9479a3e8271.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     396982
IP address blocks:        34.181.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:09:af:07:0b:21:9e:d3:74:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=268f61e0-e70f-42b9-9a6e-776693ae64ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:99:04:7e:6d:02:e9:48:1b:83:93:fd:66:
                    9d:f0:0c:ae:69:a3:0c:b1:30:f2:d8:78:a7:a0:9c:
                    94:40:f9:67:b1:ae:6e:7a:d0:09:05:8f:63:47:da:
                    f9:e3:42:9e:90:e2:be:3e:a3:08:07:0f:15:02:50:
                    4c:3f:75:b9:36:1e:5f:3d:58:2d:fc:19:8a:50:b8:
                    e3:89:84:ce:99:95:d9:69:ed:11:0a:3c:09:ca:9c:
                    79:2c:1d:f3:45:ce:6c:74:f2:22:21:f3:cf:94:07:
                    4f:ca:48:ad:45:24:0e:54:53:4d:04:dc:0d:c1:dd:
                    a0:3f:69:91:83:06:28:1b:50:68:5a:50:d4:08:54:
                    fc:ff:c5:69:6a:7b:27:42:32:c0:93:0a:41:4b:fc:
                    4e:0d:32:44:80:47:21:0f:93:67:d6:01:c7:27:09:
                    00:0d:da:1d:26:74:a9:b3:7c:e8:da:ce:44:14:9a:
                    18:74:98:c6:5f:ee:f0:5b:d0:dd:64:1e:d7:02:44:
                    e0:c5:35:e5:d5:10:31:12:17:cb:ed:76:63:76:f4:
                    cf:49:a1:5b:86:93:1e:ed:cf:69:ea:4a:fc:67:4d:
                    70:d8:44:5f:1c:27:f8:46:72:72:e3:dc:f9:b6:24:
                    c3:ba:32:6d:42:9b:55:ec:bf:96:08:f1:b3:23:8c:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:39:5E:F5:2A:C7:47:0A:D6:27:57:3D:39:83:92:51:ED:82:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfc2481d-102c-3256-bf46-f9479a3e8271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.181.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:55:1b:1a:5d:c2:ba:6e:83:68:c3:19:5d:2e:79:99:8f:90:
         53:bc:66:72:c6:f4:2b:e8:57:8e:95:d1:cf:a5:2c:7e:4b:6c:
         10:3f:54:3f:4a:e5:5b:00:a6:0c:d9:ab:32:4b:5b:3f:8c:6a:
         50:c2:18:41:a3:8e:33:56:ba:58:e5:2c:7a:5e:4c:5b:48:b4:
         be:72:ca:12:0c:1a:be:e3:ef:f7:c1:81:0c:3d:2a:04:ed:2c:
         37:63:06:05:4c:c4:be:d3:eb:c0:0b:74:b2:8f:3f:67:91:2d:
         fd:da:e6:67:8c:ac:58:77:7d:d9:38:bc:c2:8d:44:83:22:87:
         b0:0d:a2:8d:df:43:20:0f:c0:56:2d:71:ab:9c:cf:e9:f1:cc:
         fc:ee:b1:a6:8f:15:ed:94:95:d8:41:ca:51:65:65:c8:5d:7f:
         c2:11:0a:55:73:e4:b9:61:fb:1f:15:b0:f3:77:0b:95:35:c5:
         9c:19:c9:05:fa:db:06:02:b9:4b:25:e3:04:7d:25:72:0e:11:
         dd:5c:26:0b:8d:5b:6f:48:2d:4d:36:cf:d6:a5:36:d2:06:bd:
         68:8c:22:92:da:52:e6:32:60:2f:80:e3:7a:df:05:4b:3b:47:
         0f:46:0b:5e:78:4a:51:bd:7b:30:6d:1d:5e:52:e8:75:30:9c:
         b4:9a:00:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:09:58 2025 by rpki-client