Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e9c054e-02b6-3439-85fc-c13f0a159c77.roa
File:                     4e9c054e-02b6-3439-85fc-c13f0a159c77.roa (raw, json)
Hash identifier:          Y7RupHbibdVY63c4059m9XIRZ7SOWZQj9XhJiqYeipY=
Subject key identifier:   17:78:F0:C0:4F:C4:A8:1A:C8:16:48:97:14:09:D6:99:88:E1:43:5B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849C505462034F92AAB2E02B200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e9c054e-02b6-3439-85fc-c13f0a159c77.roa
Signing time:             Wed 07 May 2025 02:38:42 +0000
ROA not before:           Wed 07 May 2025 02:38:42 +0000
ROA not after:            Tue 05 Aug 2025 02:38:42 +0000
asID:                     15169
IP address blocks:        34.190.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c5:05:46:20:34:f9:2a:ab:2e:02:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  7 02:38:42 2025 GMT
            Not After : Aug  5 02:38:42 2025 GMT
        Subject: CN=654fa7a5-bae8-4428-8322-0fad5bfb812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:36:f6:79:f8:e6:a8:9e:13:94:ab:b4:61:
                    5f:e5:d0:a8:17:db:8c:a9:f4:dc:bd:e1:5e:ff:9d:
                    db:0c:b9:b1:ce:22:b1:00:77:92:24:00:4a:fc:7d:
                    41:b3:d2:68:30:22:66:b2:5a:e2:45:a8:b0:af:86:
                    43:50:3c:49:f6:e4:fa:85:bf:fc:5a:88:94:38:d9:
                    79:1a:a6:a5:b9:e8:36:d6:47:71:25:b3:40:fe:b9:
                    07:05:39:b8:4c:f3:09:5b:19:88:29:f5:94:40:24:
                    a3:b3:0b:82:fb:4e:98:8c:64:29:d7:0e:88:db:70:
                    da:68:80:5e:28:6f:61:61:c9:e6:81:9e:fd:66:23:
                    b1:9f:c8:59:2f:2a:af:f5:2a:c7:40:f4:01:d3:7f:
                    2a:cf:dc:83:00:1c:36:61:c5:f7:f9:a0:7d:82:b3:
                    7b:9c:f6:a4:cd:db:49:e5:a3:a6:80:b5:92:21:4f:
                    a1:42:81:d1:8b:18:48:f6:fd:48:24:35:14:9b:99:
                    16:0c:7c:c4:44:4f:10:ea:69:aa:aa:dd:58:00:f6:
                    46:06:fe:e7:52:08:55:11:b4:7b:92:62:89:17:6a:
                    ef:40:b1:a5:85:a7:8a:85:88:e6:e9:eb:a9:ee:af:
                    0a:2b:bc:fa:42:2c:37:e4:9d:32:ff:77:3f:9a:b2:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:78:F0:C0:4F:C4:A8:1A:C8:16:48:97:14:09:D6:99:88:E1:43:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e9c054e-02b6-3439-85fc-c13f0a159c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:45:0c:c1:01:b6:95:a9:ff:6e:4b:f2:69:3f:66:dc:36:e9:
         14:82:8b:9c:c6:2f:b1:c1:c8:be:03:4b:b5:b1:b1:53:af:07:
         93:83:92:15:b2:54:b7:06:35:a9:c6:35:af:e4:9e:45:86:7d:
         cd:8c:25:99:c2:57:42:22:61:46:27:79:99:cc:76:f8:e9:42:
         b9:67:3e:e2:09:2e:3b:76:d9:7c:ec:d2:5d:2c:d4:c6:f3:26:
         b9:c1:1f:95:42:9e:69:e8:82:0b:dc:bf:b7:dd:71:cd:2f:54:
         02:09:6b:be:55:2f:51:f7:50:d4:ef:d9:42:36:d0:ec:12:a8:
         dd:1e:6f:39:14:87:49:c3:7d:dc:d4:c1:2b:5a:e4:b9:17:cb:
         04:c4:52:18:0d:f5:6e:94:8b:44:5c:a4:20:03:32:75:96:a4:
         fe:bd:b9:98:85:df:6c:0b:b0:26:39:a4:4a:06:07:fa:bf:43:
         87:7d:d0:0b:63:9c:03:90:96:13:c2:af:b7:12:7b:53:40:d1:
         38:05:23:ac:07:5e:25:5a:1f:7c:b2:84:1b:82:4a:59:ba:ec:
         b0:e0:b8:f9:34:01:b3:84:23:5e:90:87:a9:31:39:a9:b0:ac:
         e7:78:83:3c:9f:35:c1:b4:09:8f:a3:de:1a:05:e1:ad:b8:a0:
         f6:2c:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:43:30 2025 by rpki-client