Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9654b2af-4159-30ec-a8f5-26fbe60210c5.roa
File:                     9654b2af-4159-30ec-a8f5-26fbe60210c5.roa (raw, json)
Hash identifier:          ngYmQ1YoPrEAqQBBQ9fnyhOhXSoQuutJ059gTDFI8qA=
Subject key identifier:   E0:1C:B1:EF:0B:E2:F2:61:57:E8:61:BF:7D:69:C2:97:60:58:37:AD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849C5078F1C33FA0DDD0B4ED800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9654b2af-4159-30ec-a8f5-26fbe60210c5.roa
Signing time:             Wed 07 May 2025 02:43:18 +0000
ROA not before:           Wed 07 May 2025 02:43:18 +0000
ROA not after:            Tue 05 Aug 2025 02:43:18 +0000
asID:                     19527
IP address blocks:        34.190.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c5:07:8f:1c:33:fa:0d:dd:0b:4e:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  7 02:43:18 2025 GMT
            Not After : Aug  5 02:43:18 2025 GMT
        Subject: CN=4d5c8d6f-9824-4b08-a813-9d94b7da6491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:6e:a0:bf:a3:a8:ea:7b:a9:ce:e9:5a:ed:
                    73:1a:48:be:13:4c:e1:75:c5:33:cb:b5:a6:53:76:
                    bd:62:77:22:c5:a5:56:9f:42:66:b7:9e:ff:a5:dd:
                    07:4a:2a:32:d8:a2:dc:c0:2d:59:ff:e9:82:c4:8f:
                    74:29:4d:a6:b0:37:18:9b:c6:6e:db:11:e4:81:8e:
                    7e:b7:bd:73:60:69:1a:37:2b:92:cb:37:bc:8d:d2:
                    76:e4:98:2e:03:00:8d:42:1b:e5:67:f9:6b:f2:5e:
                    f2:bd:8d:da:be:30:4c:8a:46:51:c2:35:59:f5:5c:
                    e4:4e:46:f3:3c:b7:81:ac:51:78:cd:e2:d6:f9:c1:
                    04:05:7e:30:da:4e:1d:d2:e8:38:05:c2:71:cc:1f:
                    45:91:d3:76:ab:19:b2:84:ba:4b:32:ae:6c:76:78:
                    37:8a:2c:43:64:6c:6e:a6:ff:69:2c:08:65:4b:38:
                    0b:d2:cd:f6:d6:3e:54:71:6b:7e:e1:e5:e7:4d:a0:
                    b2:00:a1:fc:ad:b8:6b:0d:23:10:5c:46:73:ae:c2:
                    d9:e4:ee:4a:24:c7:08:fa:98:ec:79:37:b9:f5:ae:
                    0a:b0:8c:88:d4:0d:54:7a:7d:cd:08:5d:0e:99:d4:
                    49:a6:a2:88:e1:ff:a3:1c:1f:60:31:bd:3b:71:43:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1C:B1:EF:0B:E2:F2:61:57:E8:61:BF:7D:69:C2:97:60:58:37:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9654b2af-4159-30ec-a8f5-26fbe60210c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:3b:59:91:6c:2e:16:6f:5d:a0:15:62:b9:cf:38:63:a1:
         86:9d:77:9b:b2:9a:d7:a2:ad:71:9f:2e:68:f3:13:ac:d0:cb:
         82:d3:be:bb:20:47:d9:84:eb:06:2e:50:8b:df:93:85:6c:ee:
         4e:a7:56:9b:8f:1c:4a:7e:a8:13:82:5d:34:6f:42:72:74:0d:
         3d:e0:e6:47:fc:22:86:d7:97:7e:c1:b1:ad:65:63:18:35:a5:
         60:94:48:fe:3d:9c:e6:53:32:f1:36:2a:0c:7f:a5:76:b4:6c:
         94:5f:4d:cc:e3:6f:93:d7:58:69:b4:87:d5:8a:29:77:72:f3:
         83:89:7c:de:19:c2:8f:9b:20:47:db:c5:b2:d2:82:e4:26:6c:
         89:6a:5b:20:c8:9f:e0:9f:1a:44:76:f6:cb:bb:92:64:c2:a3:
         8c:8d:32:72:e6:3f:70:83:95:fc:9a:7b:00:9e:c7:e9:5b:ae:
         3d:20:15:0f:96:ef:47:31:65:e9:8d:b6:a1:e5:1f:50:c9:40:
         82:99:68:5a:e6:9d:53:82:42:80:3d:38:94:9c:65:e0:b0:a9:
         06:2c:2b:38:54:de:db:bf:80:67:ad:07:85:5f:ec:fd:db:59:
         44:0f:5f:ed:02:2a:fd:a0:67:da:8c:20:02:7b:3c:f7:bf:f1:
         e7:ae:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:40:39 2025 by rpki-client