Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df26c213-e8cf-35ac-80c4-252c455f379b.roa
File:                     df26c213-e8cf-35ac-80c4-252c455f379b.roa (raw, json)
Hash identifier:          YDksL015D0QgJz896qu/9Y1C8XTpnmSvIpP9qaC5uEM=
Subject key identifier:   F0:10:9E:5E:59:53:BF:DC:C5:C0:BA:1A:10:27:69:F1:BF:51:B6:DA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A78510E8A566052041278AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df26c213-e8cf-35ac-80c4-252c455f379b.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.124.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:10:e8:a5:66:05:20:41:27:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=00084ae2-4b88-4600-a837-2c0e28ea09a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7e:fd:bc:5c:22:3b:4f:6f:90:26:a3:cd:53:
                    e8:30:05:13:83:5c:2f:15:4d:28:52:e9:4c:98:84:
                    57:60:94:46:8e:d3:64:2e:3a:97:0b:68:c4:b5:d5:
                    ad:a6:a3:21:d5:03:d6:a5:f4:9d:7e:f5:9b:90:40:
                    39:e6:8e:f5:35:00:bc:69:cb:f2:5a:ae:0e:77:6e:
                    02:50:35:75:08:2b:47:5b:d1:54:a5:2d:5e:0f:c1:
                    67:2e:d9:cb:a4:ec:ef:e2:07:d6:cc:98:de:09:07:
                    81:ff:46:9b:f9:13:7d:eb:e5:6a:f2:82:cb:60:d3:
                    d8:0f:db:49:b6:95:06:60:9d:b4:df:fa:59:cf:b2:
                    24:ef:f4:2d:ff:b1:d0:48:20:b5:ed:57:2f:ff:58:
                    88:ec:f9:cc:8d:0a:f2:34:cc:91:5a:1b:e4:8a:97:
                    0c:39:4c:d4:27:4b:77:fb:ea:34:fa:25:f9:d7:e2:
                    0b:b2:18:d8:f0:97:3a:7c:6c:55:4f:e7:8d:c0:fb:
                    67:c4:c5:b7:04:e6:c9:4e:7a:ea:d9:8b:85:30:69:
                    ed:27:11:ef:56:49:c5:e2:65:47:64:22:0a:af:f3:
                    42:7b:76:83:b5:fc:d4:f1:21:ea:93:4f:c3:4f:20:
                    59:2a:33:28:10:93:ff:d3:1a:b6:c9:9d:b0:56:62:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:10:9E:5E:59:53:BF:DC:C5:C0:BA:1A:10:27:69:F1:BF:51:B6:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df26c213-e8cf-35ac-80c4-252c455f379b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.124.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3c:f1:d0:83:96:77:f0:cd:69:6b:d8:c8:38:19:80:bc:77:
         8a:c5:1f:78:b6:41:e9:22:8c:d2:fc:dc:f2:62:b7:31:ce:0b:
         22:ef:9d:d3:5b:ac:af:8c:8e:f5:70:41:1a:47:1d:78:e9:56:
         4b:90:2b:c1:b9:f1:8b:05:e1:d8:12:2f:79:51:7a:bc:61:7f:
         45:34:ed:dc:85:12:10:94:77:60:3d:52:42:f0:29:ab:8f:a2:
         e0:b3:47:b2:e1:23:4c:ea:a3:71:b7:4d:a3:44:50:1a:96:42:
         f6:84:fb:b9:42:d4:8c:c6:d4:52:b9:d3:fa:ec:50:b9:c1:1f:
         df:3a:34:50:e9:4e:07:99:b6:70:84:a9:da:7a:a1:42:24:1a:
         f3:5c:f0:d1:18:f3:3d:80:ce:8f:08:a2:8d:e5:d5:1b:5e:e9:
         5f:78:ee:8b:f0:a1:a3:45:48:c3:fe:39:e7:e7:d9:57:5a:51:
         83:7e:a6:20:4a:fe:f4:e9:9d:bf:ce:79:6c:2a:d6:32:ae:19:
         2e:54:36:b6:0e:db:3c:fa:6d:e2:5f:fd:f0:e4:07:8a:8c:cf:
         e2:f1:50:5e:73:d6:3f:f4:31:6d:64:fd:d0:d7:2a:5e:64:3b:
         71:5d:a6:b4:bd:13:e4:0b:f1:b5:63:3b:78:a7:87:92:75:dc:
         25:c1:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:43:38 2025 by rpki-client