Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1beb82c-c3a8-328b-ab9f-dcd4f2a5efe1.roa
File:                     e1beb82c-c3a8-328b-ab9f-dcd4f2a5efe1.roa (raw, json)
Hash identifier:          2EMePZlSnMj63w6xMpvSaw88hEtxC1sLAXzdMyDmYWg=
Subject key identifier:   02:CA:B7:5E:B5:4C:A2:68:52:9B:A6:B4:09:5F:5D:5C:8F:24:5A:6D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849C5065F6CEA1DE47886D94500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1beb82c-c3a8-328b-ab9f-dcd4f2a5efe1.roa
Signing time:             Wed 07 May 2025 02:40:55 +0000
ROA not before:           Wed 07 May 2025 02:40:55 +0000
ROA not after:            Tue 05 Aug 2025 02:40:55 +0000
asID:                     15169
IP address blocks:        34.190.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c5:06:5f:6c:ea:1d:e4:78:86:d9:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  7 02:40:55 2025 GMT
            Not After : Aug  5 02:40:55 2025 GMT
        Subject: CN=c4932a5e-d938-4ce7-8675-b112040702e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:8d:02:b7:c1:7e:7d:ec:6b:89:cf:0d:12:
                    a2:9b:9f:3b:ab:df:57:89:df:d8:d3:8f:86:7d:3a:
                    8a:1f:3e:10:39:af:a7:12:82:14:59:e1:73:c6:02:
                    70:21:22:1f:50:8a:c9:3f:bc:ec:02:7d:50:90:3b:
                    79:22:46:b8:6b:4a:67:0d:a8:52:f0:8d:4f:d4:85:
                    e9:a6:bd:e9:bf:3d:bd:75:8c:a1:3a:cc:85:22:a3:
                    54:64:db:4a:b7:91:0e:7d:74:f9:f1:0d:05:93:80:
                    81:9e:44:fb:f8:35:00:14:4f:2e:c3:3b:0a:7f:fb:
                    50:23:f0:fa:6f:55:82:4a:36:77:6d:18:81:88:02:
                    43:21:03:80:28:17:13:c1:20:e6:1f:41:10:a8:e4:
                    3a:f5:b8:26:5e:aa:2a:db:d2:2d:df:06:02:87:57:
                    b9:f7:68:5e:39:e3:78:9e:ee:a6:e9:82:80:7d:50:
                    3b:cc:a8:93:fe:14:84:8d:71:3e:55:46:7e:ff:11:
                    1a:d0:fa:1b:ee:7c:4a:76:f1:9e:58:83:62:47:34:
                    0a:87:2c:15:e1:79:2c:8e:25:e5:61:e7:3a:a7:4f:
                    f9:1e:f9:25:84:88:cc:37:6e:b7:37:61:a9:11:20:
                    97:2d:55:e2:c0:e3:42:f6:d7:f2:df:a2:fa:79:30:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CA:B7:5E:B5:4C:A2:68:52:9B:A6:B4:09:5F:5D:5C:8F:24:5A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1beb82c-c3a8-328b-ab9f-dcd4f2a5efe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:a7:96:53:4c:4b:e9:4d:00:e6:8c:7d:cd:a7:e2:bb:8f:
         a2:f8:ed:4b:08:fd:ca:c0:02:8c:d9:cf:23:71:b0:2d:07:c2:
         96:b7:3d:84:b6:00:89:fc:26:1b:87:7b:44:42:bd:7b:c9:7e:
         c7:aa:62:5c:d3:e9:d2:ca:4f:15:b0:b1:8a:02:4f:94:03:b2:
         95:1c:e7:0e:c3:a4:98:5e:ed:62:50:bf:31:b1:3b:ba:cb:72:
         22:2d:cd:a9:f9:98:8d:ef:ea:7d:03:cb:ad:9b:9a:97:b4:5a:
         6a:cd:c4:9c:96:08:b5:9f:6e:8f:61:d3:bf:37:6c:f2:70:13:
         b4:53:b5:6d:b3:e0:32:9a:76:4a:3f:c7:58:5d:56:27:f9:b7:
         61:93:e6:91:fe:0f:a4:21:d7:e0:72:7d:f6:a5:15:b1:a5:a4:
         77:9b:1b:88:bf:0c:8f:27:ab:42:8d:df:b9:98:84:d7:51:04:
         6e:50:1f:42:24:0c:78:58:20:a3:2d:01:fb:83:c9:d4:94:1a:
         6f:74:e0:97:22:c6:49:11:5d:09:ca:5a:ec:62:36:03:14:e5:
         fc:36:54:1e:98:40:5a:7e:fc:3c:f5:ff:56:40:dd:b0:6c:62:
         41:99:b0:3f:c2:be:ee:1a:6d:ca:fd:1b:f9:24:fc:92:84:e0:
         fc:1d:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:21:09 2025 by rpki-client