Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
File:                     e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa (raw, json)
Hash identifier:          Br6czPvGuPc9TKqKVjawnCleaKs76sN67J+iy8vIGbY=
Subject key identifier:   A8:FE:C7:2A:46:F3:10:1D:FD:2F:39:44:8E:55:82:6C:91:F8:2F:7F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584968E58B538382E2B98CCB7600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
Signing time:             Fri 04 Apr 2025 02:40:24 +0000
ROA not before:           Fri 04 Apr 2025 02:40:24 +0000
ROA not after:            Thu 03 Jul 2025 02:40:24 +0000
asID:                     19527
IP address blocks:        34.2.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:e5:8b:53:83:82:e2:b9:8c:cb:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  4 02:40:24 2025 GMT
            Not After : Jul  3 02:40:24 2025 GMT
        Subject: CN=2e030213-6b83-4fa4-934c-913cf8aa8f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:54:1d:06:10:6a:87:a7:3f:38:6b:54:b5:
                    ba:cb:ed:a5:11:88:ef:10:7d:32:38:93:f2:5c:15:
                    fb:a6:cf:3c:43:66:41:b3:1b:b9:91:47:02:d9:b5:
                    25:71:71:85:b7:35:17:f0:61:3b:74:85:ee:ef:38:
                    40:10:60:6a:06:7a:1e:2a:6b:a3:8c:b6:22:59:c2:
                    11:81:d9:a8:12:5b:a7:70:51:a7:21:3c:f8:34:ba:
                    af:6f:47:d2:99:19:f7:e7:04:2a:64:53:e7:43:e5:
                    3d:84:b8:dc:4b:48:be:81:77:89:a4:11:00:27:1e:
                    58:45:55:ad:f8:40:63:62:f5:57:31:87:44:cf:29:
                    0a:a5:7c:e5:d0:23:81:39:39:de:87:f2:89:5d:f3:
                    e3:52:11:32:e9:98:25:5d:4b:4d:c0:46:bc:11:81:
                    56:c1:df:a6:af:dc:40:b0:60:25:ce:e5:2a:fd:cd:
                    74:28:48:3b:b3:c2:e7:f8:b5:af:03:73:a5:bf:1f:
                    74:5a:60:fb:c1:43:3e:a1:8f:ab:c3:81:06:a3:75:
                    78:70:33:f9:6d:b6:70:cc:78:dc:fd:cc:cf:1d:a2:
                    ba:30:d1:48:44:51:f2:9d:f7:5d:ed:77:57:61:d3:
                    db:84:c9:dd:f6:cd:da:d3:ad:84:7b:4a:8e:65:f6:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FE:C7:2A:46:F3:10:1D:FD:2F:39:44:8E:55:82:6C:91:F8:2F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4d:92:56:26:92:cf:9b:70:c6:2f:29:f5:27:0f:da:44:9f:
         79:b1:76:09:5f:6f:d3:1e:16:39:b9:55:ee:dc:cd:fa:6e:1c:
         60:93:53:86:31:a2:61:cf:26:e8:3a:2b:eb:f3:17:a4:82:94:
         2d:30:04:39:ff:1a:0a:78:76:f0:a9:78:f7:2d:cb:d5:3d:bb:
         45:1e:62:b4:d3:e6:92:ae:5c:81:3f:66:86:31:1d:73:48:e2:
         de:18:56:a2:52:07:6c:95:a5:1d:ae:58:78:b2:3f:b0:26:d6:
         7d:f6:06:28:cb:ee:05:25:16:6f:f6:c6:ce:92:b4:3c:5e:30:
         5b:b1:18:83:cd:26:f5:b6:57:be:02:51:6c:33:83:4c:ca:b9:
         e4:4e:16:3b:39:1b:a2:06:0f:13:d2:19:0b:ed:cb:1d:f2:18:
         63:1e:07:de:c5:31:d3:47:47:87:25:94:98:29:3c:89:3d:d6:
         26:03:7e:63:2d:8d:90:d8:33:56:62:f3:9e:fd:e5:71:c4:c5:
         62:c7:d3:bb:d0:26:e3:50:2e:48:80:96:70:64:e7:3f:10:87:
         5c:9c:f6:96:46:fe:ec:43:06:0d:00:b0:c4:aa:9e:ea:a4:f8:
         66:9f:a9:07:73:7f:05:5e:f4:e7:9b:2f:4f:1d:81:f2:45:04:
         38:85:d4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:39:21 2025 by rpki-client