Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/094671a3-1087-39c9-8d2c-c4d27503badd.roa
File:                     094671a3-1087-39c9-8d2c-c4d27503badd.roa (raw, json)
Hash identifier:          +T7w1OnAcZHUq9pPpJhbuH+lsZu+ad1nwoN0qeiz5cs=
Subject key identifier:   01:D3:02:2A:FB:97:AA:46:8F:5B:BA:F2:E1:E0:13:D8:23:1F:FE:F0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C58178BFDA362F6578FF3780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/094671a3-1087-39c9-8d2c-c4d27503badd.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        34.103.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:78:bf:da:36:2f:65:78:ff:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=edfabfbf-107f-48dd-8683-193ae553fc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:a1:e6:08:9f:14:7c:0e:80:ef:a4:5b:e4:
                    2e:05:20:44:09:ee:15:c9:e6:99:8a:0d:2f:c3:6c:
                    04:67:a5:9e:39:37:4a:ca:4d:b9:6a:d5:33:22:8d:
                    a3:d8:4c:26:d2:b5:47:07:56:87:4d:e5:c1:c3:87:
                    c4:63:16:de:ba:6b:1c:e1:83:0d:5f:41:24:5f:2b:
                    30:2e:60:ac:67:df:71:44:7d:76:c1:de:2a:ac:b1:
                    dd:d0:02:dd:a3:95:1c:e2:fc:02:0b:6d:d3:22:9d:
                    e8:5c:df:91:86:ed:23:33:1f:51:a0:7a:b1:fd:8f:
                    30:60:5d:26:e3:8e:7e:ff:8b:23:c5:0b:0a:df:b1:
                    1f:52:d8:26:de:73:18:52:89:07:9d:bf:86:4c:8b:
                    b1:2b:cb:87:a8:e8:d3:44:32:fb:87:0f:52:a6:b7:
                    38:26:ff:f5:38:6d:b0:0d:10:67:cb:62:e3:7b:24:
                    7c:09:70:0d:07:f2:1d:b3:47:80:db:98:3e:99:16:
                    07:1b:60:80:5d:58:49:a2:28:aa:f2:b0:02:4f:61:
                    5c:31:07:14:b2:d8:3d:f8:cf:40:5c:2f:44:33:2c:
                    ff:70:4e:e6:db:19:9e:df:3c:55:b9:ba:18:38:46:
                    f9:60:9d:e3:1d:f4:3c:7a:61:6d:2e:0f:86:3a:09:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D3:02:2A:FB:97:AA:46:8F:5B:BA:F2:E1:E0:13:D8:23:1F:FE:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/094671a3-1087-39c9-8d2c-c4d27503badd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.103.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:3b:a4:3c:8b:e8:a9:78:8f:7e:47:a9:d4:0e:a4:10:06:
         a2:da:5a:99:b6:a3:fb:ef:a3:f6:a8:6d:ac:57:68:f2:19:2a:
         6a:5b:b9:f6:2d:c9:c1:57:3b:ad:a2:48:5a:bf:5d:b9:1a:17:
         ca:8c:80:74:ae:8f:a3:9b:19:cd:93:23:d2:76:94:31:84:84:
         20:ce:b7:67:e4:4d:70:4f:cb:dc:b9:90:6d:3f:f7:c2:68:04:
         a4:c9:52:d9:e3:2c:d6:f5:95:ab:22:88:e8:b5:a9:2f:a3:67:
         63:1f:67:55:05:bd:34:50:54:18:0b:d4:8c:03:b0:44:6d:58:
         c4:02:cb:3c:ef:e9:3c:d4:d5:7e:3a:33:7b:df:46:68:f1:87:
         7d:bb:5e:3b:b8:e7:ab:43:a2:47:fc:13:45:2a:1a:55:be:23:
         39:2e:4a:13:6f:77:be:07:e8:90:5e:3d:71:59:9a:78:1f:20:
         7c:e5:93:da:d5:9e:5f:9e:94:fe:34:db:db:75:4e:1c:d9:cd:
         ce:d4:ac:18:63:47:03:54:ed:53:4b:86:e0:c5:54:8b:95:e3:
         c6:19:23:d7:a8:17:c3:4b:00:1e:b5:5c:bd:cc:87:f7:90:8e:
         13:dd:ba:41:8f:a4:ff:af:87:2b:58:28:24:b9:84:63:47:c5:
         9a:66:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:43 2025 by rpki-client