Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f76eef9-3641-342b-bc15-536ed7071ff2.roa
File:                     0f76eef9-3641-342b-bc15-536ed7071ff2.roa (raw, json)
Hash identifier:          stlQT1ZE+DQj0PC4dPWNR5+eF1NRH1xwbBdZy5mCQhw=
Subject key identifier:   72:49:10:90:BC:A4:84:B6:F1:6C:81:9B:AB:9D:FA:27:B1:CE:DB:6D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C58231937DBEFB7303658F40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f76eef9-3641-342b-bc15-536ed7071ff2.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        34.120.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:31:93:7d:be:fb:73:03:65:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=8b4f7275-56f3-427c-8a81-b7d1237d4fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:f9:43:96:a9:31:1e:e0:66:0a:34:f5:aa:
                    66:d4:7b:e5:2f:f7:98:c7:35:cc:0c:ed:4d:7b:30:
                    0e:ca:a7:e9:d0:15:96:33:0b:93:5f:02:84:38:ca:
                    db:69:9f:2f:70:a4:bb:e7:f4:66:68:e0:01:f5:d4:
                    5e:d1:3c:a4:77:00:44:49:a1:5b:46:0f:a7:97:48:
                    2b:19:ee:9a:0d:d0:9e:94:5a:e5:81:67:33:eb:88:
                    bd:94:07:fc:82:4c:f2:6a:45:48:e2:ba:30:6c:42:
                    e5:82:59:11:8f:9f:28:50:74:f9:39:a2:b9:ff:ff:
                    8a:19:cb:ed:7b:c5:d4:fd:8f:47:15:53:ce:17:56:
                    06:56:a2:fd:b7:c7:b6:aa:8a:3b:56:f1:c7:de:94:
                    77:61:cb:46:fd:09:58:49:9c:29:29:e0:1a:c1:a0:
                    aa:35:35:5f:d5:3c:23:c0:b4:98:78:f6:a9:72:f5:
                    17:b1:90:dc:74:89:28:9a:46:82:57:f9:35:2b:35:
                    a7:32:9f:2b:75:f0:e8:a9:b4:35:ff:aa:cd:21:fa:
                    0f:82:05:3f:9a:13:81:ac:6b:86:3a:51:47:84:ea:
                    49:7e:20:3c:1c:78:03:c9:09:bb:4c:55:6e:77:d7:
                    9a:a6:43:43:4d:52:f1:7d:7b:c3:6f:19:79:a2:60:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:10:90:BC:A4:84:B6:F1:6C:81:9B:AB:9D:FA:27:B1:CE:DB:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f76eef9-3641-342b-bc15-536ed7071ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.120.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:57:01:8e:50:38:3b:0a:0f:0b:31:34:8c:3a:6a:3f:ca:be:
         0d:f6:87:9f:6a:18:c3:c1:1f:ff:b8:41:51:45:5e:d6:e4:f1:
         2c:52:e9:cd:de:f6:8f:34:7b:1a:37:f1:72:0b:12:d7:30:90:
         3f:98:9c:d9:9b:5d:31:57:88:71:7e:14:6b:ca:64:19:9c:27:
         82:fa:7e:52:56:6a:9f:62:fd:f2:bd:61:f1:03:81:bc:79:1f:
         e1:47:c3:ac:9d:e3:0e:74:38:e5:e8:bb:27:78:f9:82:0e:02:
         70:90:68:80:be:00:c5:d5:d0:f7:d0:f2:f4:8e:e3:56:22:b7:
         91:e1:30:f6:f2:5f:f7:4d:e1:7d:3e:16:c8:13:16:d8:62:41:
         c3:e6:6b:3a:e5:67:68:31:57:11:fd:06:44:94:da:3a:18:df:
         77:0d:11:0c:21:85:d9:a8:54:86:bb:a3:67:30:20:1c:7c:91:
         9a:88:c6:76:99:9e:e3:a2:21:2f:cb:bc:7f:58:e8:03:c9:a7:
         4b:dc:15:80:e1:a8:d9:c0:1f:c4:ea:e9:dd:12:d2:4b:69:c4:
         7f:4b:d4:3a:fa:80:e9:7b:56:05:28:ef:9a:64:1c:dc:66:6a:
         93:1c:98:a0:0a:87:06:24:3a:da:31:f6:43:98:12:3b:33:3b:
         ee:4c:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:49:56 2025 by rpki-client