Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10c288a7-0f1d-3521-b27f-dd1d67c9b6b3.roa
File:                     10c288a7-0f1d-3521-b27f-dd1d67c9b6b3.roa (raw, json)
Hash identifier:          KiXVZcPIOxScUol9YAzSv1k5L4ul9DW2rHm9qKum2eI=
Subject key identifier:   BB:5F:AD:3D:AA:1A:EE:8E:76:0F:AE:D1:47:CA:FA:BC:51:A8:0E:30
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C58230528C4BF7506186ADC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10c288a7-0f1d-3521-b27f-dd1d67c9b6b3.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        34.1.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:30:52:8c:4b:f7:50:61:86:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5a5870d6-de6e-4826-9aa6-b45fdbd5d3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:49:0b:71:55:d0:df:d1:fe:f0:95:b9:94:
                    ba:44:45:a5:b7:c8:90:7b:8e:46:e2:e8:f8:a2:5a:
                    7f:70:72:3d:b9:ce:ce:b1:32:1f:f2:7d:bb:6f:75:
                    76:79:ea:ca:0b:3c:7c:d5:9d:2e:52:22:7a:57:53:
                    b7:bd:a3:7a:28:d4:fd:33:8b:2e:9e:b1:df:80:a2:
                    77:64:69:ed:5a:b9:ac:f5:bf:1b:ea:d4:4b:c8:15:
                    a7:c8:7a:19:28:56:69:96:55:e1:28:92:6b:e3:a3:
                    e9:c0:d1:0c:95:55:36:42:a8:77:3b:f1:9a:1e:bd:
                    a5:01:a0:25:b5:44:49:6e:74:a7:83:fd:98:2c:25:
                    ef:25:12:30:7f:1e:84:97:28:1b:7b:c2:81:2a:ae:
                    73:76:70:8f:8c:94:12:be:19:46:f8:f0:75:ee:43:
                    73:07:b3:42:99:a9:21:8d:74:30:5f:9b:49:5b:ba:
                    29:03:8c:98:c4:78:73:57:d0:2a:c1:d1:d4:db:7d:
                    a3:ca:b5:e7:05:8d:9d:54:5b:13:4b:d4:58:5f:63:
                    7a:77:c4:a6:8d:13:77:c6:89:57:51:2b:fc:aa:c1:
                    9d:fa:b0:25:14:1e:2c:92:69:61:ef:b3:fd:13:3a:
                    52:95:01:1d:05:5d:ac:ab:a1:ed:45:e1:71:b7:45:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5F:AD:3D:AA:1A:EE:8E:76:0F:AE:D1:47:CA:FA:BC:51:A8:0E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10c288a7-0f1d-3521-b27f-dd1d67c9b6b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:60:3b:6b:41:3c:22:fa:98:d5:93:66:56:91:0b:46:b8:dc:
         a0:8b:ed:d6:49:73:42:93:98:8a:c7:e9:4b:89:62:97:d3:2c:
         a0:c0:32:e0:ab:02:c6:81:a7:2a:40:78:0d:95:50:b3:72:43:
         40:ee:1d:b6:13:0c:5f:08:ff:56:9d:98:23:29:7f:dc:0e:a9:
         aa:23:9a:c8:a8:55:c3:10:80:2a:14:f9:00:5c:91:9d:cc:0d:
         bd:2f:ee:c3:e6:24:f8:6a:f3:87:23:bf:a7:df:f5:32:d4:7d:
         46:77:c1:33:76:d3:93:54:6b:fe:6f:f4:96:3e:ef:7f:f6:48:
         4f:71:8d:3d:00:cb:fd:6a:9a:47:97:9b:37:5f:7b:ad:85:c5:
         f3:e0:d3:c2:f7:b7:90:7e:e5:d1:8f:e0:75:49:74:38:27:b8:
         36:4f:f6:e8:c6:80:21:11:4b:32:79:ee:97:34:cf:7a:03:3a:
         a4:fe:86:04:63:9a:0a:09:80:34:27:7e:88:dc:9b:72:71:07:
         76:7a:e5:59:ba:f5:09:24:53:34:4d:1e:1b:3f:01:ce:49:2a:
         4c:6b:6a:35:50:df:16:e1:ce:79:80:2c:f8:81:9b:ec:78:48:
         f1:0c:df:7b:bf:2d:78:41:01:5c:fc:e2:f6:f5:4d:94:43:0f:
         b8:e0:49:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:31:40 2025 by rpki-client