Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14721baa-42aa-304a-96f8-bdae0eba9f8b.roa
File:                     14721baa-42aa-304a-96f8-bdae0eba9f8b.roa (raw, json)
Hash identifier:          UBwJs4/g2ZS8Z2C5Z4f3Xn5AhCB6CmMWokisHJ4Si5U=
Subject key identifier:   1B:B6:BA:3F:97:3E:D9:B0:87:7C:A4:81:1F:34:73:B4:93:06:B8:5A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C14A47998A7E2C7863680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14721baa-42aa-304a-96f8-bdae0eba9f8b.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.66.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:14:a4:79:98:a7:e2:c7:86:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=c727917f-d835-4f4b-a9ce-f5b88186d14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:84:d0:bd:30:48:ce:02:d7:b7:ec:10:57:
                    73:94:a4:0b:4e:ef:63:c1:e3:e9:4a:de:80:48:ec:
                    15:69:cf:bd:6f:d9:99:cc:00:1c:40:03:f5:9d:fd:
                    19:e4:06:1a:97:e8:79:47:c7:52:f8:4e:9a:b8:a9:
                    19:36:25:d0:ce:c3:dd:3a:11:64:ae:df:65:fd:e6:
                    ad:ad:98:ca:9b:93:85:21:7e:86:57:06:b2:7b:2f:
                    57:37:f5:87:5b:49:ce:f6:fa:6a:f8:8f:84:41:f8:
                    3b:6d:73:ca:51:46:4e:72:e3:36:6b:31:2e:84:f5:
                    30:04:16:8a:f8:49:6b:3b:6e:f8:a3:c9:41:03:cb:
                    3e:a3:b4:15:46:1f:df:4a:84:c9:1a:10:be:c0:e1:
                    29:00:da:b2:51:0e:fe:0d:31:75:cd:4a:0c:5e:1d:
                    52:9a:0d:2b:95:67:27:51:50:a5:b6:46:05:4f:dc:
                    f6:85:ab:7e:50:4e:95:d5:5d:ca:c1:b6:cd:a6:d0:
                    f6:a3:9b:ba:c2:bf:f6:1d:97:d1:e3:fa:63:68:7f:
                    46:24:bc:e0:97:4a:c0:52:89:21:7f:1f:58:82:69:
                    cc:ce:6c:5c:97:8d:db:de:27:56:ce:7f:96:9b:c9:
                    2f:42:50:4d:fb:35:b4:f8:e2:e0:1e:a4:9c:60:99:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:BA:3F:97:3E:D9:B0:87:7C:A4:81:1F:34:73:B4:93:06:B8:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14721baa-42aa-304a-96f8-bdae0eba9f8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.66.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b0:d0:39:75:45:75:86:de:d3:f0:af:d2:39:23:ab:dc:5b:
         a4:f4:73:f2:6d:f8:66:cc:a3:54:98:14:3e:90:7a:00:1f:13:
         a7:47:ea:67:63:ab:d0:84:8d:ad:fc:9b:6e:d3:5b:00:df:d7:
         56:d4:bb:81:05:98:35:c4:97:90:e2:71:e7:9b:12:82:72:73:
         a9:fb:38:c9:c8:f2:6d:5c:b7:fe:b2:18:39:f3:1e:95:79:c7:
         81:a4:fd:a0:0a:25:6f:8e:d7:8b:ad:d2:f6:9a:d9:c1:d3:c4:
         bf:2e:31:63:25:61:71:7a:e8:68:3e:a7:5d:11:83:7f:ad:5b:
         46:aa:ac:ca:41:b6:d2:e3:c1:ab:9a:71:dd:f2:45:94:7d:69:
         05:22:5d:9b:97:3a:87:60:c4:ae:a3:6b:ed:42:c4:c6:39:ab:
         10:d4:58:99:de:e6:51:35:8d:e5:76:62:95:39:8b:a9:bc:75:
         1a:54:d8:5f:bd:77:16:70:1c:0b:6b:c0:b5:c8:e9:7b:80:b4:
         18:df:08:1f:63:7f:ba:4a:47:f0:72:8b:da:61:a1:24:9d:03:
         a0:d3:4d:8c:04:1f:e3:42:aa:99:d9:36:26:ee:2e:f4:d1:7b:
         e5:85:47:9e:b6:e4:0f:3a:8f:9c:22:43:65:f9:e8:57:5d:6b:
         d3:ee:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:09:18 2025 by rpki-client