Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22772273-2902-3d2c-90f4-97da00bf44b8.roa
File:                     22772273-2902-3d2c-90f4-97da00bf44b8.roa (raw, json)
Hash identifier:          uMuH6C067RF1Q1I9rBlzG9h7teC7mwyNNIAVFYvNhlk=
Subject key identifier:   59:B1:B4:FD:D4:9B:6B:16:17:D4:F7:49:A3:31:DB:9C:03:7A:CE:5A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584965E98074B8141AD42ABC5B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22772273-2902-3d2c-90f4-97da00bf44b8.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     19527
IP address blocks:        34.1.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:80:74:b8:14:1a:d4:2a:bc:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=fd901cbd-387c-4090-9db9-45a0b7a82583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:6a:52:3a:64:35:a4:7d:14:81:5b:7d:fc:
                    02:e7:bb:8a:70:26:f9:4d:aa:0f:a9:3d:43:26:55:
                    a3:c1:f0:93:3e:e1:df:f7:a0:80:4a:41:e2:f2:46:
                    b7:3c:f6:86:1e:3d:d0:62:c6:9e:d9:a2:4a:65:23:
                    53:c5:30:24:81:dc:39:f0:4d:ce:e0:bc:d7:90:db:
                    61:e7:01:b4:d2:da:d7:82:98:a7:d1:46:d4:56:69:
                    7b:b0:2a:44:50:bf:1e:dc:bb:ae:ce:f0:e3:96:d0:
                    8d:2f:d2:1e:31:78:0b:44:3d:e6:ca:21:fa:b1:34:
                    72:15:7d:ee:ea:6f:f4:39:c4:74:aa:99:5a:ec:33:
                    cf:ca:ca:f0:c2:a9:5c:74:8d:56:4f:f8:b0:08:f7:
                    f4:b0:90:34:c7:99:e4:45:86:ef:0e:5a:c1:28:6a:
                    74:21:d5:1a:ea:54:cd:23:08:ec:90:96:8c:ac:b5:
                    ba:69:38:21:47:27:bf:60:85:32:58:60:34:c1:1b:
                    63:7d:c6:71:85:21:22:09:59:37:a0:a7:28:1d:a2:
                    63:af:8a:58:21:91:c4:d5:9d:36:5d:87:b0:7f:a9:
                    f2:25:ea:51:01:2b:53:36:1e:f9:7c:95:fe:91:63:
                    36:0a:f6:67:16:a5:4e:23:12:af:f9:48:30:77:03:
                    d7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B1:B4:FD:D4:9B:6B:16:17:D4:F7:49:A3:31:DB:9C:03:7A:CE:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22772273-2902-3d2c-90f4-97da00bf44b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8c:ea:97:cd:c9:41:6e:1a:0d:a1:63:a5:1e:e7:37:78:ba:
         d9:62:9f:0e:22:93:4b:bb:5a:9c:c4:c0:b1:08:39:d0:53:a4:
         9f:e5:fc:46:c2:85:47:f5:7f:cb:2e:2d:90:4b:fa:00:e9:11:
         4b:3a:96:ab:68:f1:35:2a:4a:5e:77:0b:1b:84:39:0f:93:2a:
         11:b6:a5:b5:c4:f2:17:88:b5:4d:a5:27:69:85:a2:99:d1:fa:
         05:b9:b2:09:fc:5d:be:f6:9f:4c:ba:2d:d6:63:33:ea:fe:36:
         bf:8d:c6:39:bc:80:9d:3a:f3:bf:37:4a:97:7e:b7:a5:35:6d:
         b7:00:07:38:0a:c8:3d:5a:b9:fb:88:de:bb:cc:e3:ee:5c:90:
         4b:36:95:4c:5a:8f:1e:a9:7f:cf:78:87:75:e8:0f:39:48:fd:
         d1:3d:44:66:bc:18:0d:cf:76:0f:39:81:a0:b0:93:6e:a0:b8:
         eb:67:3e:bf:84:31:76:e6:43:e6:81:e2:39:40:b5:07:44:50:
         a7:fe:e7:cb:d7:ff:58:f0:d4:8d:6d:4c:d9:f9:02:9b:bc:f2:
         6e:79:3b:4d:18:e3:c9:ba:ca:0a:cf:c2:7e:db:4a:71:33:fc:
         4e:06:ce:9b:ba:f8:dd:fb:94:a8:7f:22:0b:7d:95:6e:b8:7b:
         56:be:68:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:57:49 2025 by rpki-client