Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b88cfd-4f17-3b38-bb86-ff5ab8ef5f6b.roa
File:                     34b88cfd-4f17-3b38-bb86-ff5ab8ef5f6b.roa (raw, json)
Hash identifier:          H6P6bSsxARYrd8yjKWL46uviFYjPPSGcuMQp2jfiIVQ=
Subject key identifier:   32:22:36:E3:3F:34:96:ED:C5:17:39:BB:7B:70:61:B5:08:9F:0F:FA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584968E5AF1BECE341F30C4A5A28
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b88cfd-4f17-3b38-bb86-ff5ab8ef5f6b.roa
Signing time:             Fri 04 Apr 2025 02:40:41 +0000
ROA not before:           Fri 04 Apr 2025 02:40:41 +0000
ROA not after:            Thu 03 Jul 2025 02:40:41 +0000
asID:                     15169
IP address blocks:        34.3.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:e5:af:1b:ec:e3:41:f3:0c:4a:5a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  4 02:40:41 2025 GMT
            Not After : Jul  3 02:40:41 2025 GMT
        Subject: CN=a3a90da7-ff30-4a7f-8201-f17212645f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a0:97:e1:d8:07:25:c6:31:9f:b4:e8:3e:17:
                    1e:08:c4:e2:1a:6b:56:9f:0e:ca:14:89:85:5e:7e:
                    aa:be:27:e5:12:09:6b:49:52:23:91:d2:9c:bb:b3:
                    5c:41:82:54:10:a3:45:5e:cd:dc:33:c5:20:70:25:
                    f0:07:38:97:6b:20:ac:a4:14:8d:e9:dd:89:3b:24:
                    fd:83:3b:bb:6c:10:48:a2:cc:6c:16:e7:68:a3:e7:
                    17:58:f8:fa:c6:6c:f6:fd:41:e6:a3:40:e1:db:f3:
                    5e:7d:50:b8:af:8b:3e:f1:11:f9:95:8f:04:a6:22:
                    d4:5b:45:6a:84:dc:d1:f2:53:42:81:80:f9:de:8b:
                    c7:49:0f:cb:44:16:91:61:fd:e8:b7:31:76:a2:01:
                    0b:2f:dd:a0:62:72:26:5c:d2:e1:d4:55:d3:1e:b5:
                    3d:28:73:b9:80:13:7c:e2:ed:29:88:b8:2a:3a:82:
                    ae:0a:8a:32:d8:5a:b3:52:56:25:4b:3d:7b:40:42:
                    af:8e:01:07:c1:8d:02:a9:0e:b1:7c:d9:51:60:20:
                    89:dc:f1:d6:03:ad:82:b1:3a:25:79:31:0e:fc:5c:
                    15:a7:b9:51:cf:82:78:2b:b2:9c:24:45:4e:6a:2a:
                    b2:9a:43:42:d8:0c:46:e6:38:9f:74:97:88:c6:bf:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:36:E3:3F:34:96:ED:C5:17:39:BB:7B:70:61:B5:08:9F:0F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b88cfd-4f17-3b38-bb86-ff5ab8ef5f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:fa:60:26:16:48:98:ed:72:15:b3:21:be:a8:95:5f:7e:cd:
         9a:a4:7e:32:1c:f2:bf:58:c8:8f:7b:79:e2:c9:21:42:1a:b8:
         f9:b1:7e:3c:d9:d7:74:58:cd:93:49:55:ad:3b:37:c3:93:4b:
         ab:ac:f3:56:6b:c5:6a:84:60:7e:0b:8c:0b:92:3d:bd:0d:9e:
         32:13:fd:3d:56:d4:cb:e0:3f:c6:73:78:f3:b1:f2:87:4a:5a:
         97:57:3d:c1:99:4c:cf:03:50:a2:23:0b:a4:86:9d:b9:2e:67:
         d5:c5:cd:e1:04:c2:57:89:be:84:e1:cf:6c:0b:b4:4a:17:74:
         b5:4d:e6:cb:4a:b7:17:c4:23:95:e4:bd:95:31:5a:05:38:2d:
         be:5c:36:dd:f8:2e:4b:c6:62:39:6b:b0:82:0e:3a:aa:4a:ec:
         36:75:f5:bf:00:c9:cf:73:66:c2:88:82:66:ae:7b:97:36:11:
         70:9f:05:bb:ba:ff:0a:c0:71:6e:11:90:67:18:72:7b:3a:f2:
         08:32:e9:64:04:51:97:87:08:b4:9b:2d:10:31:34:2e:d7:1e:
         c5:cf:df:0c:07:ec:e6:27:a8:97:2d:f3:d3:3f:c9:4a:7f:8f:
         a5:d4:d3:d9:d6:3f:71:ea:8a:f7:57:85:53:29:04:fe:96:6d:
         be:1e:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:49:23 2025 by rpki-client