Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa
File:                     4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa (raw, json)
Hash identifier:          9UH/loo4e9saG1yNkgxZSLmieD7MJDAS4mIonjh596c=
Subject key identifier:   8C:98:78:DD:10:B9:70:02:97:B4:C3:4D:E5:7A:51:DE:16:0C:C2:BB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584968E5B814CE39C909B8458EBC
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa
Signing time:             Fri 04 Apr 2025 02:40:45 +0000
ROA not before:           Fri 04 Apr 2025 02:40:45 +0000
ROA not after:            Thu 03 Jul 2025 02:40:45 +0000
asID:                     15169
IP address blocks:        34.2.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:e5:b8:14:ce:39:c9:09:b8:45:8e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  4 02:40:45 2025 GMT
            Not After : Jul  3 02:40:45 2025 GMT
        Subject: CN=d240e8fb-e97c-4d75-897f-1122edfea0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:7e:35:d7:6a:14:83:9d:76:27:42:05:19:
                    28:c0:a9:a7:e4:f5:90:18:7b:bc:8c:e8:55:d2:e7:
                    1e:7f:18:13:47:2a:1a:b4:e6:2f:9d:05:d8:4d:ec:
                    51:16:78:f1:ed:e8:a6:54:d3:e3:ae:e7:62:cc:de:
                    aa:48:5c:ef:06:46:2b:c1:f3:5b:5b:a9:ab:02:08:
                    e8:d4:e9:c0:d1:d3:6c:df:4f:c6:59:a5:bd:0e:f3:
                    33:fc:3c:c6:e9:ee:e2:e4:6f:39:fa:5f:65:45:64:
                    ab:83:9d:7f:a6:f1:8b:cd:68:e8:22:aa:81:41:21:
                    cf:ce:34:82:ce:fa:c0:f8:b2:0b:34:bc:3e:95:9a:
                    34:b0:0e:82:b3:86:40:18:62:6c:5b:73:f3:41:87:
                    e0:6c:ae:3b:d3:bf:3d:8a:ad:b6:48:65:4c:7b:33:
                    ad:b8:3b:82:4f:3e:d4:2b:ad:c9:a4:7b:6a:fe:68:
                    be:61:67:f8:fb:c8:0b:da:23:5b:12:58:cc:77:4d:
                    62:3e:dd:ff:ee:e6:b6:d5:18:4a:f7:ab:4a:99:5e:
                    f5:49:5a:06:12:10:60:c7:1b:17:e8:f5:a0:36:07:
                    f7:58:b2:72:ec:6b:1e:b2:38:4a:ac:cb:12:19:28:
                    84:be:fa:18:51:79:8b:5e:bb:a9:9d:0b:ef:8f:a8:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:98:78:DD:10:B9:70:02:97:B4:C3:4D:E5:7A:51:DE:16:0C:C2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:2a:dd:8d:e1:33:da:62:0c:16:84:64:e9:47:3e:71:11:
         7b:e0:d6:dc:40:b5:a6:35:7b:35:83:03:10:11:8e:15:32:7b:
         ed:a8:2b:33:f0:74:8d:5c:81:4d:e2:20:10:c1:3a:d1:22:27:
         93:c6:62:6d:68:5a:71:77:81:8d:f5:06:bb:f6:06:5e:ad:90:
         96:ac:29:23:ec:00:c7:00:c3:60:4b:b3:00:85:a2:71:78:33:
         57:c6:65:86:8f:f4:e6:d1:ec:df:d5:2f:76:86:69:14:16:51:
         49:5c:fc:60:7c:07:ff:f8:d7:74:11:95:66:5f:50:19:19:f2:
         b0:1c:58:7c:a1:56:a6:05:fe:5e:f1:4d:d8:83:32:36:93:c2:
         19:a3:03:f3:35:1e:b5:7a:27:6e:a6:3b:f4:1a:62:d6:c3:fe:
         3b:72:ef:12:75:8e:96:a3:32:43:17:e7:be:d8:02:de:3a:7c:
         b9:91:be:ec:df:fd:41:83:43:1b:a0:f5:56:12:9c:79:34:67:
         12:5b:34:be:2b:c8:97:eb:53:ab:46:0e:2b:06:89:2b:2f:05:
         b8:36:41:f9:85:d0:68:f6:81:2a:70:48:04:f8:f4:98:10:03:
         a4:91:a9:4f:f4:2b:44:27:43:12:b4:ee:ae:3a:2c:48:36:52:
         78:42:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:01:07 2025 by rpki-client