Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78779efa-35b8-3961-a82d-7e74c78dbecc.roa
File:                     78779efa-35b8-3961-a82d-7e74c78dbecc.roa (raw, json)
Hash identifier:          XrXaJ8wrtiOU4j3ZRa3O1uhMmNe6DN9o3T42QIZXfyk=
Subject key identifier:   E8:AF:79:04:15:DE:51:C5:AD:89:8C:F7:61:A8:86:8C:85:71:7E:17
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BC2F2C265E049457FA600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78779efa-35b8-3961-a82d-7e74c78dbecc.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.166.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:c2:f2:c2:65:e0:49:45:7f:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=f1ca61d8-2f58-4348-8603-828ca7cadf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:61:de:28:53:65:51:20:8f:f1:96:6b:08:
                    b2:b9:a6:9d:a1:4a:ba:c2:eb:90:20:34:a4:c3:d3:
                    41:9e:6d:66:a9:43:1c:b2:78:d4:be:8b:9e:58:b9:
                    73:9e:a3:05:f7:85:10:d3:4c:48:95:ac:f7:63:bb:
                    89:8a:d9:de:db:fb:44:bc:7c:88:51:e3:31:38:6e:
                    59:2c:9e:b5:ee:18:9b:79:9e:d8:e1:67:09:93:d2:
                    e3:00:19:bd:0b:a5:53:39:84:57:73:7f:c6:27:88:
                    25:bb:ed:49:d1:cc:6f:57:05:0b:62:12:50:5d:47:
                    ad:20:9e:07:6b:8c:d4:8e:97:7c:e4:38:9c:3b:27:
                    16:31:95:5a:d2:bf:64:d5:b8:63:d2:7c:ac:2f:14:
                    0d:2d:b5:b8:56:fc:bc:28:e3:3f:fe:16:d0:6a:32:
                    3e:61:30:a3:3e:60:27:b7:21:9b:8b:c0:aa:a6:0a:
                    7d:5d:6c:c4:0c:3e:4d:c1:20:0f:00:dc:b3:8e:52:
                    13:45:f7:18:74:d0:0a:2b:d8:32:0f:d9:ec:b6:2f:
                    77:1e:a7:61:fe:9c:4a:89:02:3b:ca:24:46:78:b1:
                    3d:4f:59:df:78:a5:36:23:42:ff:4c:e4:91:8b:98:
                    e9:f8:b2:5e:52:45:7a:a1:53:e3:4d:9a:ee:ee:52:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AF:79:04:15:DE:51:C5:AD:89:8C:F7:61:A8:86:8C:85:71:7E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78779efa-35b8-3961-a82d-7e74c78dbecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.166.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:f1:79:6d:f6:4e:8c:35:c0:30:6c:82:3f:e8:8e:c6:d0:
         ec:37:1d:09:c6:2a:d0:5f:aa:ce:2a:c1:fc:b2:26:f2:94:e9:
         4b:e0:5f:2a:de:8c:12:77:1d:81:30:58:5d:e2:b4:18:36:5a:
         b1:df:90:ed:69:31:3e:45:a7:71:97:75:64:b4:26:da:59:5b:
         eb:88:ab:ca:71:4d:de:10:ad:6b:fe:75:8b:e5:57:a4:37:6e:
         da:3a:6f:76:55:ca:a8:74:51:97:b8:0d:b6:fa:eb:fa:51:95:
         59:84:47:bd:b3:a4:50:cb:db:30:85:7d:8c:c3:11:d7:99:9c:
         83:93:27:81:dc:3f:ca:27:83:ca:d8:b4:d1:ed:27:38:6b:be:
         f5:b6:ed:28:41:e8:13:a9:8d:21:d2:54:bf:0b:74:15:99:34:
         56:de:bd:b8:d0:10:d6:77:35:c9:1c:3e:81:72:3d:aa:93:60:
         5d:f1:30:79:56:ec:c1:a6:74:8a:00:2b:11:17:93:37:49:15:
         53:40:55:c3:02:98:f4:4d:01:c4:f8:f5:ce:d6:7d:6a:83:32:
         c2:99:27:26:c0:ef:dc:82:9e:fb:26:d3:f7:94:13:9f:5f:b0:
         12:cc:1c:9a:d0:1e:2a:6d:49:a7:c3:0e:14:b6:99:2a:dc:d3:
         3c:1c:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:44:02 2025 by rpki-client