Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81ba9f67-d865-3d98-b379-aceeba9456a7.roa
File:                     81ba9f67-d865-3d98-b379-aceeba9456a7.roa (raw, json)
Hash identifier:          e0qOBm3VscrqqkC5CkVtEjCy73dJulWUIYXQgkGJlcg=
Subject key identifier:   D4:E3:EB:2C:C0:75:52:DF:C2:E8:FC:DC:8D:A8:46:F6:A0:C8:3D:66
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C0842D1DFEC00C21BD0C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81ba9f67-d865-3d98-b379-aceeba9456a7.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.133.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:08:42:d1:df:ec:00:c2:1b:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=850f16e2-415f-4977-bb81-3267f513d54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:8f:4f:55:aa:2a:5c:37:ee:11:99:79:93:
                    c8:06:59:1b:07:74:0e:a3:86:7a:df:dc:28:78:25:
                    46:06:c3:73:37:da:e7:0d:60:91:69:88:34:32:0a:
                    c5:32:b4:9e:ef:96:1c:4e:6b:67:85:d4:0f:72:df:
                    d5:37:80:99:5c:04:e8:3a:8a:5d:b1:6c:88:e9:29:
                    9c:35:79:1d:1d:cb:47:ee:ee:07:35:a0:85:e2:64:
                    73:b3:d5:8c:cb:1a:85:57:db:d1:68:d5:88:bd:f3:
                    d6:e5:8a:12:8c:91:31:a2:e5:64:95:ca:ac:3a:4f:
                    25:1b:a1:8b:fe:77:a7:5f:7b:f9:02:73:e5:04:84:
                    1f:96:42:44:e2:37:6e:ee:ed:7d:c0:de:4e:2d:00:
                    b3:52:1a:ba:08:5a:b4:61:8e:5f:d5:25:1e:ed:8f:
                    19:f1:53:26:86:68:2f:3c:de:fe:6a:02:92:36:cd:
                    02:0e:e1:b2:e7:e1:85:be:08:9a:ba:ec:8b:9c:96:
                    57:26:c3:5b:c3:ee:e4:cb:a7:d2:e0:43:f6:8b:53:
                    71:92:b0:37:0f:88:28:7e:23:cd:73:3d:d4:46:91:
                    dc:28:f9:4e:0a:f1:1f:6e:d1:9d:34:80:e1:ee:c7:
                    02:8f:2f:be:4e:20:15:2b:06:19:21:d6:9f:ed:80:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E3:EB:2C:C0:75:52:DF:C2:E8:FC:DC:8D:A8:46:F6:A0:C8:3D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81ba9f67-d865-3d98-b379-aceeba9456a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.133.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:de:e4:e2:7d:40:ad:90:85:79:df:c1:63:df:64:b3:29:1f:
         9b:51:3c:01:4c:a8:1c:f4:62:e1:fb:3e:42:d6:fa:4a:32:e7:
         d3:44:68:f7:4e:0b:55:ad:b2:8b:ee:1c:2e:37:c1:aa:d7:33:
         e5:cf:6f:c3:a0:f7:58:e8:d9:26:10:7d:c9:eb:94:31:78:f3:
         be:34:95:19:49:f0:0e:d1:64:38:ff:88:1a:4a:05:de:04:39:
         a3:9a:0a:09:dd:de:a2:c1:ef:03:07:79:8e:d5:b1:45:7d:08:
         71:8e:33:89:3d:8f:82:3c:d2:b7:21:d0:28:82:05:4a:91:0a:
         96:0f:93:20:8a:32:e5:13:b0:b3:ae:51:fa:e0:99:bc:8a:fe:
         68:23:ef:7e:9d:b9:71:f5:02:7a:29:03:2a:df:fb:e3:83:60:
         59:10:9a:60:e4:57:50:46:d2:de:31:ce:50:a2:f6:6b:78:09:
         ac:13:ea:52:67:5f:9a:c2:11:97:5b:1b:92:33:2e:06:44:6e:
         80:9b:f2:f1:e7:7b:49:4c:60:82:30:d5:22:16:db:ea:59:31:
         a7:01:a5:01:55:ec:6e:c8:0f:41:59:5e:dc:5c:a2:36:9e:c7:
         05:0f:f8:43:46:3c:97:4a:23:12:9e:44:d2:d1:12:ae:e4:ae:
         db:1d:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:12 2025 by rpki-client