Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83af28f0-8f24-3b81-b055-10a60d229dc1.roa
File:                     83af28f0-8f24-3b81-b055-10a60d229dc1.roa (raw, json)
Hash identifier:          IBXcx511UZY0yIja+OPWUSIfHFRE+ixEG+R8ufHIMDs=
Subject key identifier:   81:83:BA:E4:D5:E1:74:48:6C:3C:6C:79:64:0C:A5:ED:03:97:48:EB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584894053469D401921536E23E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83af28f0-8f24-3b81-b055-10a60d229dc1.roa
Signing time:             Fri 17 Jan 2025 20:37:01 +0000
ROA not before:           Fri 17 Jan 2025 20:37:01 +0000
ROA not after:            Thu 17 Apr 2025 19:37:01 +0000
asID:                     19527
IP address blocks:        34.2.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:05:34:69:d4:01:92:15:36:e2:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jan 17 20:37:01 2025 GMT
            Not After : Apr 17 19:37:01 2025 GMT
        Subject: CN=4a6da0c4-e14a-44e1-bfdb-83b057442914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:66:38:20:e9:2d:18:32:8f:24:84:da:58:c7:
                    99:e3:6f:07:d3:44:ed:ff:fb:ba:a3:3c:67:08:de:
                    a0:12:24:c1:bd:aa:cc:52:b5:26:db:58:28:e6:e2:
                    15:d4:30:ee:6e:fe:f2:ec:05:f2:a3:2d:33:b6:71:
                    6b:67:4a:bf:76:66:f7:e2:63:5f:7e:e9:fd:18:47:
                    39:e8:6a:76:e3:69:5f:6f:9f:df:fb:5e:23:d1:4e:
                    cc:56:98:c2:46:a6:48:4c:76:2a:e4:5f:c0:22:a5:
                    90:1e:4d:41:12:27:41:41:7b:89:9c:0e:66:66:45:
                    d9:d2:39:bd:28:1f:46:f2:c1:54:9d:c9:5f:0e:9e:
                    ec:1c:77:1c:6d:f9:1a:b7:6a:3c:22:e2:af:c1:b6:
                    e7:5b:f2:36:db:30:33:e7:92:19:53:52:73:da:b8:
                    73:08:f2:2c:a5:fe:62:ce:9d:4d:29:ae:a5:1b:d9:
                    ec:b3:b6:b8:6d:b1:11:f7:18:3a:d3:5b:7d:cf:e8:
                    3e:0b:5b:b9:11:da:c5:a4:26:f8:be:9b:31:41:f6:
                    e5:51:da:5b:31:12:df:64:2d:e6:a6:b4:52:5d:2e:
                    a0:74:f2:9f:37:20:7c:04:bf:78:9e:60:0a:09:6f:
                    a6:6b:ed:87:b4:a3:a2:d5:78:73:74:d0:61:48:35:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:83:BA:E4:D5:E1:74:48:6C:3C:6C:79:64:0C:A5:ED:03:97:48:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83af28f0-8f24-3b81-b055-10a60d229dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:27:d9:2a:16:94:34:b4:14:05:11:d1:88:4f:a4:74:38:b6:
         14:4c:36:3b:f1:5d:ce:2d:6c:55:95:87:1f:1c:91:04:29:96:
         6c:90:35:f0:ee:80:71:59:d0:07:ed:52:6e:f8:47:e0:e8:b8:
         f4:77:81:b4:e1:f4:05:32:1e:8a:be:dc:96:32:63:7c:4b:60:
         bb:4a:70:46:09:c3:6e:f3:0f:ad:a1:9a:a3:ec:68:59:8a:3a:
         b0:d1:12:91:0e:27:78:53:a5:80:c4:7d:05:23:f8:c7:c0:eb:
         56:17:12:b8:3c:d3:ff:94:d0:b9:96:45:c9:d8:c9:23:a1:c0:
         e0:80:4d:54:e4:7b:f6:17:cf:4a:18:e5:20:9c:90:24:a8:e4:
         40:39:19:4f:27:2a:65:2b:90:1f:9f:e6:66:a8:74:ab:7b:7d:
         a8:ac:f1:2f:02:e1:1e:36:25:5e:d1:b6:fc:07:f7:fd:48:78:
         f6:98:f8:cc:16:be:1d:96:56:60:bd:7d:6d:06:e0:d4:25:97:
         7d:3a:2a:72:1e:69:8f:32:0d:f5:58:11:ee:03:57:59:04:4b:
         0d:a4:f5:21:25:af:ec:a0:5d:32:97:95:5d:9a:52:e7:6e:b2:
         85:af:05:fd:1d:1e:32:75:80:26:d1:f4:d7:17:e7:dd:7c:5f:
         7b:e8:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:53:07 2025 by rpki-client