Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83eaad10-0dcb-342f-9174-893df420f4d0.roa
File:                     83eaad10-0dcb-342f-9174-893df420f4d0.roa (raw, json)
Hash identifier:          LL/yF46+Ix12GbIL3TwA/YzcxB5iv+89LB9GZ8DwgNY=
Subject key identifier:   8A:B4:D7:50:A0:F7:87:DF:1D:55:22:0B:BC:9A:14:DB:FE:D5:D5:86
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848897B280FDA376AF754468480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83eaad10-0dcb-342f-9174-893df420f4d0.roa
Signing time:             Tue 14 Jan 2025 02:00:39 +0000
ROA not before:           Tue 14 Jan 2025 02:00:39 +0000
ROA not after:            Mon 14 Apr 2025 01:00:39 +0000
asID:                     15169
IP address blocks:        34.1.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:89:7b:28:0f:da:37:6a:f7:54:46:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jan 14 02:00:39 2025 GMT
            Not After : Apr 14 01:00:39 2025 GMT
        Subject: CN=d303bb30-6a15-46f5-91bd-6180704e5abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:22:af:b2:f2:02:98:bf:40:af:8c:8d:b8:
                    cd:a5:b7:10:74:12:61:c2:3d:bd:79:53:0d:06:89:
                    0f:48:df:1d:6f:3b:d3:ab:fc:a0:94:e2:bb:69:7c:
                    62:bb:a5:79:be:d4:60:e5:95:41:61:47:1a:31:71:
                    ad:f9:a9:ea:6d:6d:f3:17:99:9d:14:67:46:8b:00:
                    d7:37:e5:26:00:3d:fe:66:b7:2e:b9:1e:79:77:a0:
                    96:7c:02:8d:49:0c:fc:dc:03:7a:80:0b:fb:30:7f:
                    ba:d2:b7:bd:90:49:bc:ea:16:38:16:44:ea:93:35:
                    7e:fd:71:8d:a6:b1:93:3c:37:ee:3c:92:c5:bd:89:
                    13:8a:b3:3d:4e:6f:9a:36:61:08:cd:31:73:2f:76:
                    b7:94:3f:43:ea:33:83:a0:fa:2a:0f:34:6a:71:df:
                    83:64:18:92:a4:94:c6:9c:73:d3:66:c8:93:2e:df:
                    7a:91:de:68:30:fa:72:d5:d0:0f:05:d2:2f:71:3a:
                    92:69:8a:ba:33:b6:0a:d2:11:d8:59:3e:c3:93:03:
                    ca:23:0e:f6:a7:c1:15:c5:6a:22:df:86:72:b2:b6:
                    2c:e6:b6:f4:43:95:68:38:e3:21:55:46:cd:26:00:
                    25:f9:1e:2e:69:cd:49:28:75:7c:e8:f1:82:e6:4b:
                    9a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B4:D7:50:A0:F7:87:DF:1D:55:22:0B:BC:9A:14:DB:FE:D5:D5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83eaad10-0dcb-342f-9174-893df420f4d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2c:d4:6a:12:6d:23:88:7e:5e:9d:5e:a4:4f:47:4a:5c:7c:
         07:7a:c1:d4:0c:bb:64:9a:19:26:50:4b:5b:7e:98:a9:75:90:
         0d:74:ee:6b:12:d6:db:95:5d:f0:85:b5:e8:0e:5d:91:3c:45:
         32:cd:27:19:74:8b:7a:d0:de:4a:91:7e:20:cd:11:7a:5c:a4:
         ab:cf:7c:de:93:4a:7e:22:fe:98:53:a4:ae:d2:91:22:a4:31:
         b3:6d:82:96:b5:bc:47:1b:a7:c5:5c:da:cd:f4:24:d7:17:76:
         ae:65:74:31:2e:b5:66:b6:ec:c2:4d:1d:b3:98:69:57:26:55:
         77:df:9b:07:d0:f0:51:41:7f:34:f9:d4:90:be:29:4b:8b:33:
         e1:cb:a5:c5:51:72:af:ef:67:e8:c9:fa:7f:48:98:ed:d0:5f:
         1b:85:42:65:ac:ab:c4:1b:51:15:44:12:7f:15:29:2f:8b:fb:
         5a:50:83:ce:5d:b1:9a:e8:1c:6e:86:ee:be:fb:49:3f:d8:31:
         c7:eb:74:45:d9:9b:2e:f4:5c:b9:25:b5:8a:7e:21:37:94:48:
         cb:a4:3f:00:e1:a5:a3:ee:26:d8:e0:6c:2a:7a:b6:05:be:62:
         56:ae:3f:6d:27:42:f8:ff:61:80:59:d4:cc:fc:79:0e:55:64:
         66:cd:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:35:38 2025 by rpki-client