Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b843d0-86a9-3d2e-bdb5-becffa00b044.roa
File:                     86b843d0-86a9-3d2e-bdb5-becffa00b044.roa (raw, json)
Hash identifier:          W9qKmbUPStD0MjywVAX36HJnTDA/Cp/hSJJl4SBmy1s=
Subject key identifier:   1F:55:BC:A5:2F:B5:50:82:74:EA:8B:89:CB:12:59:C5:22:D4:DB:29
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C5817EAC104BC37C86336580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b843d0-86a9-3d2e-bdb5-becffa00b044.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        34.103.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:7e:ac:10:4b:c3:7c:86:33:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=1232e118-d97d-4812-ab35-56eb7042c94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a3:2d:c5:15:7a:48:3b:16:86:0e:7d:69:47:
                    23:1f:0b:17:98:5c:22:52:b1:43:97:10:eb:8a:70:
                    d7:39:53:82:fb:8f:e3:a1:5c:60:31:80:7d:a0:9a:
                    7f:5e:9a:79:10:e3:9a:d8:8b:1f:82:ad:7b:b7:b7:
                    66:b2:c9:49:cf:79:92:9f:f8:9b:1f:f5:b8:00:94:
                    3b:9c:db:54:49:6b:f0:78:d1:c1:81:53:3d:21:06:
                    dd:49:48:b0:02:ed:76:57:bd:8e:28:33:01:38:66:
                    c5:cb:c5:72:0f:30:f5:05:88:d4:3f:f5:95:cb:3c:
                    01:fb:fc:52:4f:2a:ed:78:11:ec:41:74:62:dc:78:
                    fb:67:97:1e:34:cd:f3:db:f5:03:b1:d1:af:02:60:
                    5c:50:62:fc:a3:a2:50:e4:5e:3a:b1:bd:89:a6:44:
                    c1:bb:5d:a3:99:5c:a0:08:c5:b0:c6:91:a1:06:3b:
                    c6:c4:cf:44:b5:1e:8d:af:c8:68:55:67:a8:26:91:
                    68:c7:cb:3f:9e:a3:4d:15:85:7c:88:3a:3e:64:3b:
                    e0:b0:f8:fb:b9:e6:37:4d:4f:8b:5c:9f:39:ac:1d:
                    c7:1c:5d:24:a6:e4:52:a9:78:14:28:8d:96:eb:ba:
                    8e:02:67:d2:40:82:39:10:8c:5f:7d:a3:9b:7c:83:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:55:BC:A5:2F:B5:50:82:74:EA:8B:89:CB:12:59:C5:22:D4:DB:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b843d0-86a9-3d2e-bdb5-becffa00b044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.103.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a2:22:7f:f7:1a:0e:83:3e:03:39:50:57:57:ce:71:57:e2:
         4b:be:67:4d:34:9f:1e:2b:83:e1:b6:87:dd:bd:74:78:61:96:
         81:c4:28:7b:66:95:c3:d1:62:4e:22:e4:ad:b5:70:9c:17:76:
         fd:71:d5:94:5b:9f:21:8f:ba:4b:e0:a9:59:3c:a1:50:8d:b4:
         2a:42:9c:70:ea:9a:7f:f7:8c:9b:a8:b6:28:7f:3d:31:d1:45:
         10:53:42:12:c7:50:46:84:eb:91:91:4c:2f:c4:46:11:56:d1:
         c3:12:6a:df:0e:91:ad:6a:71:d0:07:b0:cb:ba:0c:7d:d8:b7:
         df:e2:ce:a6:f7:cd:ac:b5:39:be:eb:07:1e:40:c9:e7:37:e5:
         d6:5a:ac:1a:ab:64:bd:16:74:59:75:67:81:ce:4e:d1:74:7b:
         12:4a:68:61:9f:a5:d8:5f:85:87:4a:2f:98:6c:fe:4b:b1:e2:
         f2:fb:fc:dd:f1:ca:90:77:26:82:04:17:81:d9:f5:20:c3:cc:
         21:09:49:6f:59:2e:98:bf:c4:c2:d3:e8:d7:6d:eb:71:3d:95:
         f5:f2:25:ef:e7:ef:8b:92:43:e4:cc:85:6e:25:f7:a9:2c:4f:
         de:d1:1e:7e:9b:4b:57:34:f0:3c:56:42:7e:14:34:57:f3:79:
         7a:ea:b4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:18:01 2025 by rpki-client