Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a592a998-1674-390c-840f-16b35f9aa506.roa
File:                     a592a998-1674-390c-840f-16b35f9aa506.roa (raw, json)
Hash identifier:          brgZkAefUKcTYht2PDVuxKBpCFevJqGXKnJxJcUt7e0=
Subject key identifier:   23:52:97:40:12:CD:40:E0:15:1C:A4:2C:C4:70:AB:7F:CE:22:94:CB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BBD5A83E201101FF6E6F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a592a998-1674-390c-840f-16b35f9aa506.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.27.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:bd:5a:83:e2:01:10:1f:f6:e6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=576579dd-980b-4a25-be38-ac59bf092c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:55:36:26:ea:c2:50:f8:f0:c1:4d:6a:83:
                    a5:ab:2e:17:df:4b:d6:85:40:fa:07:6f:cc:d2:f8:
                    8e:63:be:c8:38:03:e1:13:a3:7b:6d:4b:06:9a:de:
                    78:17:c7:9b:3c:da:16:63:67:07:4c:6c:33:9b:33:
                    80:a5:1e:fe:c5:2b:00:67:0c:d3:23:03:00:41:cb:
                    69:aa:26:69:3f:34:db:bf:e0:89:80:1b:cb:75:f1:
                    4f:9e:b3:13:ff:17:31:fd:dc:f4:bd:b4:6d:91:81:
                    58:45:04:40:f7:82:7b:bb:d3:2b:1c:97:37:74:76:
                    12:65:b7:1b:21:00:96:f2:72:ce:fa:6a:54:3d:a2:
                    5b:84:8c:7e:23:ee:1b:e0:6a:5e:5b:80:29:dd:55:
                    0d:fb:33:c0:16:97:35:33:9d:c0:7a:f2:f9:b2:76:
                    9b:fd:5f:2d:69:f9:a0:9b:8d:78:e7:04:3f:48:ae:
                    ea:e6:36:e6:97:0a:79:18:c5:1f:c2:36:31:33:c0:
                    e0:09:64:7a:4f:8a:2c:96:8a:2f:1a:83:65:21:79:
                    27:3d:d9:ad:be:54:b5:75:7d:03:9a:af:f7:ba:e8:
                    ef:12:5f:14:6e:39:c8:10:71:51:b0:38:32:bd:84:
                    bc:11:6d:19:85:e4:66:d2:59:7d:d3:24:f2:1b:17:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:52:97:40:12:CD:40:E0:15:1C:A4:2C:C4:70:AB:7F:CE:22:94:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a592a998-1674-390c-840f-16b35f9aa506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e4:09:bb:3a:b2:34:d8:30:df:2d:ef:1a:52:74:aa:79:ba:
         e9:a2:53:21:0b:60:83:15:37:c7:07:8f:bc:00:ec:76:56:20:
         97:54:3a:0f:d8:95:7d:62:1e:59:aa:cd:18:4d:0e:9e:31:45:
         ae:0a:de:80:f0:46:f4:af:f6:a5:ab:ee:2c:d0:8c:cb:84:17:
         6d:8c:0b:09:62:98:98:c9:ad:21:94:d4:c3:d8:0d:e8:18:23:
         14:87:dc:89:22:b3:98:75:28:bd:4d:17:bb:01:3f:3c:59:b6:
         ad:c6:d9:87:ac:b9:17:88:18:dd:f3:03:3d:a5:93:6d:79:cf:
         42:18:e4:7b:99:ec:ef:55:fd:9a:bf:4f:64:cb:49:d5:0e:fa:
         85:47:e8:72:cc:17:cc:a4:10:77:e4:e5:28:b7:e9:f1:ef:56:
         3b:54:c7:28:31:29:45:1f:7b:7b:53:e1:49:0b:c6:97:d8:7c:
         ec:f7:ae:a8:d3:48:3d:b6:ca:33:41:08:c4:c4:c4:28:7a:af:
         7b:00:06:f4:a0:19:62:04:7c:08:c3:6c:2f:3c:6a:47:15:ca:
         d7:38:12:2a:86:03:2d:b0:b0:78:33:bc:9c:88:18:d1:8d:0b:
         bf:d5:91:b1:49:96:f4:84:be:44:42:9f:36:86:08:b9:e6:a7:
         12:17:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:32 2025 by rpki-client