Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab5d54eb-7b21-3c9a-b83e-1ddce9e685ee.roa
File:                     ab5d54eb-7b21-3c9a-b83e-1ddce9e685ee.roa (raw, json)
Hash identifier:          F5YDHxsaXL2FQO95T9XT5UZv2UaJurDgMOPFI+IcSPQ=
Subject key identifier:   3C:11:FB:30:39:96:A0:5E:32:F4:F3:7A:19:76:2D:C5:FD:F2:11:BB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BF43A87CD3EF707A1FF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab5d54eb-7b21-3c9a-b83e-1ddce9e685ee.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.140.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:f4:3a:87:cd:3e:f7:07:a1:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=f05a325a-bb2a-4f09-a6dd-67e85eb744db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:c2:1c:54:96:7d:76:18:85:7b:05:f2:74:
                    fd:9c:d5:c5:80:1d:35:29:80:c5:86:3a:46:a1:a1:
                    90:06:da:95:a0:57:9e:d3:fc:c7:d9:63:32:ec:e1:
                    3f:a9:d5:19:92:42:c2:71:22:06:31:29:20:76:dd:
                    4b:6b:1e:29:c2:8f:04:cb:8d:6a:ba:72:08:db:7b:
                    3e:dc:a9:06:f6:c8:fb:8e:d6:7b:f8:71:9c:7e:c4:
                    92:cf:f9:34:11:f8:99:d1:9f:a1:3f:17:bd:fe:92:
                    cc:0a:5d:8c:4a:6f:a3:1c:5d:7d:cf:e9:8c:78:03:
                    ba:b2:d2:1e:ae:d2:cf:55:56:78:b6:7f:be:2e:65:
                    53:d9:02:8c:16:3a:56:bd:d0:9f:90:01:2c:6f:76:
                    d2:12:e4:e4:fe:58:94:c4:8a:41:63:fd:d1:50:c7:
                    92:f7:ea:5a:0d:b6:b0:88:2b:91:2f:fc:ba:16:45:
                    ee:c7:e7:9e:e6:95:96:14:70:95:83:f9:f3:ac:9b:
                    c0:ce:00:b6:86:d9:d2:dd:1c:3c:56:45:ed:e1:7d:
                    b0:c8:06:98:d4:04:9b:76:79:9b:30:43:b3:5b:40:
                    fd:76:d7:bb:6c:3d:9f:4e:b8:46:e4:14:e5:01:d9:
                    9c:e5:cf:a2:ea:c8:86:40:01:4d:9e:d2:aa:7e:d4:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:11:FB:30:39:96:A0:5E:32:F4:F3:7A:19:76:2D:C5:FD:F2:11:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ab5d54eb-7b21-3c9a-b83e-1ddce9e685ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:13:4f:7d:02:0e:a8:d0:cd:47:27:a6:10:8d:db:5c:1a:1a:
         6f:49:cd:18:5e:8b:d8:83:63:17:4e:f8:2b:9b:26:63:4c:b5:
         de:3a:e5:35:da:e9:27:24:90:e2:4c:80:f9:42:83:fd:42:3c:
         77:11:90:a6:62:87:90:5c:12:5a:9a:8e:c9:24:cd:d8:26:9b:
         2f:ac:a8:07:da:b9:35:c1:b2:71:4f:bf:e9:69:d2:ba:1f:3e:
         e5:29:2a:2f:e7:a7:bd:83:e1:33:b6:3f:54:e9:a1:1b:c9:55:
         23:0d:49:17:3a:9d:0b:64:2c:d2:84:c3:c9:18:22:30:66:10:
         de:39:f3:8d:44:23:67:84:95:9f:98:55:af:5a:f7:67:a1:5b:
         5e:1e:c6:62:43:c7:e7:af:aa:5c:74:ae:80:08:58:7d:a6:48:
         1f:ce:32:a5:01:4c:2a:b4:53:e2:ff:fd:a5:a9:ab:8c:ef:73:
         31:17:cd:1b:7d:bf:58:78:ea:0c:9d:dd:4a:2f:31:57:b0:f9:
         a8:21:24:fe:77:c5:9e:c9:79:d8:b0:26:7f:fe:c8:31:8d:9e:
         f9:16:f8:76:a1:4c:21:52:89:20:1a:ad:5d:d6:e6:12:99:60:
         52:cb:ce:fa:87:57:e0:e9:fb:e6:8c:80:c7:fa:ba:1c:c7:f0:
         12:d3:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:08 2025 by rpki-client