Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbfbb0df-6448-3cd8-9aa3-db8326d20cb0.roa
File:                     bbfbb0df-6448-3cd8-9aa3-db8326d20cb0.roa (raw, json)
Hash identifier:          5l1LLmbiJqz7zX24NxNV7+1PELi6S9PuWPTbC5HEMEA=
Subject key identifier:   F9:A3:41:2F:E2:E7:9D:95:66:C9:D0:5D:EF:15:1F:4F:29:75:CD:F6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584869606EBA5C81DC8D96EEC100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbfbb0df-6448-3cd8-9aa3-db8326d20cb0.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        34.1.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:6e:ba:5c:81:dc:8d:96:ee:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=84f85672-c413-47b7-9251-6028b1edbc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:4c:67:58:9d:87:83:b9:12:6e:9e:c9:d4:
                    80:39:a2:1e:21:ea:f7:8c:dc:25:12:0a:2d:f5:4a:
                    88:8a:d9:05:1a:d1:f0:0a:2f:72:33:d6:73:c1:e4:
                    a1:29:c1:c5:cb:a4:75:5a:cf:6a:86:9b:91:9a:ab:
                    ab:8e:a3:a5:e2:1b:98:83:20:99:a7:07:20:11:c6:
                    50:83:4a:aa:78:a5:9d:b1:17:63:17:65:29:fc:62:
                    77:6f:52:db:83:45:88:27:66:d7:7f:99:fe:bd:36:
                    54:4f:4e:20:56:1a:2f:17:73:fb:7d:da:e0:8e:d4:
                    1f:88:e6:10:24:96:6e:7b:d6:aa:80:c8:a6:b9:5d:
                    eb:28:e6:90:ec:12:d1:14:8b:87:61:89:7a:a2:c0:
                    24:57:8e:40:f1:51:aa:2e:3b:59:94:c8:99:81:21:
                    28:bf:09:ab:63:65:63:ff:4b:9d:32:1a:fe:bb:1b:
                    88:60:39:e8:c1:7d:28:90:b2:cc:ad:2c:8d:8d:c0:
                    ee:48:94:54:2b:8a:5f:0b:5c:8b:c7:3d:e7:fd:e5:
                    85:b7:5b:be:3e:0f:79:67:2d:46:2a:f7:0f:72:34:
                    e7:6f:00:0c:b6:9f:2a:50:50:d0:4a:85:a1:49:29:
                    ca:2e:7b:09:4c:7a:7b:89:17:ba:6a:99:c2:01:55:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A3:41:2F:E2:E7:9D:95:66:C9:D0:5D:EF:15:1F:4F:29:75:CD:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbfbb0df-6448-3cd8-9aa3-db8326d20cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c0:6d:cd:99:71:4a:1d:c8:94:9c:97:37:a1:ac:93:8f:98:
         f2:27:77:cd:56:5c:bf:69:55:70:2f:18:f7:cc:53:00:a0:a5:
         0e:55:b2:d1:a6:b2:82:79:d9:27:3b:2c:82:1a:54:90:d7:00:
         af:84:59:be:da:ea:31:85:01:f7:8f:7b:70:d9:94:93:49:9b:
         8c:29:c2:7a:56:92:39:52:31:0d:a5:2b:91:9c:84:9d:76:9c:
         03:90:f1:f4:b6:1a:78:98:bc:7d:1f:42:1a:41:b4:83:d8:0b:
         6e:ab:aa:41:8d:2f:fb:1f:2a:5f:4a:eb:90:9e:bb:25:d4:ee:
         2c:26:64:1d:40:fb:04:d6:17:f3:5c:bc:88:09:21:12:34:ee:
         40:08:14:ff:e6:51:d9:03:2f:9c:ba:02:dc:e5:a7:3f:1d:ce:
         f2:c8:7f:0a:8b:0a:4f:a7:99:1f:e4:c2:70:cc:42:86:a3:67:
         a9:14:d7:19:3d:5a:34:69:ac:b1:32:72:22:d3:ee:67:84:94:
         12:8f:bb:37:7e:24:5e:bb:4d:c8:e6:34:98:6e:08:5c:76:da:
         33:c3:d6:d5:1b:7d:d8:f9:38:fa:39:90:f7:8d:dd:b4:43:a1:
         ea:a9:a6:e7:91:f8:8d:48:36:51:78:30:14:85:c2:63:fc:bb:
         4f:30:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:16 2025 by rpki-client