Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c62f6b79-4447-3922-b7fc-9fe8724ecbb9.roa
File:                     c62f6b79-4447-3922-b7fc-9fe8724ecbb9.roa (raw, json)
Hash identifier:          2GKjorKVX0oFS+SK7bz2AKnfp80CgSWAa33bu3r0//w=
Subject key identifier:   93:C7:AC:63:FF:25:58:C4:EE:2A:64:E7:12:B9:12:5C:D9:21:2E:25
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BEDF55E0F5D0F54D7C6C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c62f6b79-4447-3922-b7fc-9fe8724ecbb9.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.81.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:ed:f5:5e:0f:5d:0f:54:d7:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=e7454035-b775-4f80-82f8-0864c94640b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:99:d2:ba:e4:d9:43:7a:0f:f1:d4:23:ba:
                    7a:0b:7c:41:04:57:f5:50:30:ef:07:14:05:88:52:
                    22:ea:0c:d8:cc:18:00:e3:5f:ac:6f:7f:34:5f:40:
                    c8:e9:7b:74:bd:41:c8:50:98:25:b1:b4:e3:c4:7a:
                    91:0d:0a:4e:df:8a:fb:09:9a:c7:84:e1:62:86:6c:
                    df:45:e1:ee:58:20:cb:2b:2c:19:1b:bb:0b:88:ad:
                    f1:22:81:4c:33:10:0b:2e:fc:60:17:f9:7c:6f:8b:
                    28:fe:0a:79:a3:6a:97:86:32:32:6d:5a:f3:fd:30:
                    0c:e1:c4:f4:11:ac:6a:7e:e9:24:0f:ac:04:8d:db:
                    05:42:b9:7c:f9:73:35:9f:85:8d:77:3b:a7:87:39:
                    f8:40:f5:13:59:fe:74:dd:88:0f:59:2a:f3:23:c1:
                    47:e1:12:9b:15:3d:c7:cf:59:0e:25:2f:24:07:29:
                    71:52:16:f0:98:2a:f6:ef:31:1f:7f:2a:f9:4a:1c:
                    91:73:40:dd:4f:33:89:19:6e:f3:d5:55:08:89:fd:
                    46:52:bf:a8:15:88:fc:c7:78:18:16:c5:f3:ea:70:
                    e9:fb:7c:a5:fa:61:3b:11:00:e6:6a:ba:a3:90:f6:
                    17:8a:b7:00:77:13:75:a5:c5:68:1e:4a:f4:98:21:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C7:AC:63:FF:25:58:C4:EE:2A:64:E7:12:B9:12:5C:D9:21:2E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c62f6b79-4447-3922-b7fc-9fe8724ecbb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.81.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:59:61:00:34:5d:16:dd:1f:da:b1:02:e5:98:8b:5b:4e:
         bd:e9:9f:4b:8e:f3:32:4f:b2:a0:d8:21:29:6b:77:2f:19:4c:
         36:4b:25:54:4b:e3:2e:13:14:9f:54:39:2b:b9:59:b3:7c:d6:
         97:9e:e6:f0:df:1b:81:e2:63:62:02:6f:c9:38:d9:be:b8:50:
         6c:ca:94:1e:83:99:8b:6b:05:1e:9a:2e:8f:08:a3:2b:bf:3f:
         3c:46:b6:99:e3:e4:d7:68:35:66:b9:a5:96:c7:46:2b:9c:05:
         77:14:11:04:dc:65:4f:23:ed:28:5c:aa:97:d8:e7:e2:e4:a8:
         ca:06:a7:06:0e:36:51:80:ea:ef:c6:a3:8a:1e:61:2b:74:0f:
         41:bf:06:d8:67:e5:dc:19:a7:95:0a:30:cf:13:6c:79:22:ed:
         3a:bb:94:57:3b:19:45:de:9b:44:2c:1c:0f:18:b2:a5:52:c9:
         57:cf:a4:52:cd:d3:94:ce:f9:ee:fd:ce:a0:99:c8:4e:de:81:
         04:70:6d:9e:b3:73:37:e8:58:72:55:c2:06:02:39:6d:f7:00:
         d6:0b:0f:45:e3:d8:a0:18:40:67:cd:5d:58:63:47:06:14:36:
         4a:16:75:64:7a:79:7b:bb:de:3d:a7:c0:1b:2f:29:d5:5e:7b:
         8a:b7:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:07 2025 by rpki-client