Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c7fc9b3c-e252-30c4-b0a5-dfa1822c3663.roa
File:                     c7fc9b3c-e252-30c4-b0a5-dfa1822c3663.roa (raw, json)
Hash identifier:          ngOl9XyYvIkoVp4W1ciLn0bQRVtfH9jOvCFmT/aqdJo=
Subject key identifier:   97:B3:5A:54:18:AD:67:2A:58:5F:6E:D4:10:59:80:80:B4:A0:BC:E0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BDAB7480648293FCB9FE3
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c7fc9b3c-e252-30c4-b0a5-dfa1822c3663.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.72.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:da:b7:48:06:48:29:3f:cb:9f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=4a3b485d-d78c-451f-bbb6-54ea173c7318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:63:cf:72:57:6f:9f:f5:91:96:af:52:e8:
                    d6:a5:d1:db:43:58:ca:09:32:02:7f:5b:32:c7:d0:
                    5a:8e:f3:7b:da:fb:d4:d3:cc:2a:dd:6f:cc:ec:c1:
                    a8:48:21:1c:ea:8e:c9:56:02:5c:d5:7f:76:37:f3:
                    a0:cf:dd:2f:34:96:f3:d1:4d:9c:67:b9:d1:a8:38:
                    e4:9d:c2:5b:00:6a:14:a4:bf:31:65:74:2e:b7:9d:
                    72:56:e3:24:13:c8:8b:a9:9c:ce:93:5b:bb:b4:ca:
                    04:5b:ea:05:1a:18:22:bc:fe:1d:17:f8:1c:45:bd:
                    91:67:54:38:cd:7d:26:70:e2:7f:ab:dc:23:7f:00:
                    ea:6c:c3:76:26:4d:89:db:f2:89:d8:2e:7d:dc:b0:
                    09:80:b8:20:c2:66:29:5c:14:d9:17:60:ab:0c:30:
                    11:78:b0:09:e9:ba:95:e9:1e:92:75:f5:4d:e0:00:
                    60:11:dd:7c:34:f1:30:cb:e4:07:d8:9a:c1:9e:9a:
                    88:94:48:f0:89:2a:f7:c2:da:ab:65:66:f5:4c:05:
                    1e:6f:d3:6d:90:74:87:5d:3b:80:6f:31:ff:41:b2:
                    80:22:0d:a2:a2:90:0e:fc:c1:19:10:8d:cb:e8:b0:
                    fb:c1:aa:f0:c3:1e:c6:b9:b6:d4:40:a6:7b:f9:f6:
                    ba:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B3:5A:54:18:AD:67:2A:58:5F:6E:D4:10:59:80:80:B4:A0:BC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c7fc9b3c-e252-30c4-b0a5-dfa1822c3663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.72.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6b:5f:23:b9:2c:2c:b8:8b:e8:62:2e:c8:1d:9c:31:9a:98:
         32:14:af:71:39:13:eb:f2:ae:8a:92:05:4d:f6:5a:24:17:e0:
         b0:cb:ee:1d:31:e5:3d:95:b4:4e:1b:8a:80:e3:a0:74:33:f1:
         e3:b4:94:a1:1e:cc:bc:2c:ce:25:69:6d:bd:9d:2b:1e:45:0b:
         2b:41:e4:7b:a8:a1:a3:23:b3:7b:ec:51:b1:6e:7e:78:62:3a:
         ef:df:d9:2e:28:70:ff:c9:82:45:a6:7e:f8:21:3a:9e:79:62:
         f3:a3:1d:3c:19:dc:4d:1d:1e:f2:88:20:37:c2:2f:f3:f5:d3:
         2e:31:12:67:fa:08:0e:96:9e:69:f5:8c:fb:42:2b:7f:ba:10:
         d7:64:4b:0a:a2:b2:be:17:5b:c7:1c:74:ce:4d:f2:35:9d:41:
         7c:a1:d0:b7:f3:39:af:77:4d:90:a9:3e:71:f4:b1:5a:75:48:
         a6:52:d6:69:4a:4e:e8:d9:80:60:4b:e9:30:96:1f:15:90:a5:
         cb:bf:8b:76:db:ee:bc:cd:07:b3:0c:c9:01:86:3b:b8:3e:c7:
         35:ce:fc:79:eb:58:e2:98:b2:38:f4:49:3a:7b:1b:ab:f4:61:
         b9:93:1f:33:e1:f4:4e:8e:8c:0e:0c:9a:72:a2:3d:d3:be:11:
         70:00:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:00:01 2025 by rpki-client