Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfebcbdf-d4e0-3652-832c-311510c65ca3.roa
File:                     dfebcbdf-d4e0-3652-832c-311510c65ca3.roa (raw, json)
Hash identifier:          p+Gv6yoVtwXy27efBONOm2W/Y+L1WXKNyb1ZtOctBoc=
Subject key identifier:   73:84:A9:59:9C:06:AD:5C:B6:A9:24:15:C1:BC:22:F1:72:4D:E6:47
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BD39B7C3CF99601831300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfebcbdf-d4e0-3652-832c-311510c65ca3.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.140.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:d3:9b:7c:3c:f9:96:01:83:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=019dc1d4-a490-46ca-a26f-1f42dcf9d967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:ec:3a:d2:65:91:78:ec:f9:a0:43:7b:75:
                    31:6a:00:eb:90:e5:87:16:87:0b:f8:65:c6:83:73:
                    b6:78:28:e4:c8:73:ed:64:70:cb:ba:52:4f:48:b9:
                    12:d4:82:92:25:de:d1:98:af:fe:92:2f:ef:e4:0d:
                    89:4f:3a:4a:6f:29:8d:f2:d8:e8:64:61:2d:df:c3:
                    34:00:de:77:1e:d7:f6:f2:f1:cb:80:5e:c2:a7:2b:
                    ca:7e:ff:9a:54:2c:b9:2b:77:90:37:b4:f6:a4:42:
                    06:9d:7d:d6:cf:05:e5:92:9b:ee:7b:cc:9c:6d:d4:
                    c1:4c:8b:a6:c5:ab:3e:72:dd:a6:54:5a:86:e1:c0:
                    36:80:0e:aa:19:12:4c:70:fe:93:65:d4:93:d1:94:
                    8f:3a:af:1c:81:78:47:7c:8f:da:b2:f4:5b:6c:50:
                    e2:4b:97:0e:27:46:3c:17:71:80:e3:b0:98:d8:f4:
                    7c:9c:bf:85:dd:55:88:e9:4c:00:5b:06:bd:99:a9:
                    d7:94:69:42:1c:52:da:d9:f6:b1:87:e4:3b:55:e8:
                    c8:be:66:50:c5:2e:4a:63:95:1a:ea:7e:ff:bf:78:
                    83:6f:36:94:be:48:4f:c6:f9:19:93:51:ff:8f:ff:
                    e2:7b:a7:aa:15:74:bd:67:ce:83:2b:8d:cf:1d:df:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:84:A9:59:9C:06:AD:5C:B6:A9:24:15:C1:BC:22:F1:72:4D:E6:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfebcbdf-d4e0-3652-832c-311510c65ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:03:43:b2:7b:86:c4:f0:79:a3:52:89:f3:a4:6e:68:fd:06:
         45:23:c7:c7:be:9a:b8:1d:79:1c:4a:4a:4d:26:33:5a:0f:08:
         89:0b:6e:6b:1c:fc:02:21:e1:71:0f:4b:3d:43:77:bb:b8:12:
         f8:df:97:0f:37:e7:d5:34:ca:a9:92:32:19:d3:22:c0:a8:8b:
         39:ea:f9:e4:aa:60:8c:55:b2:1d:d4:91:76:f1:cb:b2:b7:45:
         37:cb:51:2a:57:6d:5b:39:96:61:7b:d8:00:11:f6:97:13:6b:
         de:00:ea:db:16:b4:f7:43:d8:a9:96:45:e7:44:e4:73:0a:54:
         f1:3f:30:05:f9:3e:93:6d:63:53:36:ce:83:a3:40:fb:8a:2c:
         0c:b8:d6:f5:2a:68:45:aa:e3:99:c0:05:6c:04:85:d0:35:37:
         ff:a9:cd:94:75:aa:ab:37:f7:e1:b5:ae:a4:aa:5f:09:b6:30:
         b3:59:15:03:18:81:70:f9:16:e8:bf:a4:46:26:25:c0:6d:99:
         97:f7:30:74:bc:97:f8:9c:35:c9:20:54:ed:35:76:ea:52:12:
         4c:7b:a1:8c:b8:04:12:3e:94:ed:14:07:a8:4f:7f:83:4e:ca:
         a2:26:aa:bb:01:55:d3:d2:a3:85:60:78:a5:c8:a6:8c:2a:ca:
         f5:ce:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:00 2025 by rpki-client