Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e26aa935-6e50-343c-8cad-0b125ddf422a.roa
File:                     e26aa935-6e50-343c-8cad-0b125ddf422a.roa (raw, json)
Hash identifier:          e/Gq5mkBI8N+o8wmd4uVmLt/GYhr0E+qoeSf9+PJghM=
Subject key identifier:   00:E0:17:01:19:DF:15:47:62:BE:4D:A0:E1:26:A3:C5:0E:EA:07:FB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C58177798136450DC28D4180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e26aa935-6e50-343c-8cad-0b125ddf422a.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     19527
IP address blocks:        34.1.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:77:79:81:36:45:0d:c2:8d:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=48846ffd-acb5-47b7-b9fb-79d9c96cfea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:73:31:b2:c3:23:74:5a:93:3f:2a:65:0b:
                    59:45:92:a1:65:6f:1d:7f:18:a6:80:78:23:be:83:
                    cc:ad:d1:3e:35:d7:0a:64:1f:bd:19:3b:8d:71:5f:
                    87:2a:c2:6b:8f:e8:85:7d:db:3a:a0:80:53:39:be:
                    43:1b:a2:db:e9:de:59:72:d3:78:4a:15:2c:84:17:
                    24:48:c1:c5:98:05:10:05:40:fb:d4:a4:71:9a:7c:
                    3a:f3:63:d7:1b:79:a7:22:d7:29:e6:21:45:38:4d:
                    3f:b1:be:ab:70:48:67:85:a2:30:5d:e3:b7:bb:4b:
                    37:54:56:a6:58:1b:fd:a8:c8:87:2c:c4:c6:94:42:
                    7d:f3:82:ce:2c:26:73:8d:38:29:ac:5f:72:24:2c:
                    cf:47:a8:c4:a5:13:ec:82:76:4c:85:3c:bf:bb:15:
                    b5:41:4a:fa:5a:c8:54:33:3f:ba:5e:5b:d9:0c:a0:
                    a0:e8:f6:ef:f5:d9:fa:9d:b9:bc:81:70:86:ae:13:
                    c1:30:4b:27:e8:35:13:45:7a:fb:ff:9b:cc:e1:0e:
                    ef:cd:e2:9c:44:17:c0:a5:85:5b:1d:01:76:dd:f7:
                    1f:42:7e:2a:73:51:99:14:54:32:09:14:8c:70:40:
                    ed:3f:9b:df:a0:0b:4c:27:68:36:f6:27:40:ab:3e:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E0:17:01:19:DF:15:47:62:BE:4D:A0:E1:26:A3:C5:0E:EA:07:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e26aa935-6e50-343c-8cad-0b125ddf422a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:c8:27:7a:f5:2f:e8:d9:c4:a5:c3:07:05:ab:db:4d:d9:
         02:28:1c:aa:27:27:7d:15:a5:7e:35:e2:4c:e5:e5:28:a4:1d:
         d5:65:55:96:b5:15:be:76:13:d5:df:5a:8a:9d:25:ab:88:45:
         39:0e:33:21:e7:81:5b:bb:bc:f0:12:a0:0b:34:ca:f5:d4:74:
         13:41:50:f5:b2:05:22:9c:91:7b:39:04:75:6a:82:55:61:b5:
         12:36:8b:27:8b:fd:d0:37:1d:2b:c0:94:1f:83:34:c3:c5:8c:
         cf:c3:a9:76:39:3f:6b:0f:e8:8b:b4:14:53:d9:85:8a:40:d0:
         b3:7d:ab:09:66:55:de:30:be:4e:2e:52:fc:8b:b5:35:ac:55:
         f5:56:7d:67:1b:d9:2f:96:bd:e3:a1:66:a4:d1:b0:77:de:d7:
         4a:ce:65:ca:73:0b:1e:3c:04:dd:05:ef:87:62:b8:f8:e8:0d:
         43:2d:7c:35:b1:1f:3e:45:4c:60:11:d9:1d:61:85:50:45:10:
         ad:65:25:a7:5c:ba:e3:19:1e:31:cd:51:b8:73:9f:7d:46:02:
         13:b5:81:0e:a6:92:f7:f4:e0:79:41:b9:76:31:83:ba:ae:94:
         98:42:9a:d8:db:29:a1:95:f8:c6:d5:da:55:e4:ff:ae:02:38:
         9a:39:34:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:00:47 2025 by rpki-client