Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6e4e1b3-aedd-347d-b937-de93190561f3.roa
File:                     e6e4e1b3-aedd-347d-b937-de93190561f3.roa (raw, json)
Hash identifier:          QvK4koG5tXhzQpY03z01kIuWw4YkKUaeSD0Ztz8PE5E=
Subject key identifier:   4C:E1:F2:3C:1F:63:C8:00:34:5B:DF:D9:88:F2:EE:CD:7D:A7:42:21
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BEC5A72F17D35F6C44260
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6e4e1b3-aedd-347d-b937-de93190561f3.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.74.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:ec:5a:72:f1:7d:35:f6:c4:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=e64e5fa5-1c85-433c-a093-194a7f2e8caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:65:01:76:f5:16:eb:55:c0:de:28:d9:22:
                    53:96:80:db:34:3d:0c:1b:39:41:dd:97:b2:a0:95:
                    e9:f5:db:fa:34:04:1a:74:c4:c3:37:87:5b:72:f9:
                    53:5c:b9:86:77:e2:75:a8:4b:eb:69:47:92:ad:aa:
                    ca:7f:aa:9a:32:7a:73:2c:d6:3a:db:5e:e2:63:da:
                    8d:46:01:ee:eb:a8:ca:7b:a8:c4:50:d0:58:61:45:
                    b7:2e:e8:e6:73:c2:d1:6c:e6:fd:bf:0c:33:4f:fc:
                    3b:14:92:fd:8c:93:c0:0b:b6:fb:bd:94:e5:53:89:
                    e4:e7:3d:e1:ca:c7:0a:e7:99:80:35:be:aa:03:b6:
                    4f:67:2e:47:43:27:25:7e:62:f0:f4:c1:07:e3:9d:
                    49:32:dd:a9:6e:7a:e1:2a:be:e5:7a:73:1f:22:59:
                    22:81:5d:71:83:55:f6:6b:36:8b:05:ef:b6:be:82:
                    e8:85:d4:16:e1:a3:da:3e:f1:22:3a:af:e0:e4:b5:
                    ef:9a:f4:1b:74:aa:b1:37:8b:ad:6d:33:bc:82:22:
                    23:89:3b:96:0e:d8:15:c3:71:33:34:25:0e:df:bc:
                    fc:8b:00:9f:17:98:72:7a:ed:dd:7d:47:22:a9:ef:
                    7f:b4:3b:84:86:d3:f6:89:3b:79:1c:f5:89:92:0c:
                    22:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E1:F2:3C:1F:63:C8:00:34:5B:DF:D9:88:F2:EE:CD:7D:A7:42:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6e4e1b3-aedd-347d-b937-de93190561f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.74.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:5e:ff:a1:a6:59:8e:dd:c5:5c:1e:d9:ac:95:84:10:28:
         26:5f:39:2e:09:f6:29:a4:3a:0c:40:02:8e:a3:20:7f:4e:e3:
         7f:1f:86:86:10:2c:d1:a2:53:97:1c:29:8e:49:db:28:0c:49:
         41:d0:ba:c4:76:a6:29:f1:de:83:c7:0c:9e:7f:07:63:6f:b1:
         cb:0d:78:af:fb:cb:cc:6f:3b:43:05:06:ab:8b:2c:a6:d0:3a:
         7d:23:ff:ce:97:bb:83:a9:69:68:3d:73:06:7f:78:2d:99:08:
         1e:55:8c:e1:ba:ad:dd:9f:52:fe:29:23:d7:44:fe:cf:76:5e:
         71:0d:02:d8:16:85:8a:25:2c:b2:39:5d:2e:72:c1:07:ae:99:
         86:ae:2e:a4:59:78:42:fc:92:22:58:c2:3f:e1:f5:16:3a:b1:
         a7:b5:35:2d:92:ce:da:14:b7:dc:dc:75:20:ae:97:11:fa:00:
         97:31:83:50:b1:2c:8d:5e:6d:19:d0:0c:12:78:3a:94:7f:3d:
         c6:23:82:a0:85:00:63:55:e6:91:cd:c3:b6:0c:03:19:78:f4:
         75:72:9c:1f:fe:c0:b4:1e:97:07:08:7e:e5:4f:1d:c6:3a:3e:
         ef:4e:da:c9:4e:be:98:0f:6c:ce:31:90:f4:70:96:7d:85:5d:
         f0:f0:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:42 2025 by rpki-client