Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f609f4cb-6f85-39c9-927c-93735070865e.roa
File:                     f609f4cb-6f85-39c9-927c-93735070865e.roa (raw, json)
Hash identifier:          gO/ptBspx8Em9UCTXWMjLNXE6K9gvKWDNtfQ2W+LO0s=
Subject key identifier:   88:31:8B:A1:4E:63:84:33:15:7B:E6:5C:76:0D:42:B0:5C:4D:24:A7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C5822E45D23BC7E6E0A60200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f609f4cb-6f85-39c9-927c-93735070865e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        34.105.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:2e:45:d2:3b:c7:e6:e0:a6:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=325f3c36-f33f-4d67-99c1-f128c31b774b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:85:cd:98:cd:bd:e2:34:05:f3:9a:00:3b:
                    e6:ca:63:dd:a5:08:78:48:f5:0c:0b:52:7a:7d:a6:
                    80:b8:a9:c1:6f:8c:99:dd:d8:40:62:e9:c3:94:6e:
                    03:54:e7:88:d6:e5:6a:72:0a:c5:05:d4:5c:64:ad:
                    95:5b:c0:bf:ee:48:4b:26:92:a4:8f:cc:e9:08:00:
                    95:6e:d7:22:77:88:0e:36:9f:21:b1:2f:8c:2f:9b:
                    72:ec:cd:ff:a1:2f:8c:d0:65:08:fc:50:9e:f5:51:
                    c8:d9:89:25:74:95:1c:66:1e:69:c6:15:50:c9:75:
                    50:14:21:c0:e0:3b:92:11:42:ab:20:ba:07:b7:8f:
                    46:a3:33:d9:48:8e:1d:02:e6:15:84:b7:9f:f5:93:
                    e5:9d:30:fc:77:48:41:d2:d8:24:60:6f:9c:91:ee:
                    fe:00:4c:24:23:8b:b1:51:e2:f4:8a:04:fa:8f:91:
                    72:01:a2:8c:8c:8e:38:12:8b:5e:3a:e7:da:17:94:
                    44:84:af:42:75:b1:12:ed:80:1f:e8:54:c6:ce:5d:
                    76:e2:0a:fc:27:01:03:82:5f:4c:de:e2:03:df:1e:
                    98:44:74:26:9a:ca:be:89:f6:be:cf:66:f2:fb:f6:
                    02:58:a1:d8:a9:d9:2a:84:a0:55:58:4e:66:b5:e8:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:31:8B:A1:4E:63:84:33:15:7B:E6:5C:76:0D:42:B0:5C:4D:24:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f609f4cb-6f85-39c9-927c-93735070865e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.105.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:4f:9a:5b:e7:95:65:8d:95:3c:08:bb:4c:5d:2a:88:ab:
         19:84:d4:1f:25:69:d9:8d:ad:7f:8f:98:0f:f2:54:a8:db:75:
         81:a2:ea:3c:73:70:e5:86:28:3f:b9:1b:0c:c9:e4:93:c5:8e:
         2b:f1:a2:32:53:f6:ea:a8:60:77:40:02:81:e6:08:01:c1:e1:
         86:4b:8c:6c:bc:ea:cf:bc:aa:23:34:c7:a9:2f:d2:89:cc:c9:
         4d:9b:97:64:b8:ad:8d:1e:c2:f6:be:2c:e3:d8:a7:3d:5a:ee:
         c9:ec:75:f0:eb:1e:e8:0e:09:b3:e0:21:8d:27:96:18:59:67:
         73:f1:ce:d8:77:43:20:04:d8:aa:d3:54:6a:5a:11:2a:dd:ac:
         7d:12:bd:b1:43:c0:51:9e:a9:ec:97:af:56:ee:05:94:4a:f1:
         0f:3e:dd:b1:8f:e2:42:6f:7c:bc:51:c0:f1:d6:28:1c:b1:97:
         fe:a9:b1:6b:f2:29:fc:53:d6:52:87:54:c2:ca:34:4f:cc:0c:
         c7:ad:e0:d6:9c:82:23:7f:d8:91:16:b6:a3:ff:f5:58:e1:d5:
         42:05:1d:e2:00:00:b9:09:00:06:fd:d7:9b:02:6c:f9:4b:ed:
         77:87:9e:0c:4e:72:17:20:4e:5d:08:a8:c3:a7:cf:d9:cf:cb:
         93:c7:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:54 2025 by rpki-client