Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8de45ec-ac0e-3cc5-a1ec-eea2b48a9c84.roa
File:                     f8de45ec-ac0e-3cc5-a1ec-eea2b48a9c84.roa (raw, json)
Hash identifier:          d+wdZecxr1HUZv8gW7DqQQTVBVY0aghBdzCaLQ1QnLw=
Subject key identifier:   8E:C7:30:27:BB:A8:E2:53:15:42:3F:B4:D0:9C:E8:33:EE:2B:E9:A8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C043E795D8B1E6B3D9F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8de45ec-ac0e-3cc5-a1ec-eea2b48a9c84.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        34.175.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:04:3e:79:5d:8b:1e:6b:3d:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=a8cae6b6-13f2-4012-9096-a7a13e0401bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:ce:11:8a:91:13:b7:b8:8c:5c:3e:ff:df:
                    bb:ff:54:40:90:01:51:51:69:df:98:cb:23:31:26:
                    91:8b:90:2e:6b:fc:f8:43:19:12:79:ba:1b:33:ee:
                    82:32:69:36:e7:25:bb:bb:31:d2:47:8e:48:c5:a6:
                    ff:3e:4b:d6:23:ff:eb:10:e3:12:75:23:2c:9a:c8:
                    aa:54:73:4d:c2:5d:66:12:f2:a2:88:2b:3d:dc:43:
                    f0:98:11:05:71:83:02:d5:e0:96:3c:c8:7b:50:e3:
                    ba:6f:d4:f3:70:e7:d1:b7:37:6c:74:ba:fe:21:10:
                    e8:bb:88:93:fa:d2:52:9b:f7:b4:b6:db:2a:56:b2:
                    7c:08:ac:01:23:e2:32:05:8e:cb:57:5e:3f:70:3a:
                    11:29:1a:fa:5e:a5:13:cd:12:0b:31:2c:67:83:7b:
                    a1:c6:79:9e:6e:de:64:36:39:58:9c:d6:68:66:e9:
                    11:72:b7:aa:65:76:96:b1:82:cb:41:2c:59:77:e3:
                    df:03:1c:b8:fa:08:7c:d6:12:db:72:d0:62:5b:1b:
                    85:44:bc:6a:6a:35:d7:6c:fa:d6:5a:cb:9e:93:82:
                    28:a5:1f:4e:4a:58:87:22:06:0b:57:a3:e8:7e:67:
                    8f:03:40:0b:62:38:b5:23:95:6b:18:cc:22:32:c1:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C7:30:27:BB:A8:E2:53:15:42:3F:B4:D0:9C:E8:33:EE:2B:E9:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8de45ec-ac0e-3cc5-a1ec-eea2b48a9c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:de:d5:f9:f8:78:e1:42:fd:cb:cf:ef:85:3b:ba:71:e4:1a:
         68:96:80:c1:9f:db:d1:94:0d:25:c7:d2:ad:58:d4:61:83:32:
         ce:67:4a:cd:b6:c3:b4:e0:c5:60:8e:6b:fe:da:8d:13:72:5c:
         7b:03:d3:37:4b:2d:ab:8e:05:77:fe:b5:b6:b2:fd:47:db:13:
         df:8b:e8:ca:53:e1:1d:7f:a3:1a:e4:49:66:fe:ca:9f:b2:0c:
         b5:85:2e:11:cd:b3:66:44:59:98:fe:a8:92:f7:7e:6a:21:dc:
         57:d6:28:09:fe:23:24:c0:50:05:44:fd:9b:d1:6c:e3:21:3c:
         2f:a5:3e:94:eb:f7:7c:c5:99:41:e3:1a:93:22:f1:3b:09:19:
         28:3f:73:54:3d:d0:4a:c1:75:c1:35:1a:28:94:fb:4e:a8:fa:
         a2:21:ff:f1:c9:64:03:ae:0c:b0:76:7c:ac:6d:c0:0d:83:a3:
         5e:03:ec:47:86:47:32:d7:88:a6:17:3e:e3:34:40:cc:db:a7:
         02:c3:df:8b:02:ce:22:98:a7:ce:fa:3f:93:50:9f:68:67:2c:
         ac:37:ef:38:6b:b7:08:20:08:c2:ec:12:b6:cc:22:dc:fe:57:
         01:69:80:2b:f5:fb:f9:d5:6a:ad:47:f1:22:1e:f1:c9:af:87:
         e3:a9:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:34:29 2025 by rpki-client