Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00e16563-682a-39b2-b564-cf0d135ab768.roa
File:                     00e16563-682a-39b2-b564-cf0d135ab768.roa (raw, json)
Hash identifier:          xCfC7dPEgwQ5ay1d6vNuOvay6yptpA4ssFUleU821Ck=
Subject key identifier:   93:D3:CD:66:43:94:77:74:EA:C0:BB:DA:1A:FB:C6:AB:A7:A1:69:47
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84122E396F1DB0ADBFFB5300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00e16563-682a-39b2-b564-cf0d135ab768.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        34.0.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:2e:39:6f:1d:b0:ad:bf:fb:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=402da04d-6bf5-4b70-ac01-dc4ebf15aceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cc:8a:44:02:d2:08:cc:89:be:e5:86:f8:5f:
                    ef:fb:38:c1:66:a1:95:eb:68:b3:b7:18:0b:17:a4:
                    85:58:7a:e7:e4:36:c4:e7:04:7f:c7:03:ef:ea:b2:
                    e4:95:36:ff:73:5c:af:f1:11:44:b4:ca:93:0d:7d:
                    f8:d6:97:27:17:69:e8:e3:e7:f7:5f:39:fc:65:08:
                    21:d0:42:2d:ae:59:19:c3:72:6f:7f:b6:a3:8d:b9:
                    43:7e:1c:20:5b:55:cb:0a:09:fc:46:fa:05:2a:08:
                    dc:4f:fb:67:a6:c2:b0:ef:d0:25:56:07:31:3a:7c:
                    b1:4a:68:49:8f:8d:cf:6e:e5:65:9e:d7:91:55:32:
                    23:78:cb:c2:86:36:d5:4d:9d:04:bc:e1:d3:fe:7b:
                    3f:55:05:3f:b2:99:de:08:3d:6a:f6:66:67:b6:9a:
                    c0:58:de:e9:84:8e:d1:ee:9b:45:46:0c:35:b0:91:
                    6d:b6:5a:1f:61:e5:53:b1:aa:32:42:2e:dc:30:9b:
                    39:bb:ad:d0:d4:97:c2:06:17:e3:0f:f4:aa:98:1a:
                    c4:01:49:c0:b1:3e:e7:d6:57:8d:b4:79:cc:68:ae:
                    3d:4a:b9:30:cc:98:a0:80:17:37:a8:44:2c:0c:a6:
                    d4:6f:6a:48:b4:07:f5:f5:fb:4e:a8:c4:0a:4a:6d:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D3:CD:66:43:94:77:74:EA:C0:BB:DA:1A:FB:C6:AB:A7:A1:69:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00e16563-682a-39b2-b564-cf0d135ab768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0d:cb:96:3a:1f:dc:4e:72:de:82:f3:8a:a7:12:23:89:ce:
         32:72:30:01:ae:5c:07:ea:91:e3:3f:40:bf:43:6e:ca:d2:2a:
         c0:81:fd:18:71:d1:1d:7e:c0:d9:4a:3e:a8:d6:fc:11:eb:ee:
         de:1b:ff:ab:86:0a:37:b5:cd:ba:70:a7:c6:0f:74:14:5b:ff:
         5b:b6:c9:1f:ad:26:17:90:9a:6b:51:28:26:9f:f4:ef:29:fd:
         b5:c9:2e:a5:4d:ef:53:39:f1:c6:87:cb:21:39:34:a3:b4:d3:
         c0:8d:e2:ad:3a:72:d4:70:52:e0:ae:85:6f:ee:3c:fb:2f:2d:
         d1:23:f5:9d:86:23:2c:77:3b:b8:a0:da:0d:ab:ca:e4:90:f3:
         32:69:4c:72:e2:a6:9b:91:60:4c:97:03:b6:48:26:65:73:58:
         3e:a4:d2:db:4f:5c:b7:ac:d6:94:22:b3:f0:25:8f:93:53:5c:
         33:47:a7:56:dc:d3:bb:c9:cf:70:39:a2:f9:0b:f9:8c:c8:47:
         94:c1:30:2d:ce:bb:e6:97:e1:cb:2e:b5:9a:a8:a3:d5:db:0b:
         ff:68:fb:95:7c:f5:dc:6c:db:55:2b:76:d8:3a:ac:90:8d:c3:
         cc:a6:49:0c:05:cb:6f:73:c0:60:e6:3a:c9:96:b3:af:2f:74:
         8d:ca:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:25:50 2025 by rpki-client