Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06c90afd-82de-3961-bcf1-c111f62d6740.roa
File:                     06c90afd-82de-3961-bcf1-c111f62d6740.roa (raw, json)
Hash identifier:          enDtthjr5zdeRBxlDYru0yikih7pt+crdXAy4e43rJY=
Subject key identifier:   DD:C0:CB:C2:86:95:7C:85:F4:F3:5C:C4:EB:91:B8:B0:10:69:70:DE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A92062FE2935B372EFE604C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06c90afd-82de-3961-bcf1-c111f62d6740.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.187.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:2f:e2:93:5b:37:2e:fe:60:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=347f90ad-f095-4f31-9785-8723d10e3e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:14:f5:74:f5:f2:a9:69:74:94:c6:74:83:
                    81:82:5f:56:56:d1:5d:05:ae:fd:46:4f:4c:b1:d5:
                    6a:8a:07:46:71:7f:16:ef:30:cd:7b:ba:3a:1f:5a:
                    c3:77:5d:16:7e:c6:71:9b:ca:85:8b:87:1d:4b:41:
                    02:9d:6a:78:06:dc:b6:fc:c5:9e:21:f9:52:9d:ed:
                    35:ba:31:29:9e:fa:88:27:ce:ea:7d:ea:74:21:1b:
                    47:da:d5:ea:f9:12:d3:5c:1c:61:6c:47:90:bc:75:
                    3e:af:e2:2c:dd:1f:31:7b:4d:71:ee:9e:89:05:67:
                    d7:2d:31:04:12:d0:ed:30:41:b6:4a:da:a5:31:cb:
                    21:60:a7:03:dd:64:a8:ec:cb:aa:9a:62:bc:16:66:
                    3e:f1:1c:44:ee:49:ab:60:79:ed:8b:f0:ad:35:fc:
                    40:05:2f:e2:23:92:74:de:cd:08:12:b4:2d:a6:14:
                    c8:63:d2:dc:45:8f:da:82:68:d6:c8:3d:aa:95:69:
                    e0:de:63:92:26:0c:e6:4a:4d:ac:5b:d8:ae:3c:41:
                    d6:7f:5a:2e:11:ad:c5:26:69:10:be:02:a3:df:2b:
                    77:a8:aa:59:20:27:a2:f5:aa:52:9b:13:7b:d7:13:
                    e1:c9:dc:bc:6e:49:d9:ad:83:20:59:6d:31:0e:8c:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C0:CB:C2:86:95:7C:85:F4:F3:5C:C4:EB:91:B8:B0:10:69:70:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06c90afd-82de-3961-bcf1-c111f62d6740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.187.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:70:cb:c8:27:03:72:09:10:e0:9d:1e:c3:47:c3:e5:da:
         75:0a:34:9a:31:f9:4d:c6:1f:38:a7:d0:78:a3:68:fe:9f:74:
         9f:17:3a:46:62:34:20:54:52:2f:e3:77:36:f3:e6:ef:d9:78:
         5d:6f:44:bb:95:b2:e3:db:97:d3:0d:b7:ff:eb:d5:c9:21:f6:
         15:b3:c9:82:c9:e6:af:48:d3:75:cb:0a:48:c1:ff:78:21:5d:
         59:6f:26:4a:6f:1a:c6:ae:66:5f:f6:58:20:84:6c:82:af:d3:
         27:4f:df:48:80:e6:3d:aa:b3:13:0b:0b:e4:29:06:10:e3:8e:
         90:a0:5b:ee:d0:0e:30:df:18:c5:48:89:ca:9d:d0:32:ef:f1:
         0f:1a:da:88:a6:0d:f6:f2:e3:84:99:2d:d1:07:de:2e:fd:83:
         43:d2:1f:71:4f:81:f7:db:9f:13:22:24:b7:95:d1:b3:1c:18:
         ba:3b:59:ea:82:78:3a:ad:b9:3c:55:bd:d1:2c:da:39:11:48:
         11:69:e9:42:03:c1:fa:84:dc:e2:b9:4b:f7:64:6e:73:c2:74:
         65:95:71:de:ad:31:77:15:c3:9f:ed:20:42:29:f3:b6:31:92:
         cc:2d:1a:9d:e4:dc:f0:8f:fe:5c:fd:05:5c:4f:d3:ad:d3:7a:
         07:39:85:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:34:00 2025 by rpki-client