Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b56b88b-2eeb-368c-86ec-ae24bbf72d76.roa
File:                     0b56b88b-2eeb-368c-86ec-ae24bbf72d76.roa (raw, json)
Hash identifier:          W/eTRk5nYQkLycdnPF6YRmubwtbn7Jn68fVo8SAgRG0=
Subject key identifier:   9E:4E:98:E1:13:7B:2F:E2:8F:88:D7:CD:E2:7F:62:0C:F6:0E:7C:5F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84118E772FC3C91475505A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b56b88b-2eeb-368c-86ec-ae24bbf72d76.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        34.0.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:8e:77:2f:c3:c9:14:75:50:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=bee0a9df-7994-43dd-9841-acc19eed79a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:aa:45:90:bd:aa:59:cd:ff:a8:4e:47:c0:
                    40:56:e0:9f:1a:2b:af:a2:07:50:b8:57:ce:19:f6:
                    04:d7:e8:8f:de:3b:fe:bc:53:6a:f2:28:2f:46:75:
                    62:6d:3b:be:ed:6a:0b:81:5e:aa:6f:42:22:00:71:
                    53:19:83:b6:dc:3e:62:16:53:f2:15:e8:88:f0:70:
                    ac:4e:4b:30:4f:69:93:3c:fd:0d:d4:d8:8e:e1:16:
                    af:7a:ea:49:5e:fd:44:84:32:98:53:58:7d:4b:a0:
                    47:03:af:63:01:15:b7:9f:ed:b6:1e:15:bd:67:56:
                    a9:80:a7:cd:15:29:0e:ea:a8:80:55:fd:97:78:8f:
                    f0:9e:6a:98:18:fc:80:5e:da:5a:10:61:0e:18:04:
                    90:70:55:8f:00:e6:3d:bd:a1:3d:2e:28:8f:e7:b0:
                    5b:2e:70:b0:0c:8c:d6:9f:66:76:34:a4:38:17:81:
                    b4:ab:31:0c:ac:0f:96:d9:6f:2a:61:cc:0a:3f:74:
                    50:12:df:fa:83:d6:b2:90:18:01:bd:df:19:47:69:
                    77:15:f2:cb:41:fd:b7:a3:a7:88:3b:7c:89:03:3d:
                    11:08:87:6e:93:ab:0a:b8:c2:8f:a4:ab:ee:43:1c:
                    da:bf:91:3c:7c:02:49:dd:1e:64:b1:13:c3:14:3f:
                    c1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4E:98:E1:13:7B:2F:E2:8F:88:D7:CD:E2:7F:62:0C:F6:0E:7C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b56b88b-2eeb-368c-86ec-ae24bbf72d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e7:ef:ba:97:0f:66:b3:87:76:f6:3b:f5:65:fd:3f:0b:81:
         9e:bc:2d:bb:11:85:8e:71:be:e8:6f:e0:18:d8:23:34:b5:33:
         7a:78:c9:a5:50:65:9a:64:ac:b2:70:33:79:ee:45:38:08:67:
         63:b3:96:e4:43:f1:f8:7d:fe:f5:0e:e0:9b:96:2a:d2:ff:59:
         da:bc:50:1f:af:29:2b:ea:e8:dd:7b:d4:b2:5d:9f:99:ed:e3:
         d6:de:2b:a6:59:e9:07:a7:dd:e6:06:43:2a:f9:8d:bf:ae:0f:
         b9:d6:53:ba:dc:e9:40:ab:7f:e3:ae:ce:01:14:c7:ce:1a:36:
         11:44:41:ee:1a:6e:c8:15:a0:b1:28:1e:36:0a:6b:a9:aa:16:
         1b:90:95:36:c4:7a:ae:1d:c7:a8:1f:bd:33:02:bb:1e:b4:58:
         fc:c5:cb:51:4b:04:6c:45:c6:e5:73:86:dd:0b:cf:30:85:23:
         d8:51:ad:b0:e4:43:33:7c:41:f1:fd:68:90:fe:10:b0:05:66:
         bf:26:cf:08:fb:5b:d1:df:82:44:0f:f8:26:bf:e5:bf:39:77:
         5a:6e:35:52:2a:85:69:7e:e2:ee:fe:72:ff:54:3d:a2:05:de:
         8e:02:0c:2c:37:6a:45:83:ab:42:cc:50:0f:98:7f:19:53:e1:
         41:54:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:38:13 2025 by rpki-client