Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/125f4f80-f86a-3ab8-9cf9-5fd113dc841f.roa
File:                     125f4f80-f86a-3ab8-9cf9-5fd113dc841f.roa (raw, json)
Hash identifier:          /0oW7VI3JHDYXauH6EtA+Sig3LZcbUt/7pt49mNXv7I=
Subject key identifier:   9A:1C:F3:D2:BF:62:2B:EF:8C:02:52:98:B7:C4:F5:B0:74:F1:80:D1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB89B5E26556E2987BFA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/125f4f80-f86a-3ab8-9cf9-5fd113dc841f.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.74.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:89:b5:e2:65:56:e2:98:7b:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=da2bb6fd-3acf-493a-87db-dac24a8cd21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:db:28:25:bf:73:57:e8:36:ba:22:fe:7d:
                    c7:09:b7:f4:b3:e6:e1:0e:e2:92:d6:82:f3:ef:d6:
                    17:6f:f8:53:3b:17:1f:80:15:b4:cc:c6:8a:22:77:
                    64:ee:1b:61:45:3d:4b:fc:48:50:bc:8c:cd:69:0c:
                    e5:5d:37:33:95:55:c6:6f:93:a0:77:2e:9a:2d:5f:
                    74:44:2a:d7:77:b6:c1:4a:a2:d3:9f:de:0d:45:79:
                    7e:eb:00:f1:8b:7d:33:55:af:35:9a:9e:8d:33:b2:
                    75:71:36:4d:f1:12:5e:03:0b:29:9d:1b:f5:3f:93:
                    3b:5a:55:81:14:a0:45:4f:51:5b:7e:8e:36:77:67:
                    95:ce:66:45:b3:b4:09:09:9b:b1:bc:02:97:ba:35:
                    44:d9:11:83:89:c5:55:52:58:23:6a:04:69:70:97:
                    95:fa:20:bd:c2:83:46:af:a9:de:d4:33:da:a3:9d:
                    28:9a:70:83:96:1b:33:b1:02:35:85:3c:ed:9a:cf:
                    93:75:43:1e:3a:0e:fb:2a:ae:5d:a9:ea:2e:0d:ea:
                    b6:05:cb:81:e3:17:be:17:c2:f3:6b:76:50:da:5a:
                    d8:e3:2a:6a:87:26:e7:99:54:98:bd:57:c4:2c:d4:
                    0f:14:90:fa:17:a3:f1:f6:05:cf:13:79:db:7b:85:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1C:F3:D2:BF:62:2B:EF:8C:02:52:98:B7:C4:F5:B0:74:F1:80:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/125f4f80-f86a-3ab8-9cf9-5fd113dc841f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.74.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:91:b1:7e:e5:1c:ef:17:de:f8:7f:c9:89:ec:a3:8b:45:
         c4:66:cd:6c:99:12:a9:5f:33:60:1c:df:a1:5b:2b:af:72:43:
         e2:da:92:fc:62:2c:6d:f9:f8:6e:be:b3:72:36:f1:16:83:e9:
         58:16:6a:00:cd:d5:9f:5c:6c:9a:02:04:f4:82:3f:b4:e7:35:
         7f:19:07:36:b5:8c:66:3b:c7:e5:42:d0:d7:f1:3a:d4:b5:e1:
         db:ad:34:21:34:43:9f:9b:95:29:44:5b:ab:d7:48:65:d9:02:
         5d:e1:3c:cc:de:0f:ab:e6:02:32:94:de:00:31:ca:4e:f8:6b:
         57:f9:ed:a6:50:48:83:87:45:07:bb:c3:5f:23:59:18:7b:5b:
         fe:80:5d:67:bd:69:43:67:23:aa:a1:5a:16:de:44:3f:f6:1b:
         62:e0:2d:aa:07:d3:fd:4d:c7:1c:64:19:2b:87:da:c4:19:4c:
         a1:c7:e9:9f:48:eb:55:6e:75:f0:b7:5f:d4:a9:f3:d9:b4:98:
         92:81:e6:9a:3a:86:7d:3f:76:03:c8:5b:94:00:fa:ce:5c:40:
         1c:67:65:44:6b:29:29:45:76:ab:6c:02:16:74:8e:ed:fb:ad:
         c5:a6:6c:c2:50:d0:88:66:dc:a6:6b:f9:e5:ff:6f:83:94:b1:
         3f:fa:e4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:20:41 2025 by rpki-client