Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18d7e17e-48ae-3937-a165-9b2e7ff8cd99.roa
File:                     18d7e17e-48ae-3937-a165-9b2e7ff8cd99.roa (raw, json)
Hash identifier:          wmlm38bq6RwV2Nl96CRLM28mZmWqSzhoihm5n+umiBM=
Subject key identifier:   29:D4:BE:9C:6F:42:16:66:DF:1E:56:9B:DB:1D:20:86:C7:DF:C2:3F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A841234E3FCBF541491165C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18d7e17e-48ae-3937-a165-9b2e7ff8cd99.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.100.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:34:e3:fc:bf:54:14:91:16:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=71bc31ca-262c-46ec-8e46-12355f11a3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:d5:2e:e3:8d:7b:a5:6a:5d:fd:10:b1:39:
                    f4:22:b7:16:ce:5e:50:38:10:f4:11:40:f5:b5:cd:
                    de:b1:f6:dc:d7:5e:70:99:8a:e4:c8:26:ed:32:f2:
                    c2:69:0a:20:6a:26:83:00:63:f6:60:ca:5e:6d:52:
                    72:c0:a4:96:10:27:f2:db:b3:fc:d0:65:14:2a:38:
                    5f:9c:e4:b7:72:66:ea:6e:b7:a1:78:00:02:f1:42:
                    a2:ba:da:00:38:26:98:ba:40:3f:cb:d8:dc:5e:0c:
                    72:4f:43:64:71:cf:77:97:89:0f:7d:7a:06:1e:2c:
                    aa:b8:85:4b:8d:b6:a8:74:0b:f4:a6:fe:27:3b:90:
                    23:26:d6:67:11:1d:2f:c0:df:29:8d:35:5a:23:28:
                    2f:0f:46:17:53:d4:c7:5d:64:3c:ca:f1:b3:3c:62:
                    06:5f:6a:6f:66:31:d5:7c:b0:9d:93:73:6d:40:62:
                    97:9f:29:b4:a3:ac:3a:30:e9:98:4b:99:6f:d6:74:
                    11:3e:0f:8b:d5:2f:51:c7:5e:44:dd:b2:2d:a7:51:
                    fc:8c:36:2b:f1:c0:b4:f9:a4:16:8b:27:65:f8:4f:
                    a6:18:94:b7:cd:c9:17:58:3a:80:11:8d:f2:0c:ff:
                    61:fa:3e:16:2d:48:d0:33:8a:c9:10:1e:10:b7:c3:
                    ea:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D4:BE:9C:6F:42:16:66:DF:1E:56:9B:DB:1D:20:86:C7:DF:C2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18d7e17e-48ae-3937-a165-9b2e7ff8cd99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.100.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:67:9e:d9:c9:6a:99:31:df:00:33:b5:99:da:f7:d8:ed:
         08:e6:85:1b:05:42:ef:da:4f:5f:34:37:d9:4a:c4:e8:04:55:
         7a:7d:91:ce:3a:7b:63:94:11:cf:4a:db:2d:7e:bb:9c:87:dc:
         aa:2d:04:7d:99:29:24:2c:f4:8f:79:a8:2d:56:81:0f:af:78:
         a0:04:e5:28:21:0a:47:24:98:76:1a:c8:51:45:76:95:d6:f0:
         6b:66:7b:80:d8:f7:cf:9e:41:5b:5e:de:96:a2:e2:ad:ca:c8:
         19:58:5c:4a:bd:a6:c8:f3:a0:24:b5:2d:c2:17:29:2c:67:95:
         69:f6:b6:0d:fc:d4:fc:c4:ab:37:d7:83:95:d7:bd:28:eb:91:
         06:18:61:3f:e7:a5:40:2d:d6:49:2f:d6:f7:75:f3:cc:5b:d5:
         b8:1d:ca:08:33:96:d8:55:dd:24:bb:e2:a2:ae:23:de:0a:a8:
         3d:85:74:e5:36:a1:7b:26:0d:58:f6:70:bf:ef:6d:25:49:6a:
         d2:1c:34:15:fe:33:d0:95:32:ca:6f:50:7b:f9:54:fd:3a:91:
         16:b9:76:96:c4:d2:02:36:eb:8c:93:ec:15:cd:8e:ba:04:8f:
         49:60:d1:1f:82:bc:3c:f3:0e:0b:a5:b7:0f:db:7a:ed:15:ca:
         34:a6:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:25:38 2025 by rpki-client