Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b563d41-a01b-36e7-87dc-e8d2acd79596.roa
File:                     2b563d41-a01b-36e7-87dc-e8d2acd79596.roa (raw, json)
Hash identifier:          HvlRqN/U2a/wkn8BlKAQ7MDySguIXajAlsogB4ClUII=
Subject key identifier:   6A:A9:C9:F4:21:E5:0A:03:7A:37:E4:D9:3A:82:0F:DB:32:65:57:F8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84122577DB16EBA99DFA7500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b563d41-a01b-36e7-87dc-e8d2acd79596.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.122.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:25:77:db:16:eb:a9:9d:fa:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=fd755e1c-7f58-477f-8d9c-10252801ad50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:4c:9d:15:83:97:0e:62:fe:1b:a3:c2:8f:
                    60:82:82:01:98:87:af:b3:4f:ad:fc:15:c1:70:89:
                    8a:65:47:91:6a:fc:04:fb:01:8d:4d:c3:dc:23:58:
                    e6:54:e6:df:73:ba:5e:11:82:18:11:58:09:bb:5d:
                    1b:e3:45:0b:6a:03:56:0f:3d:e8:fb:3c:3a:0a:14:
                    7e:00:49:8f:1b:5a:95:b7:76:3b:57:28:5a:d7:77:
                    ca:3c:74:3e:fb:26:61:22:1d:38:80:b3:de:25:bc:
                    6a:fe:ce:06:fc:8e:8e:8b:97:95:f4:c3:d5:b1:3e:
                    46:fb:17:8e:f6:6b:01:b4:8b:fc:0e:65:1e:d9:64:
                    7d:26:e5:7d:7a:d3:a0:d0:7b:db:53:9d:bb:2c:17:
                    74:88:dc:51:84:e5:c5:42:6c:a8:7b:26:69:7e:40:
                    73:5d:51:35:4a:34:b5:94:f0:46:ef:b8:d2:61:01:
                    06:05:34:45:97:00:78:45:15:dc:f0:4e:6c:c7:a6:
                    cb:54:58:05:f9:58:c2:09:30:ea:f9:31:c8:c9:e9:
                    69:81:70:38:8f:21:48:f8:4c:9d:fc:10:9a:3d:d6:
                    09:be:8c:3e:ad:af:74:d6:23:de:9e:04:99:d8:7b:
                    34:01:33:f2:0a:24:b7:1e:54:92:b7:88:11:5e:15:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:C9:F4:21:E5:0A:03:7A:37:E4:D9:3A:82:0F:DB:32:65:57:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b563d41-a01b-36e7-87dc-e8d2acd79596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.122.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:c9:10:9f:16:f8:8b:02:d2:f3:29:60:29:e6:2a:ce:d0:
         be:31:27:90:85:4e:d9:22:a4:02:0f:86:24:55:41:6e:fb:f2:
         9e:c9:29:1e:db:27:56:99:07:0c:8a:2b:15:c1:48:51:74:38:
         90:bc:35:09:21:ec:15:99:24:7c:e4:18:94:c7:8b:8f:d7:2c:
         21:c1:71:29:92:03:42:cc:de:fd:25:b9:4a:26:4e:60:ff:69:
         41:fd:c5:a6:e2:07:ce:e8:dd:8c:d9:1f:9b:98:61:86:e8:e7:
         28:e3:aa:df:54:96:7d:ba:3e:19:8f:e5:5e:13:c9:ee:5c:2b:
         ee:9c:0c:d4:2d:e4:a5:02:bb:d0:63:fd:5f:c9:db:95:a0:a5:
         26:bc:70:b5:7e:63:77:16:0d:b4:2b:af:1f:f8:54:ce:d5:69:
         b9:d8:93:b2:68:1a:50:c6:84:1f:7f:9c:cd:56:bd:bc:87:cf:
         57:a6:c0:54:6c:7f:d6:5d:2f:2a:a9:01:87:22:47:49:e0:b2:
         0c:2a:00:df:64:8a:1a:dc:5a:ed:9c:12:0b:1b:a2:85:3e:8b:
         83:2d:31:7c:52:ee:9c:4a:f8:9c:76:45:43:0a:db:74:88:ce:
         d7:e1:d6:8c:aa:5b:ca:e2:a6:67:52:77:cc:86:61:75:3f:a8:
         12:a0:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:15:23 2025 by rpki-client