Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37608472-edfe-3f43-8181-42aabcd7503f.roa
File:                     37608472-edfe-3f43-8181-42aabcd7503f.roa (raw, json)
Hash identifier:          HWSApVNmvBlL7bU8Eu1g9gV4vE/CodFnJoahDRgxxHE=
Subject key identifier:   EA:34:16:52:FC:CD:73:F6:0C:EB:A1:D4:5A:F5:86:83:F5:A0:05:F0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBC2444CB4FC0BE64C0480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37608472-edfe-3f43-8181-42aabcd7503f.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.8.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:c2:44:4c:b4:fc:0b:e6:4c:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=22c839d3-6226-406b-8d57-055a827a8639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:fe:b9:8c:44:f2:01:b1:82:bd:de:21:dc:
                    99:cc:01:30:ff:4b:b0:51:03:38:e1:4a:08:b6:d6:
                    d7:8a:93:9c:0e:4d:d0:7d:72:70:0e:dc:98:67:df:
                    c7:ab:56:78:17:26:e5:0e:d9:e5:00:25:be:b9:c8:
                    c4:d6:02:fd:2a:32:33:7a:76:45:dc:e3:ec:dd:5d:
                    55:94:5b:fe:3f:ae:d1:bb:6d:c7:19:a3:58:ef:ec:
                    97:85:b4:09:e2:b5:f2:dc:6b:7a:c5:b9:83:5f:a6:
                    9c:01:4a:a2:b9:92:60:ab:be:56:9e:ee:9d:2f:8b:
                    9b:71:ee:22:7f:0d:f5:38:dc:50:b7:42:05:9f:46:
                    79:7b:c8:10:97:ff:50:ee:0d:91:77:41:7f:e3:55:
                    b7:53:55:4c:9e:21:5e:ad:35:6b:19:ee:f4:54:a7:
                    7b:78:40:00:d1:8a:a6:84:b7:80:7a:7b:0b:15:9b:
                    cd:4e:8e:05:cb:55:3b:16:32:50:73:60:47:71:b2:
                    48:9a:8b:2a:d5:91:e7:9c:b3:5e:8a:c9:01:fc:31:
                    1e:c7:4f:78:5e:a6:ad:4c:ef:e5:55:f4:ae:96:92:
                    73:44:5f:d5:f1:28:93:d9:84:0e:11:a9:7e:66:4b:
                    60:c5:2b:b6:ea:13:0f:af:ee:2c:2d:73:fe:a8:70:
                    df:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:34:16:52:FC:CD:73:F6:0C:EB:A1:D4:5A:F5:86:83:F5:A0:05:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37608472-edfe-3f43-8181-42aabcd7503f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.8.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:ab:a6:9c:78:bb:c6:ff:09:59:3b:33:6b:1c:30:33:b1:
         65:65:81:eb:39:4a:2b:98:c6:8a:ef:50:d0:54:32:67:f9:6b:
         78:6e:ae:aa:a5:b5:2a:9d:6e:1f:5a:a7:c8:84:9d:85:14:fb:
         e8:74:64:b7:36:9b:a2:6c:ac:75:d6:89:aa:f1:54:ab:64:f3:
         47:7e:7d:6b:72:99:b4:c4:8f:6e:e6:f3:ec:21:9a:74:24:01:
         c4:45:c6:e8:14:13:c8:14:19:b1:7a:bd:0c:bf:3e:26:2d:80:
         49:40:11:4a:62:5e:64:bd:83:82:19:c1:19:30:24:71:4d:9d:
         b0:d9:e0:5d:b6:ad:f3:b7:78:2d:b5:1c:cf:f9:84:d5:8a:cc:
         86:6d:50:9d:1f:04:bb:a7:8f:15:72:f8:12:cc:5f:22:37:34:
         d6:9b:b9:5c:73:0a:f9:e1:ea:8c:62:81:a4:40:b8:6b:d9:5b:
         95:e3:95:f4:8a:30:86:0d:09:c8:6a:66:12:10:bc:7f:e0:81:
         a3:fd:34:1b:e0:83:6d:94:66:0c:1c:cf:90:4b:47:b5:0d:22:
         91:8c:a4:81:c1:7e:ff:5b:f9:f0:a5:9f:d6:22:13:ab:de:7b:
         45:36:bc:08:ac:0c:93:b5:6b:95:32:7c:99:5c:9c:72:7e:35:
         64:97:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:34:30 2025 by rpki-client