Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39234e75-2c67-3cb9-83c5-807a3839b45f.roa
File:                     39234e75-2c67-3cb9-83c5-807a3839b45f.roa (raw, json)
Hash identifier:          02p4lx7CjLSaWXbrSwpyMtldpWI4h7BkGmO0aXNa8qc=
Subject key identifier:   7F:97:B0:B8:25:4B:7C:00:65:28:E6:15:43:08:1E:F7:67:B3:71:83
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A841237F9D678485C6B929D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39234e75-2c67-3cb9-83c5-807a3839b45f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.103.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:37:f9:d6:78:48:5c:6b:92:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=10cf2386-91e6-48dc-ae9e-97694ac67c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:1d:25:c4:d8:f7:4f:b8:05:c5:32:34:0e:
                    45:e8:6c:a8:dc:17:d1:9b:f3:92:89:77:85:74:29:
                    69:ea:ff:36:5b:d2:64:2f:9d:90:ce:1f:3e:40:48:
                    c0:dd:d4:6d:86:62:5a:b4:20:87:66:9d:1e:47:ef:
                    23:b8:98:ee:e8:a2:3d:b3:b0:be:fb:f9:d0:d7:c1:
                    c3:7d:73:11:31:36:65:0a:58:35:0e:ca:e6:14:13:
                    20:5b:63:7b:3c:c3:71:1a:78:0e:bb:66:89:34:c4:
                    94:43:25:6a:43:6e:b6:21:ff:99:63:1c:96:3e:d5:
                    00:c8:b7:92:67:d5:d9:0e:35:1e:5f:49:f3:77:71:
                    8f:4a:92:22:ff:d0:e2:00:7b:fc:8a:37:33:d9:33:
                    e8:6b:ab:87:88:ab:ae:77:d8:59:9e:ed:50:c4:89:
                    db:9f:4c:58:e1:b3:ec:b4:59:d7:84:c7:45:8a:1a:
                    a7:24:e2:57:3a:5c:78:c1:15:94:1c:ac:0a:2a:66:
                    69:af:e0:f8:dd:41:65:5b:1d:a5:82:be:38:e2:57:
                    10:86:86:5b:39:84:17:bc:e9:d6:05:46:23:66:69:
                    7f:41:79:46:43:ed:05:7d:71:16:13:93:f5:5d:cf:
                    7d:d6:50:86:c3:bf:8b:75:95:0a:42:10:39:f0:2d:
                    6b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:97:B0:B8:25:4B:7C:00:65:28:E6:15:43:08:1E:F7:67:B3:71:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39234e75-2c67-3cb9-83c5-807a3839b45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.103.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:8b:dc:33:3d:5e:c7:6b:4d:e2:fb:fc:61:b7:2f:4e:dc:
         85:fb:c4:3d:29:84:8c:a6:70:e6:09:7b:ae:ac:f6:b2:12:81:
         13:dd:3b:95:32:36:3a:ba:a6:0e:1d:86:48:6d:d8:7a:84:3f:
         4d:77:0e:9b:72:48:b8:40:9f:30:b2:4a:46:33:f1:b1:cf:14:
         35:8f:78:42:05:27:09:2b:51:7d:81:d8:db:5d:70:56:39:7a:
         9b:09:56:c5:1e:7a:b3:44:01:dd:b6:b9:b6:55:ae:f4:7e:ca:
         c6:55:07:1e:fa:42:b8:ba:8c:fc:15:92:f4:49:e5:eb:64:12:
         78:a9:bc:0f:85:01:a0:d1:ae:f6:4f:27:fa:27:5d:31:20:21:
         88:58:e1:2f:e8:36:de:c3:d7:97:91:1f:86:67:77:ea:48:05:
         fb:b1:40:bb:1d:51:f8:78:07:be:35:5b:6c:28:e7:83:0a:85:
         ee:cf:35:09:90:02:ef:9a:72:90:a4:3d:d0:e0:5e:35:40:63:
         50:05:55:93:22:42:7f:bd:28:a1:0f:eb:27:57:f6:ca:db:e6:
         79:97:4d:35:61:6f:e2:21:b2:53:f9:78:11:42:7b:6b:ca:8b:
         5a:98:2c:7b:21:c1:02:58:14:be:40:09:3d:6a:f6:26:80:f6:
         8a:13:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:37:53 2025 by rpki-client