Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e52256-0d1f-31e7-9a94-d402881520c1.roa
File:                     39e52256-0d1f-31e7-9a94-d402881520c1.roa (raw, json)
Hash identifier:          Y//KTVfYyy3q0+du1dmxATy4eKlVa4ccT8O4mPO1ZXg=
Subject key identifier:   3A:4F:85:60:35:F2:35:16:81:A8:CA:31:46:31:4F:6C:E0:2B:66:30
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A8412212D8E56551EE2975200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e52256-0d1f-31e7-9a94-d402881520c1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.119.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:21:2d:8e:56:55:1e:e2:97:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=82b87c45-0d59-416b-a679-91e36510f921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:8b:b0:08:9c:19:d1:2a:d9:8d:d7:3f:9e:
                    f5:e8:cd:b7:0c:9b:cf:17:ec:9f:89:f6:3e:03:66:
                    7f:e3:57:8c:42:99:87:6a:1e:d3:61:53:d4:73:5c:
                    e6:8b:b9:02:c8:77:3e:1f:89:8f:bf:24:53:ba:83:
                    be:02:8d:09:a7:62:43:03:5a:9f:6d:37:41:5d:81:
                    0d:66:59:ac:33:74:32:9a:27:6f:bd:c0:2a:19:0f:
                    2d:94:04:73:3b:47:21:86:ed:3b:d4:6b:19:4b:f0:
                    cb:1b:bc:f7:b3:16:8f:c8:f7:26:5d:44:6d:f9:49:
                    e5:de:b7:dd:23:53:01:ff:34:cf:5b:bc:da:b4:5b:
                    29:da:3f:a5:b4:12:fd:ae:2b:3d:f1:9e:04:ae:b0:
                    8c:74:5f:61:3d:74:86:a0:77:4b:51:ab:71:ab:41:
                    75:20:4c:26:27:13:8c:84:27:3e:78:a0:d7:90:a2:
                    9c:4c:55:22:a3:90:4f:00:97:c5:60:9e:a1:5c:4c:
                    84:6b:47:95:b1:b5:64:5f:03:66:4c:1f:97:49:8d:
                    9d:87:48:c2:3e:23:d3:b5:5d:c1:10:4d:d6:b4:06:
                    b5:5e:fb:e1:42:06:87:10:21:cd:99:c3:ee:0c:ed:
                    21:44:7c:9f:a2:bb:c0:0b:c6:72:fe:e0:d7:f0:d5:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4F:85:60:35:F2:35:16:81:A8:CA:31:46:31:4F:6C:E0:2B:66:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e52256-0d1f-31e7-9a94-d402881520c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.119.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d0:cb:75:97:8d:cc:15:da:e8:be:76:5b:70:d1:2e:b5:2c:
         d0:48:0f:b8:c2:8c:a5:4d:77:6e:1a:97:8e:a4:0f:9c:1e:2b:
         45:4f:39:e3:56:11:5f:55:64:72:c8:45:db:b1:17:de:e9:08:
         0c:ee:a2:31:35:34:ef:d0:00:8d:45:1a:39:7c:8b:90:82:61:
         69:b8:b1:e8:01:03:70:e9:64:b0:9a:b1:f5:bb:46:9b:9d:6c:
         88:f0:15:be:20:13:51:65:6e:33:8e:dc:ea:90:fe:a0:84:ba:
         c7:07:f1:a3:bb:c4:b7:6d:5d:5d:c8:1e:8f:5b:0d:35:f8:72:
         eb:ca:a0:2a:ca:50:49:a0:8c:6a:cf:d0:3e:61:c5:2f:8e:dc:
         d7:88:ec:78:b4:10:ed:4d:2d:fd:d6:4c:fb:68:f1:86:c1:eb:
         9f:66:54:c7:eb:fb:d7:0f:06:a1:17:f4:7f:d5:02:4f:26:d0:
         65:ef:06:11:3c:98:26:e8:ee:7b:01:e6:e1:6a:55:f9:cc:eb:
         85:c6:d0:91:6f:eb:36:17:8a:f6:90:44:de:1c:f4:b6:ce:8a:
         24:7b:c9:bb:21:4e:e2:16:7f:29:fd:cc:36:e5:01:fe:48:ca:
         fd:dc:cd:e8:4f:62:7b:d3:94:b3:bf:99:4b:1b:c6:70:f6:23:
         de:35:97:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:26:46 2025 by rpki-client