Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/41450d90-0598-32bf-803f-9f938a15dc83.roa
File:                     41450d90-0598-32bf-803f-9f938a15dc83.roa (raw, json)
Hash identifier:          UMW4w750NAbMXg9689cYLyyE/QkCHH47q5Mg0aKmX4U=
Subject key identifier:   08:3C:35:EF:76:2D:C5:82:CF:76:56:BB:97:D8:0D:0B:F8:4A:01:84
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A8411922E86729E8AC4B1B208
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/41450d90-0598-32bf-803f-9f938a15dc83.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        34.1.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:92:2e:86:72:9e:8a:c4:b1:b2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c4472c8c-0f40-44a4-819e-d415b3ea9166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:d1:72:40:a0:6b:52:2b:ba:48:32:c1:90:
                    18:4c:d4:c4:d8:6b:e3:1e:fa:71:6a:f5:08:1a:a2:
                    12:28:35:41:8d:75:69:48:49:56:84:e3:6a:b5:d1:
                    e9:92:66:93:f9:4d:78:3e:c6:ec:85:7b:24:a4:d9:
                    ff:02:81:52:e3:bc:04:30:68:4f:5c:13:ac:77:32:
                    ec:dc:bc:3f:f7:4a:5d:db:5a:27:bc:bc:97:49:08:
                    69:ef:f8:71:42:f7:af:14:df:08:a4:9f:d3:8e:9c:
                    1d:cb:dc:f6:5b:c0:a6:b3:5b:49:98:51:8e:81:e7:
                    7e:47:0f:d7:bf:1e:c1:cd:7d:91:a0:c4:0d:9b:c9:
                    8f:21:c2:2b:31:67:1d:a3:fc:8c:1e:de:63:5a:fd:
                    ac:c1:91:d7:b7:e8:3e:69:b7:32:6d:eb:2b:88:86:
                    a0:f7:34:80:11:a8:9f:0b:29:d7:1a:3c:36:59:dd:
                    c2:af:e3:2f:d7:51:8e:58:fc:0f:f3:6f:c7:39:d9:
                    9f:22:ea:a6:93:87:01:66:c4:ff:f2:e6:60:5e:64:
                    a1:f9:56:c7:08:dc:fd:b3:b6:b5:65:2c:14:71:22:
                    67:f8:45:3a:2b:06:d7:10:e4:76:4f:1c:3c:39:33:
                    d3:54:86:51:fd:44:92:c2:26:f8:55:e8:bb:c2:cd:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:35:EF:76:2D:C5:82:CF:76:56:BB:97:D8:0D:0B:F8:4A:01:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/41450d90-0598-32bf-803f-9f938a15dc83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:ef:d3:46:e7:21:64:1a:7d:18:1f:b7:6d:60:01:ae:85:
         d8:96:dc:dc:ea:ec:ad:a7:b4:34:66:d1:7a:1b:02:c0:04:49:
         cf:71:f5:e6:5d:38:70:8e:da:ed:4a:3b:e7:eb:c8:e8:99:b4:
         1d:e6:20:67:4c:d7:ea:97:e8:0f:70:a1:97:fc:a2:fa:7a:52:
         03:81:d5:bf:cc:7e:2e:00:de:c2:e1:fd:39:5e:07:cf:91:a5:
         65:34:5f:2a:dd:b7:83:68:08:1f:b9:70:08:1a:98:f3:f4:1f:
         56:7d:9f:51:37:3b:58:f8:bd:c8:9e:b3:5d:97:27:10:2a:74:
         81:a9:5e:91:76:39:6d:15:13:1c:c7:6f:7a:01:00:0c:76:13:
         d1:02:88:60:c9:66:82:be:8b:13:f9:06:56:18:5c:1d:d2:c6:
         2f:2c:0f:37:ac:2b:a8:2f:6f:a4:e5:aa:8c:6c:f8:62:2f:2b:
         7e:2a:13:07:63:7e:db:a5:f9:e8:2a:a2:29:c7:f9:53:af:a3:
         ea:01:14:af:3e:31:0e:80:17:01:8f:01:64:06:c5:45:f0:e5:
         a1:d8:21:ed:f7:02:bb:54:9e:9f:31:b0:b3:0f:88:7e:19:02:
         0b:08:fe:99:7e:be:5c:a1:c4:47:36:6b:24:b7:80:9a:2e:a8:
         06:af:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:55 2025 by rpki-client