Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/471c598b-79c5-39a6-bb6d-435de2f97b10.roa
File:                     471c598b-79c5-39a6-bb6d-435de2f97b10.roa (raw, json)
Hash identifier:          +YXJemft/RaPilUpegFpxL5x1mqp5P76+Fr9+95btNs=
Subject key identifier:   14:71:F1:13:C9:33:7B:FD:9E:5B:01:1F:B6:44:46:D7:63:50:22:52
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB942BD58AFDFE86801CC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/471c598b-79c5-39a6-bb6d-435de2f97b10.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.73.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:94:2b:d5:8a:fd:fe:86:80:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=f4789fff-af9d-4a3b-8133-b197253dcf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:04:99:87:1a:40:45:0c:14:00:c6:ca:d8:a2:
                    17:f6:84:97:ac:33:44:a3:d3:86:ae:18:f8:8f:8c:
                    b5:22:63:6d:0c:71:6d:d9:fd:2d:d4:23:45:b1:b8:
                    ce:84:16:71:98:81:14:62:6c:ae:cb:74:49:f9:db:
                    dd:ff:6d:a0:10:90:88:ca:35:41:ad:f5:05:72:4b:
                    d1:d5:70:b7:fb:27:5d:9f:bb:92:b5:0e:89:2e:ad:
                    29:5d:45:e6:f7:91:b4:17:10:26:01:07:ba:0d:d4:
                    d1:c6:11:86:09:31:4d:7d:71:68:0b:18:46:e5:c8:
                    30:f0:36:71:51:2d:a6:61:1f:88:ec:06:02:27:4c:
                    33:f1:2c:16:70:92:20:a4:1d:d1:6f:a6:16:f0:2e:
                    03:8e:ca:79:94:00:88:cc:56:c4:1c:6f:c6:9f:67:
                    b9:a2:da:26:83:05:aa:ad:e1:eb:e9:48:e3:a0:8a:
                    22:8c:a7:98:fd:6e:04:66:52:56:d5:6f:46:f8:1d:
                    d5:a5:00:aa:85:f9:35:02:f2:53:78:37:d3:59:14:
                    16:b0:81:b4:7c:a2:89:17:f0:21:2a:de:a9:62:a5:
                    48:dc:40:8b:20:3a:b8:7e:ec:f4:28:98:e2:a4:1f:
                    13:dc:4f:9d:56:46:66:a0:e6:90:4c:fe:ee:c1:54:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:71:F1:13:C9:33:7B:FD:9E:5B:01:1F:B6:44:46:D7:63:50:22:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/471c598b-79c5-39a6-bb6d-435de2f97b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.73.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:80:e9:20:e6:70:b1:75:82:6b:7c:21:b0:c3:2f:f6:10:23:
         b3:df:5e:c5:24:5d:a8:56:df:04:11:83:da:c7:53:73:09:b3:
         ef:8d:8e:04:0d:34:8e:34:74:12:b9:40:c8:fb:e4:b1:38:c6:
         e1:4f:18:df:19:4e:01:a2:7f:31:11:1c:c8:4c:1e:07:55:71:
         03:86:73:2b:ed:26:73:44:24:66:a1:8f:d5:c6:29:ce:49:ff:
         c2:b7:af:35:33:65:1d:f7:b5:5e:cd:4a:11:96:d5:c9:87:6c:
         0e:28:65:bd:fa:10:b4:aa:60:d6:06:b9:15:f3:f8:f2:6b:52:
         11:34:bc:a5:05:2e:49:6a:fb:02:4e:c8:1c:81:37:52:75:53:
         48:07:2e:d7:30:26:e9:a8:46:f0:09:62:20:dd:5e:6a:34:83:
         cc:4a:04:60:ef:81:7a:be:1e:02:2c:cb:d1:ad:1f:4a:2c:9b:
         36:59:6a:46:dd:20:a4:ca:56:d8:46:9f:f0:98:7c:d9:cd:f4:
         0c:d2:6b:95:9c:18:9f:17:dc:09:01:d7:31:7d:04:5f:17:a5:
         30:f2:2a:50:e6:71:a7:16:06:d3:e4:e8:23:5c:2c:63:a3:42:
         74:55:cc:88:1a:a9:a3:79:16:db:41:3c:9e:b8:98:fc:7a:55:
         7d:18:53:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:33:51 2025 by rpki-client