Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/656112c8-2f2d-3913-87b6-28507af7131d.roa
File:                     656112c8-2f2d-3913-87b6-28507af7131d.roa (raw, json)
Hash identifier:          bwBTZHC6kOPoUDC7jKY7flMtTyeKAb6PlwekrA5u7Nk=
Subject key identifier:   47:91:9E:EE:1B:DC:3B:53:7E:1A:09:50:D0:F4:73:FD:F0:C5:8D:89
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBC38CD5730F8D9E868D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/656112c8-2f2d-3913-87b6-28507af7131d.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.80.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:c3:8c:d5:73:0f:8d:9e:86:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=2da285b4-a0f3-4d21-a0e7-64b6cca0b537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:16:26:36:f9:a7:60:61:7f:a6:52:22:f3:0b:
                    fd:6c:8f:67:93:6c:d8:ff:e3:cc:89:f0:63:15:fa:
                    0d:8d:9a:73:7e:f2:c4:d8:f3:3b:9e:8b:27:e6:5f:
                    3b:67:a0:57:81:cf:64:4d:31:84:42:88:1e:83:e8:
                    60:86:7d:83:8a:9f:d8:1f:ce:5b:1d:a0:17:97:2f:
                    f1:a8:3e:12:26:ed:d5:fb:86:04:05:fc:fd:26:bd:
                    58:c5:8f:20:22:6e:52:94:6f:b9:80:58:77:0e:ef:
                    e3:9d:7e:5c:15:1d:13:22:b6:24:c4:92:a3:cf:e0:
                    89:9c:34:6e:1b:1c:5a:47:d9:59:a7:30:20:69:49:
                    8f:60:b3:6b:8b:2f:f3:93:30:d4:ef:2b:72:11:ec:
                    da:e8:c6:bf:4d:0f:f5:d3:94:8f:34:29:67:ca:26:
                    99:8d:c4:2a:c0:26:3b:d0:1b:74:4a:c2:25:14:39:
                    b8:6b:f0:b6:26:85:56:ef:1d:2e:bf:2f:c7:d5:5f:
                    e1:f6:f5:41:36:ac:df:9f:bd:b5:1c:5b:09:68:56:
                    05:37:c0:1f:f6:39:62:34:dc:38:2d:93:97:66:d4:
                    46:a6:05:4e:68:b2:95:19:5a:81:21:85:29:a3:6b:
                    99:1e:5f:4a:a3:64:c1:94:cf:1a:93:21:f9:64:12:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:9E:EE:1B:DC:3B:53:7E:1A:09:50:D0:F4:73:FD:F0:C5:8D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/656112c8-2f2d-3913-87b6-28507af7131d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.80.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c4:df:85:4e:dd:1c:55:0e:0e:3d:88:96:e8:d5:4a:e4:d3:
         00:47:86:09:c4:ce:6d:e1:d2:51:7a:4c:4a:7e:08:bb:32:07:
         ad:f8:ed:c1:42:15:cf:90:d4:47:e9:07:ef:d3:74:ae:18:2f:
         86:a0:6c:8d:57:6c:c4:4d:1c:ef:14:dc:56:ad:da:8c:41:79:
         02:c8:ee:11:4e:ac:e0:a3:70:63:ca:16:73:99:7a:4b:cb:0b:
         02:2c:7d:a3:c1:99:f2:9a:0b:2d:29:a0:66:de:6d:a8:47:f6:
         64:65:ff:45:eb:6b:00:5f:21:59:5d:28:cb:7f:14:b5:a8:77:
         be:15:18:bd:2d:96:38:27:06:07:da:f4:b6:e0:21:f3:3d:2d:
         d9:b2:47:d9:02:e1:f3:07:94:26:d7:fb:08:8b:fe:b1:39:07:
         55:f8:5c:7f:cb:83:b5:3d:61:58:78:ad:ba:65:45:ef:cd:b5:
         a2:ae:af:35:22:19:c3:32:16:0a:f0:ba:8a:92:47:69:14:a3:
         f9:93:2e:ce:b5:c1:aa:16:8d:92:d9:50:f1:c7:39:3a:04:dd:
         ec:95:1a:78:b8:ae:70:36:05:cb:b5:1d:42:64:1b:ff:ad:0c:
         34:c9:fb:df:3d:73:5c:27:8f:f2:47:70:8e:96:59:f8:61:07:
         f4:15:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:33:44 2025 by rpki-client