Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa
File:                     86bed144-128f-3b1b-8d74-51dbbfc5c638.roa (raw, json)
Hash identifier:          3BiYxmRUUNYGkmoDJdQasyWsk0G62AL0xbwGC7ZXvgU=
Subject key identifier:   B6:B9:16:E8:F8:09:96:B5:54:3F:96:EE:16:F7:C6:AD:A1:67:9E:1E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBBB8EEC04FC65D5517980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.134.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:bb:8e:ec:04:fc:65:d5:51:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=77d02630-56d1-43fa-9754-2ead99dd4420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b3:07:5f:4a:c4:46:3b:e3:b3:4e:8a:c3:01:
                    6b:79:bd:bd:20:4e:d8:e2:de:10:15:42:06:3c:47:
                    bd:57:86:f5:99:f3:f7:f1:0d:c4:18:61:4c:29:97:
                    09:8a:61:a1:26:13:12:df:18:f7:32:08:9a:51:91:
                    41:d1:2f:c0:e1:0c:c2:36:4e:e4:cc:5f:be:0e:cb:
                    6a:49:43:25:51:91:89:5c:c2:71:94:64:f3:7b:39:
                    14:93:f1:dd:7f:bd:b6:32:fa:a2:0d:d7:8f:b9:4c:
                    6f:55:c7:c4:e8:d5:51:f2:c1:de:80:62:7e:83:b7:
                    87:21:ac:08:c4:76:3c:33:8d:16:3a:a1:dc:d2:92:
                    54:a1:6b:f2:12:2d:34:d4:f7:35:ab:f7:fb:6d:50:
                    ca:54:ae:33:7f:26:5d:51:16:81:69:fb:a7:4c:d8:
                    27:ae:5a:26:ce:23:92:38:7e:2e:d8:28:e9:54:6d:
                    9b:49:c4:a2:9a:8a:8d:b0:1d:67:45:bf:fd:31:51:
                    13:72:34:d4:68:1a:8d:ad:1e:33:3d:6b:5a:97:5b:
                    0f:70:65:f2:79:aa:18:8b:e6:93:35:79:41:15:78:
                    c5:4d:72:cb:bd:c6:b1:1e:92:3e:c1:69:aa:f2:97:
                    44:aa:61:fa:d7:69:5f:e6:90:0e:ea:19:c8:77:79:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:16:E8:F8:09:96:B5:54:3F:96:EE:16:F7:C6:AD:A1:67:9E:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.134.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:be:bc:10:62:b3:d0:b2:2b:a5:21:83:18:77:0c:62:b2:01:
         b3:0d:23:49:76:17:e9:fc:28:3a:f2:9a:b9:48:58:b1:dc:73:
         8d:60:2a:af:6f:9a:5d:38:ae:98:38:1a:91:ed:59:4c:f2:63:
         40:f1:d9:6b:6b:7f:5a:48:7a:04:2a:dc:65:31:c8:ec:a3:61:
         7f:70:1c:e6:82:84:cc:02:a6:6f:09:95:62:9d:2e:21:02:56:
         7f:23:00:06:6a:78:df:b1:f6:dd:3a:37:63:c9:9b:2f:d3:7a:
         1a:42:a1:fe:8c:05:58:71:e7:a2:e5:94:7d:11:0c:03:c4:8e:
         b8:e7:02:89:85:db:12:2c:d1:5a:5f:aa:10:b9:f2:a4:09:46:
         90:57:9a:24:f9:2a:3f:82:e2:87:85:39:06:e1:b6:ec:57:97:
         1e:67:72:20:fd:da:97:f0:66:72:a9:53:21:bd:88:47:fa:3d:
         b8:e5:cd:a8:cd:22:63:99:57:c7:49:c7:8d:29:ce:b1:8d:96:
         15:40:ef:2f:f2:77:f5:3a:38:04:39:c4:65:03:53:ba:33:25:
         b4:b2:e8:92:ee:74:2b:00:3d:5a:50:17:35:f3:6b:39:05:ea:
         de:f6:37:12:d0:7b:0e:22:95:4d:f4:3d:a8:77:82:ca:62:77:
         3c:68:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:34:44 2025 by rpki-client