Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/92742df5-49c9-3530-aca3-eb98b389f2f8.roa
File:                     92742df5-49c9-3530-aca3-eb98b389f2f8.roa (raw, json)
Hash identifier:          GKrVkgjQHaWKxdvAqSiBs1cXzKaS1Nfwe7adGqFQp5k=
Subject key identifier:   80:6E:17:55:EF:C7:59:BC:11:33:4B:55:33:1D:09:EE:1A:04:0B:2C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB8CC536731D9F113A3F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/92742df5-49c9-3530-aca3-eb98b389f2f8.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        34.173.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:8c:c5:36:73:1d:9f:11:3a:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=e0fca0a1-dcd4-474e-82ba-2f5b3c3f61d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:28:40:95:23:53:cc:21:53:bb:cb:a7:50:
                    98:47:90:7f:d8:db:58:28:04:02:ba:69:3b:e7:c6:
                    8d:81:67:7f:fc:5a:7e:8e:b0:d6:e6:f2:e9:51:cc:
                    8a:27:87:93:78:6a:b1:54:c0:1e:c4:82:ac:cf:14:
                    e2:f6:37:97:e2:2f:3b:bd:21:bd:c7:21:04:65:a3:
                    1d:6d:32:66:1a:10:67:c7:03:e3:c9:4e:c2:a2:56:
                    4c:9c:7e:0e:ad:4f:17:44:43:d5:17:98:69:34:7d:
                    46:93:39:91:cf:30:15:00:b9:f5:65:bb:4a:f6:e7:
                    a8:e1:61:bc:1c:99:0d:f0:3b:e4:b4:f7:e2:b9:b9:
                    2e:be:31:97:cf:0c:d7:f6:d0:ce:b1:5b:55:b1:3f:
                    ab:98:db:cc:c2:57:85:ba:89:75:4a:0f:7e:7c:cf:
                    f0:bd:00:c3:c6:b0:d1:0a:c0:89:2e:02:a7:2b:76:
                    68:93:c8:8c:20:c8:d2:41:d0:ff:35:56:f4:ac:f4:
                    20:b1:ea:bc:cc:2a:26:50:f1:29:d2:06:f2:15:ef:
                    e9:4b:1a:70:31:d2:3c:6f:b0:62:70:2c:94:52:18:
                    74:ca:e9:a5:73:75:be:a9:00:d3:87:7b:8d:89:34:
                    d9:21:40:03:3a:9a:ed:06:67:f8:a5:11:c8:c1:7d:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6E:17:55:EF:C7:59:BC:11:33:4B:55:33:1D:09:EE:1A:04:0B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/92742df5-49c9-3530-aca3-eb98b389f2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.173.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ff:a4:6c:da:5f:c1:a0:83:94:80:40:2b:45:a2:b9:5f:98:
         f5:9e:6f:e9:84:01:ea:ae:49:64:47:ae:c5:ec:85:27:71:51:
         73:a8:07:7f:cc:c3:d2:22:f6:39:5c:b5:c1:1a:59:25:de:92:
         76:1c:71:8d:e6:12:aa:b9:ba:73:39:3b:78:b9:bf:b4:e4:93:
         8a:61:7c:ff:19:a0:a7:88:8f:ac:74:c8:d2:b6:a2:4f:9c:a2:
         fe:0d:34:81:cb:c0:6b:2e:7c:fb:99:a2:43:c6:60:3e:25:a6:
         1a:4d:de:7e:8a:6b:ec:9c:31:6e:47:94:5f:1e:ef:4f:5a:ab:
         4d:44:77:24:4f:59:ba:fb:8e:f3:a0:33:ce:50:b3:aa:82:c1:
         94:3c:15:de:59:93:ec:71:a5:f1:38:40:10:3c:bb:83:cc:cb:
         dd:18:58:d0:e2:3e:bb:32:9a:69:17:43:c6:4a:b1:08:b8:7d:
         f5:59:ca:63:ec:0c:53:d7:6d:47:52:99:d1:23:d7:70:2c:01:
         72:13:5c:c7:05:c5:5b:7b:3c:12:1c:54:6d:58:64:37:9a:79:
         2f:0d:ce:87:91:e4:ba:e0:9c:17:5b:cf:ab:19:0c:db:84:dd:
         29:72:87:cd:4e:fb:bf:77:dd:da:53:77:32:87:bc:41:32:4b:
         c6:d8:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:36:11 2025 by rpki-client