Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e5d7555-3ac0-3ef9-bc92-0239365b51ea.roa
File:                     9e5d7555-3ac0-3ef9-bc92-0239365b51ea.roa (raw, json)
Hash identifier:          UnbOhjw9pox7iyV3VIXNGNRFeUOHhqsge2fk4VT52pQ=
Subject key identifier:   17:DD:C6:47:9D:66:70:9F:73:B0:15:8B:24:4F:5A:20:BD:6C:7D:BE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBBC425D13D1E03352F580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e5d7555-3ac0-3ef9-bc92-0239365b51ea.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.96.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:bc:42:5d:13:d1:e0:33:52:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=bba04944-0517-45da-a032-ccc377302518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:9f:af:65:fa:3d:93:f3:87:a3:99:9b:49:
                    97:4d:0e:86:65:01:93:9a:d1:01:22:d5:4b:7a:b4:
                    b0:27:0a:37:77:f2:32:1d:b3:15:ce:d9:19:75:78:
                    ff:c5:0b:18:15:47:04:06:d6:18:45:a4:d2:1b:9f:
                    24:4c:cf:23:6c:5b:35:7d:cd:f5:fa:26:bf:1c:cb:
                    7c:4c:e9:d6:83:a3:59:37:04:30:ad:a7:f7:68:d0:
                    7b:b6:3f:46:9f:00:95:10:cd:38:47:53:28:5d:b3:
                    a3:11:6c:21:3d:78:52:55:09:8c:1c:98:c7:d5:90:
                    83:5d:8d:e5:9f:3f:a5:62:f0:2c:ae:e4:34:65:d6:
                    a7:6e:44:25:69:a7:1e:f3:70:d2:5e:7f:f7:f5:9c:
                    c9:b9:3c:5c:eb:76:2e:3f:4b:52:d8:13:85:2e:54:
                    3f:80:78:0d:ea:89:74:c6:7a:a7:2e:cb:57:c8:7b:
                    87:4e:f3:a1:9c:a8:47:17:78:6c:f1:c7:53:35:d3:
                    cc:a1:cc:ae:6b:43:aa:9c:2e:06:38:ad:70:83:2d:
                    ed:73:9a:b6:7c:28:12:9d:dc:1b:d9:95:17:fe:00:
                    af:57:5a:fe:90:68:3c:d8:18:0a:b8:e0:7c:98:ae:
                    f6:51:44:73:cb:80:7e:5a:6a:e0:53:8d:46:00:21:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:C6:47:9D:66:70:9F:73:B0:15:8B:24:4F:5A:20:BD:6C:7D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e5d7555-3ac0-3ef9-bc92-0239365b51ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.96.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:91:5a:f6:87:45:f3:15:d3:93:92:10:2c:5d:64:4f:3a:a4:
         02:30:fd:05:a7:d1:b8:bb:5c:67:64:4d:e0:d4:18:b3:47:12:
         14:61:e0:bb:f4:f7:4f:38:dc:71:40:2a:11:3d:fc:c9:7f:ed:
         6c:a2:e2:02:de:f4:2a:e0:59:b6:4a:9e:c6:5c:65:6e:d4:8e:
         f5:12:94:32:93:35:87:bb:01:34:ce:5f:54:e8:f0:b5:d1:dd:
         1e:3f:4c:cc:9a:47:26:89:fd:7c:7b:f4:d1:45:71:a3:08:db:
         5a:f7:77:70:89:5e:92:2c:1c:80:9f:a5:c2:ab:3c:a5:85:5d:
         66:3d:bd:ec:1b:97:ce:e3:94:e0:18:49:bd:4b:dc:37:ee:0b:
         5d:18:41:52:be:5e:d7:dd:7c:82:38:3c:d5:97:89:19:6f:5d:
         65:14:5b:a4:36:18:04:bb:31:aa:0e:07:51:0b:41:b7:8b:53:
         91:cb:79:80:5e:ae:74:ae:a5:48:3a:12:62:a3:2e:4e:41:ba:
         cc:26:26:6c:e0:07:67:fa:03:25:2b:77:d1:47:d4:88:ef:6a:
         62:eb:88:98:3e:5c:32:c1:e5:b1:b5:c7:fe:87:a8:2b:f5:cc:
         c2:34:c2:8f:88:73:3e:bf:73:fc:d4:e4:35:8b:53:27:33:38:
         e6:70:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:14:44 2025 by rpki-client