Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b7dee8-b5f6-3251-b752-50c6f2724b10.roa
File:                     b3b7dee8-b5f6-3251-b752-50c6f2724b10.roa (raw, json)
Hash identifier:          71olOCK78v4OkOoZMsIkW2o2Gmsfp0xXzANjPjYJHiE=
Subject key identifier:   3B:B7:C9:12:77:5A:D8:55:68:CE:23:1E:E7:A9:B1:28:0C:7A:0C:13
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBB0C3D1C6AA5556FB8A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b7dee8-b5f6-3251-b752-50c6f2724b10.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.129.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:b0:c3:d1:c6:aa:55:56:fb:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=eccdda9c-0f47-4a43-aad6-589dd55278f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b8:45:92:e5:b2:44:94:e6:21:4b:58:36:2f:
                    c7:96:9b:9a:8f:89:e4:c1:0a:19:ca:76:86:5d:4e:
                    5a:12:4e:46:88:b5:5e:31:72:c2:98:c1:51:6f:5d:
                    2c:09:46:58:2f:c5:92:9f:07:1f:93:0a:74:38:6e:
                    52:fb:93:5a:8a:11:04:d1:41:58:3c:d8:aa:52:15:
                    50:9e:c7:7f:72:9f:b4:73:31:0c:ae:28:86:f6:d2:
                    6f:34:e9:78:f5:cf:07:4d:74:85:71:f1:17:41:84:
                    17:de:5f:f5:42:31:0d:3d:3e:76:08:7d:3c:57:32:
                    e6:20:f1:bf:d5:e6:ed:2f:ce:9e:8c:db:b8:cb:ed:
                    bc:2e:92:c8:e2:bb:31:f6:81:9b:9a:cf:01:18:93:
                    54:b2:d0:81:b7:1e:15:d7:e6:87:01:96:fd:3d:e8:
                    c9:1a:09:f7:80:cd:bc:b2:2f:51:e9:26:35:d6:24:
                    db:1f:5f:b4:f4:e4:3f:1f:6d:18:e2:4f:1f:c7:ba:
                    05:88:ac:9a:d6:b2:19:3f:90:02:4a:dd:3d:92:40:
                    5d:cd:c0:d5:95:6d:05:f7:8e:fd:37:0e:e6:fe:09:
                    bc:43:04:d3:87:b8:d0:6e:bd:48:de:27:26:96:1d:
                    8d:32:0f:0c:7d:5d:2c:ce:04:7d:5e:ee:b8:fa:05:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B7:C9:12:77:5A:D8:55:68:CE:23:1E:E7:A9:B1:28:0C:7A:0C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b7dee8-b5f6-3251-b752-50c6f2724b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:64:67:52:26:78:87:2c:33:70:7f:c9:66:ab:81:ec:43:
         dc:4d:70:05:7a:94:b9:fa:d6:0a:b3:af:81:b8:82:00:14:72:
         9e:d3:5b:fd:26:3f:26:2e:c2:3d:e5:4c:b0:13:8c:68:d2:d5:
         6a:cb:1c:ed:a2:d2:66:c3:c5:31:ff:dc:b7:02:c8:2a:71:9b:
         7f:13:04:ce:51:e9:8f:51:ca:79:3e:9f:c0:d8:08:bc:6c:3b:
         80:1a:da:95:ff:4e:48:a0:cb:db:6c:ad:b5:85:f2:d1:9c:31:
         0e:55:3e:5a:ab:f9:57:13:8a:cc:42:fd:8e:10:df:13:ee:97:
         76:51:3e:a3:9a:98:41:fc:71:42:4c:48:c4:fd:63:07:b0:f1:
         c5:57:dd:71:2c:dc:99:13:0b:c1:f1:a7:4e:64:86:a0:09:af:
         ba:ff:79:8d:ec:5a:2b:b1:43:f1:29:89:46:8f:31:a2:03:18:
         32:a1:f2:64:2a:dd:22:99:5e:15:13:a3:23:2c:27:b5:03:78:
         dc:80:9f:b2:29:ff:ef:34:a5:22:27:69:ad:0b:46:7c:0e:2b:
         ea:95:63:4e:59:b5:f2:05:24:7b:25:17:56:b7:3a:d1:d7:1c:
         8d:ca:81:a1:8d:14:2d:1a:e0:a8:76:0b:3b:d2:44:6d:a2:6c:
         77:fd:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:25:37 2025 by rpki-client