Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4fea620-f77a-3fd7-b1ac-544a07bdbd7c.roa
File:                     b4fea620-f77a-3fd7-b1ac-544a07bdbd7c.roa (raw, json)
Hash identifier:          DH4U/1v8Xj6tT2ynpv91RbSTVZnsav0oQNuj8eeWbMQ=
Subject key identifier:   C9:AA:A6:40:D7:EB:BE:B6:41:D1:70:A6:20:9A:0E:77:B1:CC:0F:80
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84122D41296AE72366858D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4fea620-f77a-3fd7-b1ac-544a07bdbd7c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        34.1.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:2d:41:29:6a:e7:23:66:85:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3f838035-54ac-4951-a7ff-d0319137b561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:79:6d:df:7a:42:92:1b:c2:0e:d3:22:cb:
                    e2:d5:30:d0:25:1f:01:38:43:4b:7c:77:0d:5e:04:
                    aa:5e:9e:d5:28:1b:1b:e3:fb:12:ba:3d:ec:8c:0e:
                    70:6f:b6:54:bc:7e:d1:48:35:37:72:48:ed:1a:a9:
                    52:32:ec:a5:5f:83:ba:38:68:35:d8:42:2c:6a:67:
                    36:15:d0:33:93:8e:85:be:e1:74:bb:fc:9d:e7:1a:
                    a8:e3:49:b5:1b:e3:12:ff:e3:55:94:5a:f9:57:7c:
                    32:17:77:0b:70:6f:44:14:df:39:d7:81:05:b0:4a:
                    ac:a6:32:52:3f:ba:80:12:5b:09:53:69:cf:ca:d9:
                    a7:ae:31:b6:26:c1:21:79:3e:c1:e3:04:cb:f3:c6:
                    f3:57:88:5c:d7:30:27:9a:15:46:20:d6:8d:4b:02:
                    7c:69:b9:97:8e:db:d6:3e:ac:70:92:65:b7:e6:08:
                    51:9f:b2:bc:02:9e:b4:0b:70:c0:8c:ad:60:2f:41:
                    56:e9:e0:f0:b7:0f:7e:27:3f:b0:e7:5a:54:1f:d3:
                    1d:8c:42:0c:9f:8f:24:08:57:80:05:99:28:fe:fe:
                    6f:1e:89:48:96:d1:f6:59:fd:0e:66:8d:7f:d6:b9:
                    1d:4c:8b:62:7f:25:df:03:5e:77:7c:fc:5a:4e:53:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AA:A6:40:D7:EB:BE:B6:41:D1:70:A6:20:9A:0E:77:B1:CC:0F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4fea620-f77a-3fd7-b1ac-544a07bdbd7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:dc:27:7d:2e:18:cf:21:18:4b:8b:65:6e:57:0c:72:81:
         71:41:85:68:fc:4b:b8:b2:95:31:2f:ac:87:fd:3a:14:11:13:
         3a:56:ba:e0:37:7c:d3:24:e2:c6:2d:ea:5a:0b:e2:df:b2:f6:
         26:34:ab:9a:3a:c4:ca:64:14:8a:d1:98:67:31:43:58:8f:a8:
         5d:82:ae:94:82:1e:72:e3:c6:cc:f5:43:89:2a:3b:26:69:6b:
         61:a9:50:dd:6e:2b:fd:16:cf:fc:2b:0e:83:26:6d:c2:32:3d:
         8e:2f:8c:74:52:3c:cb:de:37:41:37:62:22:39:e5:2f:30:36:
         1d:26:62:5a:89:99:ae:b7:38:b7:f5:2e:a3:25:f2:9f:84:b2:
         73:15:78:6d:2b:ce:19:9c:bc:26:74:ec:bf:1b:53:6e:b0:bb:
         96:45:86:ab:8a:d6:b7:e6:8e:8a:4d:a5:11:06:63:97:ea:0b:
         ab:c5:ec:48:6c:9b:7a:14:a8:82:0f:c9:28:18:c5:71:c7:76:
         d0:b3:39:be:9c:ac:85:72:b2:24:d4:48:fc:df:f4:8f:40:c0:
         14:a2:0f:64:c7:27:48:41:b4:d0:20:a8:c9:ae:31:fd:2e:2b:
         17:f6:0e:46:3d:20:4b:8c:11:62:a6:b7:78:5d:f5:50:1f:52:
         31:ea:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:48:00 2025 by rpki-client