Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b65256dd-27c6-3138-836d-7e5509e6af25.roa
File:                     b65256dd-27c6-3138-836d-7e5509e6af25.roa (raw, json)
Hash identifier:          XOzc1GFv907euPCgqlpgXgowNrwz1KYb25OY7rBLxxU=
Subject key identifier:   25:23:B2:38:77:D2:F7:CE:1C:C0:A8:E8:F6:4B:79:8A:36:66:45:4B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB8627B084CB5112E58600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b65256dd-27c6-3138-836d-7e5509e6af25.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.151.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:86:27:b0:84:cb:51:12:e5:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=b5661c8c-2a81-4068-aa60-2cbc3bf1c34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:44:e3:24:eb:42:0b:f2:b5:0e:87:3a:41:
                    d6:eb:e3:cc:f9:43:bf:a9:14:84:86:47:c4:48:bc:
                    e3:5b:8c:5e:27:61:b2:e1:2e:57:0c:b0:4d:cd:72:
                    13:03:ea:73:e4:f6:1c:1a:76:75:cb:f1:73:99:e6:
                    cf:d0:f3:6b:f7:cf:23:68:d9:da:2e:20:da:64:79:
                    df:38:6d:6c:18:67:57:14:5e:66:a8:dc:8b:92:d2:
                    1f:65:8d:6d:e4:70:69:5a:fa:90:70:cc:89:22:27:
                    92:ec:a2:c6:e6:6b:e3:2f:d8:c6:33:90:9d:be:dc:
                    11:21:e6:fb:8b:32:19:3a:a9:ca:37:95:ed:6a:86:
                    1f:b1:a1:11:81:8c:f6:c7:ab:8a:b2:da:b0:2b:31:
                    94:f6:74:13:18:bd:8c:dd:d0:d2:2c:bd:6e:68:90:
                    52:d0:2f:1d:c9:c3:78:21:1a:58:d1:85:12:91:f3:
                    86:16:56:da:6b:93:fb:04:e0:a2:39:9b:0e:e8:74:
                    74:38:ac:e7:6a:22:bd:5e:c6:3f:21:43:b7:79:9a:
                    6c:a2:4f:ba:20:76:4d:c7:6d:7b:6d:13:ad:8d:84:
                    33:60:c1:ec:24:56:d4:d9:40:b5:75:40:78:79:9b:
                    6c:b3:b0:12:48:cb:5a:59:d5:44:03:5d:a9:3e:be:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:23:B2:38:77:D2:F7:CE:1C:C0:A8:E8:F6:4B:79:8A:36:66:45:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b65256dd-27c6-3138-836d-7e5509e6af25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.151.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fd:48:2d:d1:73:f5:b6:48:f6:a0:1d:78:30:e9:eb:65:20:
         9b:8e:81:21:d2:99:05:43:fb:52:3a:6f:6d:17:ed:ad:0f:10:
         d6:66:cd:9e:6c:d7:9a:d0:78:c1:bc:4c:c6:bf:bc:f3:30:51:
         da:30:bb:ea:48:80:7c:01:3c:53:d4:3e:44:8b:27:54:ef:fa:
         2f:45:1c:30:3e:4e:52:2f:d8:aa:07:54:62:d1:0c:d3:f5:c7:
         27:28:bb:ba:fc:4b:c3:32:6a:69:ef:d4:bd:c4:11:9d:6e:76:
         78:8d:d8:c7:7d:9b:e7:83:c4:63:bf:f2:02:6f:85:d2:e3:fc:
         48:3e:1f:d1:71:20:97:0b:eb:b8:1b:3d:cb:63:f2:0a:e5:26:
         fd:f4:18:cd:05:90:7e:6f:5a:26:29:d2:b0:9a:da:93:90:8a:
         b2:2a:e0:d7:78:b4:40:ea:50:85:ea:fe:58:0e:06:cd:4a:74:
         c7:b0:fe:94:42:86:8a:b9:da:26:dc:63:dd:e4:c4:b2:9d:7f:
         3a:d1:6c:e1:a2:de:47:6a:24:99:ef:01:4f:3e:64:67:be:e5:
         87:e9:ed:b5:69:40:ad:49:c9:d6:69:2a:49:4f:29:23:8d:cb:
         8f:9b:12:b1:e3:98:5f:b0:fc:d0:41:25:5a:e2:13:c8:bb:9c:
         48:b6:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:28:58 2025 by rpki-client