Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b83e974e-dd10-3716-b231-6f099ea3b66c.roa
File:                     b83e974e-dd10-3716-b231-6f099ea3b66c.roa (raw, json)
Hash identifier:          u39jwa7o74Ky/qYPSI4vm8wJI6gExmuKPyal22IvPcY=
Subject key identifier:   C3:8B:B9:33:6D:8C:C2:B2:BE:F1:70:C3:8F:8B:47:69:6D:AF:D9:B5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A92062A400C59F37592A48880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b83e974e-dd10-3716-b231-6f099ea3b66c.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.156.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:2a:40:0c:59:f3:75:92:a4:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=e6ff45d5-cd1a-4931-ad35-05aec3aff8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:dd:57:00:0d:5b:a4:fa:11:f4:c5:06:08:
                    87:1c:f7:48:fb:37:26:4f:33:48:c7:11:97:79:fb:
                    09:60:8b:3e:38:bf:f6:8a:84:46:de:0d:26:b9:b4:
                    46:a9:e1:d9:11:b4:d6:33:ab:85:b7:42:d7:a8:da:
                    b1:d7:4b:53:77:b2:8f:09:08:92:ba:41:aa:58:a6:
                    be:fd:fb:fc:7b:e4:97:70:07:a9:25:19:6a:1e:2a:
                    7d:28:55:dc:38:47:53:42:a4:f5:83:89:f5:ff:57:
                    8a:0c:2d:b2:6b:b6:ff:1a:dd:2c:c2:4f:32:05:ea:
                    39:7b:36:ec:0a:8a:f4:85:a9:13:a4:84:28:3a:4a:
                    7b:2d:62:f1:04:5e:fd:01:de:e1:d3:e2:07:ad:b7:
                    5c:8c:a3:5b:99:ee:7a:c0:58:d7:b3:13:e3:f1:e6:
                    17:61:1a:7b:56:10:1f:86:44:39:cb:81:2c:04:28:
                    52:cf:0e:50:70:da:9c:e3:8f:6b:d5:a7:de:b0:44:
                    03:71:34:8c:f0:7b:fc:bd:0c:73:03:93:ac:c6:02:
                    17:bd:81:c3:31:ee:06:90:b5:e1:d2:c0:da:f1:24:
                    c1:f0:d4:ee:1d:72:38:f1:56:26:f9:45:8f:c2:b3:
                    9d:2c:56:ac:cd:00:4e:db:30:66:f8:9c:e3:0b:5c:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8B:B9:33:6D:8C:C2:B2:BE:F1:70:C3:8F:8B:47:69:6D:AF:D9:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b83e974e-dd10-3716-b231-6f099ea3b66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:ed:b2:a1:ed:71:d3:b4:ea:e7:50:65:d5:67:d4:31:c4:
         66:c2:16:fd:10:fb:16:32:bb:03:61:50:92:c1:13:1f:d1:b4:
         22:79:93:55:ac:4a:8f:ae:d8:52:67:76:93:0a:ac:e5:88:75:
         1a:5c:fa:3c:09:df:d7:8f:79:18:5b:17:7e:67:d0:08:71:01:
         a6:42:14:5d:79:4e:02:77:5b:d2:48:ba:a1:bc:54:2f:39:1c:
         68:d3:ca:98:94:70:52:56:34:13:92:af:7b:2b:99:5b:61:a8:
         ca:ff:66:89:b8:6c:dc:f8:c9:37:ec:63:7e:b8:26:99:77:4c:
         21:f1:af:f3:d3:52:7d:18:58:d9:e3:a0:eb:b5:98:c0:22:1d:
         47:e6:c3:50:47:5a:6d:96:03:28:61:d6:9a:3d:81:7e:db:b9:
         e2:27:74:04:9e:ed:59:2f:51:02:e6:bb:b9:41:32:65:3f:c4:
         3c:fc:4b:63:73:41:ec:20:81:18:83:ae:e7:a4:53:7a:7b:3c:
         7d:ed:f4:6f:4a:39:20:14:bd:de:94:a2:da:6b:fe:7b:d3:8f:
         23:8c:72:9f:ac:49:86:f4:45:15:c6:21:2b:f0:4d:81:46:99:
         f1:30:ff:03:07:95:ef:54:e3:e7:28:e2:f3:07:00:88:67:f6:
         23:2f:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:16:18 2025 by rpki-client