Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca3c4ae-f81e-3e9f-a606-8adf6d7236aa.roa
File:                     bca3c4ae-f81e-3e9f-a606-8adf6d7236aa.roa (raw, json)
Hash identifier:          4tw19S5SLALolXD60Yaor0Otixc2qjbFb9dGeRoDMCE=
Subject key identifier:   2C:93:B7:A8:D4:FC:D1:6C:DF:67:7B:3B:C7:E5:A0:BD:3F:B9:1B:94
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB94AAAB4A45F5E8D715F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca3c4ae-f81e-3e9f-a606-8adf6d7236aa.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.127.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:94:aa:ab:4a:45:f5:e8:d7:15:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=4fe87109-3c18-4f0f-b32d-b82b672ddc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:45:00:52:69:3d:b2:b1:74:64:ae:c3:4d:
                    6c:03:3e:db:62:2a:11:d9:65:c4:b4:8f:0a:14:c2:
                    5a:86:a0:b5:ed:b4:8f:59:7c:a8:6f:94:3e:a8:6e:
                    64:cb:33:d9:f7:2a:c5:88:0e:1d:a8:29:35:48:34:
                    13:4e:30:2a:38:81:8b:f7:9a:1c:3c:cd:6a:1b:dd:
                    bf:10:13:95:7a:08:ab:a6:d8:5e:f9:22:9c:97:28:
                    54:eb:a1:d8:73:42:df:be:13:77:ef:0e:11:5c:79:
                    eb:b7:2d:06:ef:9f:5a:ad:e1:cd:df:b6:b7:24:ea:
                    e9:89:cb:8a:10:f7:25:3e:43:00:5a:ab:d1:97:c6:
                    e7:38:cd:ab:c6:ed:28:95:fd:e3:94:31:65:c0:44:
                    9d:d7:a0:a0:c9:34:9e:30:52:4a:61:26:12:ef:67:
                    28:9b:cb:3e:27:93:0a:ff:bf:c9:d6:b6:15:81:20:
                    b9:e7:f0:23:a1:92:08:ac:b3:ad:9f:7b:e2:5e:63:
                    bc:0a:2d:85:16:03:91:a1:c9:73:f3:ba:c4:8c:f8:
                    8b:89:ed:8a:1b:8d:ee:13:28:3c:93:63:13:84:61:
                    a8:1d:b7:d4:13:89:d0:56:72:2e:a4:06:07:bc:64:
                    fe:42:8c:8e:05:2c:41:94:2f:b9:11:0a:cb:14:b0:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:B7:A8:D4:FC:D1:6C:DF:67:7B:3B:C7:E5:A0:BD:3F:B9:1B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bca3c4ae-f81e-3e9f-a606-8adf6d7236aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.127.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b7:76:a6:71:e9:f5:57:01:3e:e2:29:c4:6f:53:4b:7b:b1:
         2e:88:fe:c2:af:84:0e:c7:70:af:09:d2:c5:31:c0:a8:6b:fe:
         e8:35:86:45:4a:fa:8d:8a:74:6f:70:dc:84:0c:6e:b3:b5:61:
         06:81:c8:bd:f3:56:8c:97:01:eb:a0:b2:c1:7b:2c:fc:69:39:
         a0:1b:8e:c7:d2:fe:86:85:a3:f3:99:a3:2a:c9:6e:ca:d3:02:
         cc:ba:e3:7e:a7:26:94:36:b7:80:f7:e2:80:d7:96:f2:18:7e:
         b8:a8:1f:c0:9f:7c:b9:1a:50:e4:fa:14:31:a7:11:48:8b:ba:
         a5:3b:e6:ef:29:1c:4b:4a:3e:9f:1d:62:67:f6:eb:31:3f:12:
         6a:24:bf:2b:b4:ea:ea:ba:dc:13:37:7c:48:9c:eb:ad:ce:b9:
         14:c3:e3:cc:96:78:f1:7e:cb:b5:d2:f4:cf:a5:12:3b:ef:75:
         7d:c3:d7:b5:b9:1e:02:a7:2e:0d:db:e2:a7:fd:2a:02:62:ae:
         08:6f:f1:55:ab:f1:af:9b:ad:30:aa:f3:7c:c8:6d:8c:ea:70:
         e0:b1:f2:35:4d:50:78:b6:3b:5e:6a:91:9d:ed:84:dd:9c:f9:
         a8:1b:93:db:72:89:9a:62:51:98:22:8e:23:aa:b2:57:f8:c6:
         18:47:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:20:00 2025 by rpki-client