Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa
File:                     c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa (raw, json)
Hash identifier:          86Th2vxRt0P+LWRnqArMFYb3oGCy6JLrrMYkchnEa5M=
Subject key identifier:   26:8F:08:3C:93:59:D8:50:25:B3:B3:26:7A:36:DD:3B:4C:EF:3E:13
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBFA090D694E0F425D7AB0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.65.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:fa:09:0d:69:4e:0f:42:5d:7a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=aeefa799-7524-4d20-b68b-ed4162d0f949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:ba:68:21:07:e6:29:38:c8:5e:17:a4:01:
                    36:d7:c9:89:5c:29:0d:e4:c6:32:3f:64:b5:23:da:
                    68:26:2f:3c:dd:4e:90:ae:4c:4d:e5:24:b0:a2:45:
                    dd:74:14:e7:e3:7f:01:d1:73:72:74:98:0d:10:97:
                    92:6a:9f:bd:90:18:a9:ed:25:43:45:12:a7:f1:e7:
                    bb:ea:cc:30:4a:4a:e0:97:7e:49:ed:f3:f5:de:da:
                    7c:b5:ad:67:24:f3:53:b5:51:ee:3f:4c:25:9c:02:
                    92:14:30:e7:98:2c:63:c0:b1:3f:cf:68:c9:a9:ac:
                    15:9a:0e:4f:43:b6:b8:05:17:5e:7b:18:a5:3f:1a:
                    86:d7:8e:93:75:0b:cb:5a:f5:5f:38:46:76:10:87:
                    1b:e7:29:42:eb:03:91:15:1f:70:3a:98:3c:83:67:
                    41:62:4c:d5:be:9d:06:06:36:1a:20:95:fe:df:fe:
                    68:94:d1:66:84:e4:29:24:c8:cd:2d:8b:c2:30:3f:
                    6b:31:91:35:fe:79:49:54:86:2a:c2:17:cc:e6:58:
                    d4:88:55:67:9b:70:57:16:9e:bb:0a:1e:2c:92:3c:
                    14:fe:6e:68:00:3e:b9:5e:55:10:8a:e5:dc:69:04:
                    00:34:d3:cd:29:2d:ce:61:3b:92:a0:aa:e8:15:db:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8F:08:3C:93:59:D8:50:25:B3:B3:26:7A:36:DD:3B:4C:EF:3E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.65.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:50:4a:a5:02:fc:9f:c6:b7:e6:d5:e9:91:5c:bf:0d:81:19:
         a3:32:c5:5b:3a:e9:97:41:b3:1c:18:68:52:c2:67:6b:6f:ea:
         10:99:29:0c:95:cd:c2:8c:9b:84:08:41:63:db:67:de:4a:ca:
         c2:08:99:83:c3:38:2f:8b:ed:5b:6d:2d:0d:7b:80:76:7a:27:
         5c:57:4a:01:c2:b2:dd:9e:d3:17:7b:3c:fd:b4:ec:55:ba:70:
         62:c3:39:4e:70:4f:dd:e6:4b:b0:a7:0c:32:d9:92:3d:03:9d:
         26:c0:f7:24:80:00:87:37:4a:ac:bf:bc:2d:3f:df:0e:5c:c5:
         b2:ab:15:33:b3:66:1b:89:d4:09:a8:22:02:dd:69:12:2d:4a:
         52:5d:8c:3c:7f:84:ed:c2:fe:0b:80:a9:8f:d6:83:99:17:d0:
         f0:95:a4:f4:be:1a:a4:a8:c8:95:a3:7d:c2:96:55:c1:6e:f1:
         7b:a1:24:27:2c:78:a1:a9:eb:25:94:58:ab:e4:b6:4e:20:42:
         57:90:f8:48:8a:0f:45:23:ed:28:f7:07:8a:6a:32:55:58:31:
         21:78:4e:fd:83:92:b6:75:75:bb:a2:b1:5c:a6:53:84:67:77:
         99:05:cf:d1:ce:ba:ae:6c:14:c4:94:8d:a0:d4:45:8c:22:6e:
         00:8b:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:37:56 2025 by rpki-client