Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa
File:                     cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa (raw, json)
Hash identifier:          nK88JipBwAy9BfM1EJN3owHQ1JY0OYxM4VvYJ7Tt2A0=
Subject key identifier:   88:52:FA:04:BF:D3:DC:39:89:6F:EE:3D:66:42:65:EC:9F:52:38:75
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBF4E92EBAC69F67951280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.123.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:f4:e9:2e:ba:c6:9f:67:95:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=c76dd4cd-3e9e-4798-b198-9d4922aad249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:1a:ec:32:73:8a:1a:7c:46:7b:cf:47:f4:
                    a4:fc:ec:16:af:26:3b:b9:58:3f:92:af:51:42:a7:
                    24:0b:0f:a1:4d:f0:32:c5:c0:6e:5f:4f:f5:ce:ab:
                    a1:be:1b:27:90:23:03:6a:1d:c9:62:eb:0b:b0:ff:
                    b3:8c:dd:b9:85:39:2e:4a:40:01:ce:77:92:f6:f3:
                    cb:3b:aa:6a:6b:b3:b1:6b:32:2e:c9:13:28:a7:ed:
                    b5:c3:f7:88:5a:c1:2e:68:6f:82:4c:4c:09:6d:d5:
                    d8:09:3f:ce:c2:22:87:12:00:99:b6:a2:3a:81:50:
                    ba:3a:6b:0b:03:67:f9:d5:0f:78:56:c5:6b:e4:43:
                    8d:4e:58:c8:b4:a7:39:66:62:ef:8b:58:e6:95:4c:
                    2f:0e:ce:ae:4c:4a:a9:b8:6f:9e:c8:6a:51:ca:21:
                    3f:70:41:47:94:e3:e2:38:21:f1:cf:73:4a:36:6b:
                    e7:2e:6a:51:c6:10:1a:1e:1e:38:ba:37:30:3d:6a:
                    2c:23:b7:fc:00:aa:76:9e:57:25:ce:9a:0a:0a:93:
                    47:03:31:6a:c3:2a:c9:26:53:ca:84:8f:fd:c5:7b:
                    a0:ae:d1:45:88:f7:d4:b8:e5:55:ca:21:14:3e:f6:
                    27:69:33:7e:d9:07:e3:b2:8e:e9:c7:13:a8:30:fa:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:52:FA:04:BF:D3:DC:39:89:6F:EE:3D:66:42:65:EC:9F:52:38:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.123.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:61:81:f4:3b:a0:f3:bc:d6:0e:11:e6:98:d6:29:98:d7:78:
         d7:e3:69:dc:49:60:84:63:42:86:5c:b4:21:df:6d:85:10:e2:
         24:19:da:a1:f6:27:eb:06:a0:d0:19:e2:fd:8a:41:63:96:2a:
         b6:2c:d6:69:02:62:d7:a7:12:1a:77:1e:dc:07:92:cc:af:f0:
         d1:6f:d4:31:3c:42:08:43:3e:a6:ab:b4:f2:91:bd:2a:91:3b:
         ed:cf:13:f8:22:fe:7a:b4:4c:0d:59:7c:e9:44:a3:3b:4c:0b:
         80:51:18:15:db:c5:85:df:15:c6:a9:2c:b1:e7:f6:c9:3b:b0:
         81:f0:9c:b3:46:e5:fc:b0:35:b7:85:35:01:68:91:a1:3c:f2:
         63:3e:ca:b5:aa:23:45:4c:06:75:c0:18:8d:0a:15:c8:45:4b:
         f8:9e:55:85:f8:e2:b0:99:51:4e:0a:e2:43:6f:17:fd:b9:ee:
         95:1e:40:82:df:7a:29:29:b9:b7:19:03:b8:13:70:18:57:f1:
         32:9e:e1:61:0e:2d:64:d3:0e:ec:7c:65:de:37:c0:34:c5:f4:
         4f:0a:6e:76:a3:a6:55:2f:dc:c7:91:9d:27:45:1b:fd:47:1f:
         02:c3:ec:f1:13:c5:5f:aa:8a:53:e4:da:6e:99:0b:24:7a:7e:
         4b:e6:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:19:47 2025 by rpki-client