Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa
File:                     d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa (raw, json)
Hash identifier:          UAVRMvpop5xvGvMsdjCtoppg+iiC23ZOzobBMruwJr0=
Subject key identifier:   4B:EA:2F:EA:0A:5B:06:C7:AD:79:54:BB:27:FE:09:E8:C8:02:D8:6B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBF0600207B2198FD3AE40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.177.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:f0:60:02:07:b2:19:8f:d3:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=2390ab53-35fc-4486-9b72-6b8d855c8228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:98:a0:4d:21:00:42:be:90:de:13:6b:6b:
                    a1:a6:31:19:20:e4:45:68:39:af:fc:0b:18:a8:27:
                    9e:fe:31:8d:c3:e4:b4:82:87:44:4a:a0:b6:cd:1e:
                    ce:a0:0c:39:61:1f:96:fc:62:9b:51:c7:ab:da:63:
                    fd:34:00:5b:1e:a0:88:21:3e:da:fe:75:b6:40:e7:
                    90:ab:a9:35:d9:ab:91:6f:ed:75:4a:77:71:d4:75:
                    28:32:79:db:21:28:dd:45:0f:04:d2:94:1b:e0:86:
                    5d:3f:af:99:25:ca:63:34:8a:ac:2c:39:73:fe:e9:
                    e2:7c:d5:9e:c3:80:3a:da:d2:2b:1f:d0:a0:0c:c9:
                    dd:fb:f9:71:4c:5d:a2:77:8f:cd:78:b2:d4:49:b9:
                    79:8f:90:2d:27:a8:27:30:4f:2b:e0:66:5e:bb:e2:
                    27:b2:51:8c:e8:31:0d:33:ae:09:d0:c7:f5:b5:97:
                    42:93:e1:b9:f2:cd:46:c5:17:d9:09:24:a9:a7:99:
                    6a:71:f1:fc:24:ed:d9:aa:bc:fb:42:69:ce:a8:27:
                    29:89:1f:a3:82:57:ec:bf:4e:e5:e7:4e:05:bd:63:
                    63:ad:1e:c4:7f:b7:fd:42:5b:21:77:dc:cc:37:d1:
                    9a:57:50:5c:e7:03:42:10:fa:ca:a8:d9:a1:81:43:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EA:2F:EA:0A:5B:06:C7:AD:79:54:BB:27:FE:09:E8:C8:02:D8:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.177.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:2b:b0:a5:52:0d:9e:57:67:15:60:80:89:37:b0:5e:2e:2c:
         ef:97:b9:e6:ca:30:dc:a6:ec:18:8b:4a:fe:16:45:df:27:ff:
         bf:ce:ca:00:38:39:8d:8c:61:be:34:2d:d7:14:c1:fe:04:4b:
         45:ad:08:fd:dc:b4:35:92:5f:f0:9b:5a:ee:72:f6:72:04:ca:
         2a:fc:f3:44:24:a1:5e:4d:65:6e:f0:63:87:0d:a9:97:db:72:
         e4:d8:06:b7:1b:a3:45:67:c2:00:4e:44:ff:d8:b1:5f:12:95:
         a3:c6:e2:e0:57:66:6a:64:90:c2:0c:8b:32:10:43:29:ec:c4:
         ac:67:79:78:89:04:a5:6d:95:03:86:53:b4:f2:00:a1:77:a7:
         61:c6:ac:8a:0b:51:8e:84:1b:33:50:26:fb:70:2f:5b:a1:3e:
         d2:9b:b9:cb:b6:e9:dd:32:4c:22:c4:27:ec:d0:f5:8b:9b:b7:
         a7:b0:7a:d1:ac:3b:52:14:d7:29:10:46:c6:dd:15:08:35:87:
         cb:b5:65:6f:c7:d3:1b:28:5a:c8:45:78:6d:f7:7c:2a:f8:22:
         d4:9f:d3:dc:f8:a4:08:83:22:45:e4:15:18:bb:c7:fe:23:07:
         57:4e:c6:93:80:db:5c:be:86:b2:01:e6:07:ef:ee:de:65:77:
         1e:a1:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:17:09 2025 by rpki-client