Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7a9b488-4222-36d6-9f9a-bab7325bea60.roa
File:                     e7a9b488-4222-36d6-9f9a-bab7325bea60.roa (raw, json)
Hash identifier:          Fg40kxl7llhDgtWSvu5FiibnV6Lg+KZxleadFbXZJxs=
Subject key identifier:   8A:C7:E3:4A:0F:ED:F1:80:0E:E1:B0:E0:1D:FD:9C:20:70:94:95:AF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBE9968CF6A31DB6240268
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7a9b488-4222-36d6-9f9a-bab7325bea60.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.66.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:e9:96:8c:f6:a3:1d:b6:24:02:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=98d73a6d-bc05-4fa7-9dc7-233a932a6b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:c7:88:f5:a5:17:51:55:aa:53:2f:2e:fd:
                    f5:47:4f:6f:0b:bd:21:02:0e:82:62:5e:8a:39:87:
                    92:4e:3f:4b:c0:14:9e:7c:87:65:63:a9:30:fb:e8:
                    2b:fc:ea:da:42:ef:93:1d:ec:ff:2b:59:82:f3:91:
                    5d:72:bc:b4:a8:83:eb:26:78:70:69:cb:ed:21:3c:
                    f4:bf:ec:a2:4e:a9:33:ae:b5:1a:65:e4:10:f3:e0:
                    1b:1f:f3:bb:ac:56:9d:fa:22:e4:5c:cd:56:5e:07:
                    fd:d2:3e:be:05:4d:b0:02:c9:99:88:b6:1f:a0:59:
                    69:7e:59:f6:fd:aa:4e:23:6e:13:f2:cf:4d:f9:70:
                    80:78:8b:67:16:8d:d9:c3:e8:43:b8:05:73:b0:4a:
                    7e:f7:20:7a:99:14:9d:ba:2e:fe:8e:07:88:e3:02:
                    6a:d2:46:ec:6e:a6:24:28:fb:61:cf:60:72:0c:2a:
                    f1:a1:56:c8:72:b7:59:1e:3b:e4:21:23:a1:2e:ab:
                    a2:ca:64:cf:11:92:de:a1:20:4d:d5:a6:32:40:81:
                    8a:76:71:90:7a:00:d0:12:a3:7f:02:19:2a:33:9b:
                    a7:28:1b:4a:7a:ee:05:f1:13:da:57:b7:20:90:cf:
                    f5:ed:51:e9:0f:29:83:80:8e:24:4f:d6:2c:fc:93:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C7:E3:4A:0F:ED:F1:80:0E:E1:B0:E0:1D:FD:9C:20:70:94:95:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7a9b488-4222-36d6-9f9a-bab7325bea60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.66.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:8d:8f:ef:28:f3:05:66:df:a9:47:0c:d8:9a:0b:24:68:0e:
         7e:52:f4:cb:ef:f6:8b:4e:23:f1:28:13:41:40:e5:18:fa:29:
         3a:6a:69:da:8b:cc:01:33:56:ac:2a:16:3e:ed:fa:f5:9b:d6:
         28:f8:1e:79:24:7c:ac:b0:ee:9b:87:a9:5b:df:4b:ce:39:bc:
         65:fa:48:d5:41:52:7e:9f:2a:d8:4a:01:18:76:35:3a:2d:a9:
         46:2a:77:5a:43:f8:69:68:ae:a7:3d:8b:88:1f:89:15:82:d4:
         54:6e:55:ae:ac:b6:9d:61:5b:8f:a4:77:b6:6e:34:b1:02:cd:
         e8:43:8c:40:2c:83:2f:b6:ae:5e:fb:5b:a4:d8:bd:b8:86:4a:
         17:2f:14:8a:e6:72:fd:95:b5:6b:37:17:08:eb:70:ff:ff:d0:
         50:de:3c:27:4d:14:ea:24:1e:87:fd:14:35:bc:07:fd:b6:18:
         0f:e1:74:87:09:20:55:d2:1c:64:57:2f:a1:3e:d3:62:a7:2c:
         da:8f:80:45:dd:e9:9b:7f:05:8a:18:83:c8:f5:0e:03:8d:13:
         02:28:2e:de:f4:b5:27:33:97:a3:08:12:1a:ce:35:5d:86:06:
         3b:84:c8:80:15:3a:85:2b:c3:e9:9b:b4:bf:c0:f9:da:62:f3:
         a8:61:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:28:51 2025 by rpki-client