Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ead1832d-919e-39c7-8922-5db4cbe6edf5.roa
File:                     ead1832d-919e-39c7-8922-5db4cbe6edf5.roa (raw, json)
Hash identifier:          gnDSmM+f+E+mIQbNHaGtlPMT9jzO0m5LrCjU/rz0zMk=
Subject key identifier:   D1:F2:37:9F:ED:B0:EB:A0:E6:D5:1E:0D:12:75:40:47:78:32:BC:35
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84118D02BEBC55E88D186180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ead1832d-919e-39c7-8922-5db4cbe6edf5.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.103.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:8d:02:be:bc:55:e8:8d:18:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=057746ca-d481-41a8-9a78-45dd3c5db6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:39:58:14:01:3b:4e:09:e7:d3:b1:94:46:
                    f2:fa:11:d5:2c:66:1e:0a:52:8c:5b:32:4e:68:87:
                    84:91:f7:ea:ab:bb:3e:c8:7a:86:77:e7:b2:2f:2b:
                    0a:a6:f2:92:9a:b5:4b:9d:bb:24:74:7b:12:64:ab:
                    ad:0e:5c:64:6a:5f:3f:c5:b7:d3:cd:1c:0e:99:33:
                    c9:c9:a6:8f:f9:cf:47:ec:ed:2a:de:15:c4:fb:b5:
                    8e:e7:cc:dd:b2:92:17:ed:56:d1:29:49:7f:03:a0:
                    a3:c6:32:9d:c1:21:fd:2a:44:93:dc:21:a0:39:c2:
                    9c:ed:69:da:68:80:a4:c6:09:ef:1f:4f:93:8c:7a:
                    9f:bb:7e:cf:66:4f:ec:4d:7b:73:2e:f2:71:51:b5:
                    5c:21:34:26:27:47:a5:1c:f0:08:54:c0:4d:36:2a:
                    f4:e3:d8:a7:ab:11:97:11:e7:db:cc:2e:62:fb:03:
                    7c:f0:41:0f:14:c2:e7:ca:bf:8a:b3:e8:88:2e:23:
                    26:aa:f8:ac:b5:b4:9c:7d:d1:db:99:76:c9:30:e1:
                    82:a6:e3:77:1b:a5:ca:c7:39:1c:b9:c3:18:b2:72:
                    75:31:9c:62:8d:80:f7:76:35:64:f6:8d:3a:96:ad:
                    d7:64:40:94:8d:a1:b1:b1:19:6d:a1:90:10:f4:3d:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F2:37:9F:ED:B0:EB:A0:E6:D5:1E:0D:12:75:40:47:78:32:BC:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ead1832d-919e-39c7-8922-5db4cbe6edf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.103.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:2d:46:d7:60:67:16:b4:f4:2b:2f:c7:f0:39:cc:65:5d:
         89:aa:8f:ab:0c:15:62:5b:79:86:b9:fb:5a:4f:af:0c:be:5b:
         ae:4a:04:54:26:e8:57:1f:a4:57:fb:cd:05:1f:3b:75:8a:36:
         ed:4a:58:e6:a1:be:6d:96:0f:03:df:37:8d:33:17:09:ff:5a:
         5f:6f:0e:5d:46:da:78:51:74:ca:71:52:c5:2d:57:ab:ad:a4:
         06:60:bb:0f:db:f1:39:56:0f:ee:f9:bc:64:d3:ec:6a:ce:c1:
         49:e5:02:36:67:a8:6c:a1:bd:f1:cc:df:67:2f:26:72:82:74:
         ec:20:02:03:95:ab:29:ea:8e:c0:cd:22:7c:9a:49:2d:26:b1:
         a2:56:d6:69:fb:cd:07:da:51:2b:6e:d0:f1:94:5f:73:f6:86:
         05:bb:67:bd:15:74:0f:a1:31:f0:13:31:a8:2a:fc:2b:63:6c:
         f0:f5:f7:13:8c:bf:07:67:1a:05:e2:9b:cd:5b:9f:da:56:01:
         db:14:f6:51:97:77:46:fd:41:8e:82:09:f7:2b:79:0c:ff:d9:
         33:0d:c3:cc:47:86:a1:1d:fe:15:a5:9b:0a:64:a5:dd:a4:1d:
         68:01:a2:d1:5c:4c:01:cf:3b:17:7f:79:e0:cb:6d:84:a9:98:
         7e:a0:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:22:21 2025 by rpki-client