Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd246aab-3a9e-3f48-aacb-ea404d03848b.roa
File:                     fd246aab-3a9e-3f48-aacb-ea404d03848b.roa (raw, json)
Hash identifier:          xqciGNxX/rl3IJTH5MFvawAR0bIL2WIKgeMO+FbiKEI=
Subject key identifier:   75:47:45:D6:EB:FA:48:4B:BC:36:85:7A:7A:FB:4F:34:58:2B:1E:D1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBCDF5C67F9418E0FB4AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd246aab-3a9e-3f48-aacb-ea404d03848b.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.83.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:cd:f5:c6:7f:94:18:e0:fb:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=63011095-30eb-4880-9fca-5ef0809e98a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:df:fd:15:4d:f0:6b:7c:7f:68:66:41:7b:
                    7e:22:b9:0a:57:32:63:91:af:ac:ba:c8:82:9c:57:
                    f0:ce:43:77:c5:1a:97:5b:50:71:e1:2a:d1:0e:9d:
                    e2:76:72:bd:df:b4:c7:e8:4f:aa:ba:1f:14:ff:c9:
                    38:25:98:1c:dc:05:fd:59:ab:eb:ff:17:35:95:f8:
                    62:ec:e7:42:2a:0d:e2:68:db:81:81:a1:9f:3a:35:
                    4d:e9:00:4c:45:7b:a7:d5:e2:4b:ff:95:0d:8e:33:
                    59:86:88:2c:fc:0e:70:53:3e:06:3c:90:70:a6:23:
                    09:51:b2:5b:a1:3d:b4:85:97:f0:f1:e7:df:aa:bf:
                    15:e6:28:ba:9e:1c:b9:bd:8b:38:a6:46:ba:76:fa:
                    8e:4d:f9:69:06:76:70:fd:78:fc:fc:d1:f0:11:f4:
                    c7:65:e1:c2:b1:d6:35:b0:45:29:48:0a:d3:1f:7f:
                    54:a3:7f:40:94:44:5b:a0:22:82:2d:98:76:32:57:
                    9e:91:8c:43:4f:d3:0b:b4:12:13:b5:67:74:57:0a:
                    55:8e:6b:f3:6e:3f:ad:ea:84:60:bd:9f:06:4c:f6:
                    b2:2d:a0:a7:40:6b:04:a8:ea:da:f6:bd:8b:e4:92:
                    46:1b:df:f0:07:24:65:0f:77:e2:de:c8:b2:d3:e9:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:45:D6:EB:FA:48:4B:BC:36:85:7A:7A:FB:4F:34:58:2B:1E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd246aab-3a9e-3f48-aacb-ea404d03848b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.83.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:ff:c3:ae:cd:2f:24:4b:35:4c:3a:a8:02:dc:ae:49:bc:
         10:af:13:92:9a:fc:18:8a:24:9d:58:83:ef:bc:20:6d:8b:b8:
         8b:49:ac:86:f6:7f:f3:6c:a5:8a:c7:db:8e:df:c8:c8:24:7d:
         d6:47:53:32:a3:3f:4e:14:5c:88:d2:1a:49:d0:18:41:5d:4a:
         f8:8d:2c:5e:37:f2:62:4c:b4:2a:2f:cb:bf:78:03:de:69:14:
         85:2e:c4:a6:d5:5c:6a:86:66:2a:d2:44:97:72:e4:47:e2:e2:
         8b:f0:76:21:63:3e:c5:75:03:4e:52:55:de:e2:27:dd:2a:da:
         c7:0d:86:90:1f:c3:31:b4:dc:ed:dc:d3:f8:8a:13:2a:b8:ef:
         81:2b:5a:a3:c6:ad:7d:b2:71:01:50:f8:5b:d8:14:c0:7c:5b:
         f2:20:82:e8:45:db:c2:27:52:b1:e3:91:70:e1:34:c6:ea:8c:
         ea:41:18:07:4e:e3:2a:5f:9c:99:95:18:02:63:1c:3f:05:9e:
         08:d4:26:24:aa:d6:5f:21:90:ef:08:ee:d6:36:da:31:89:e9:
         86:72:d8:0f:6d:52:5e:5f:3c:36:87:a6:1c:b3:49:b0:2c:06:
         fd:7d:9d:00:ce:2c:dc:5b:78:ce:f4:99:ac:f4:61:26:0c:e1:
         c8:5e:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:19:51 2025 by rpki-client