Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47599035-0495-37d8-b169-84eeb60f9196.roa
File:                     47599035-0495-37d8-b169-84eeb60f9196.roa (raw, json)
Hash identifier:          j25uaZ071SvM0J6y/Wl2jc6wFA5OzyOVCmp6jgYyFBo=
Subject key identifier:   6D:70:37:57:D1:2B:28:78:EC:60:00:B7:B0:36:F8:9A:28:07:82:55
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B28C6EA1BFD50D3F884B59940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47599035-0495-37d8-b169-84eeb60f9196.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        34.1.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:ea:1b:fd:50:d3:f8:84:b5:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=74c4abe7-5e4c-4e58-b2aa-7c8fbfc7fbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:37:f6:92:1c:ad:ff:a1:9e:e6:5d:18:44:
                    2b:ef:0f:61:9a:d3:d9:7f:39:44:cb:9d:cd:fc:02:
                    72:4b:b3:1b:ef:9f:df:85:fa:2f:8b:ee:35:30:98:
                    a2:6a:48:1c:cc:62:1d:4d:6f:5c:7a:07:ad:a0:a1:
                    3e:75:c5:3e:f1:20:f0:11:85:9a:03:b8:d3:e0:3c:
                    a8:ab:40:aa:37:be:dc:57:00:ca:05:4f:af:ed:d9:
                    bf:31:7f:c2:9f:84:70:5a:ca:74:7e:05:fa:b1:fa:
                    22:7d:f7:1b:08:df:ed:89:f0:00:5f:b0:44:c9:6c:
                    66:17:f7:50:f7:e4:3c:e0:ed:8f:1c:50:a9:c5:95:
                    a0:43:86:a0:af:2f:c4:8b:be:fc:9e:ac:dd:e7:a9:
                    4b:cf:7d:95:b3:83:a4:2b:ed:d3:c3:0a:89:a1:db:
                    26:70:46:f9:af:1f:f3:a6:ec:a8:e9:83:4f:ac:5c:
                    92:71:df:7c:04:1a:7b:b0:0f:a6:c6:cb:8e:c2:c5:
                    a9:d5:a9:c6:eb:aa:60:30:c2:3b:9d:db:a5:1f:f7:
                    a3:7e:7f:55:b9:5b:ef:43:00:de:d6:5d:6d:be:fa:
                    f7:50:b3:09:48:ca:78:f8:b7:56:8e:b7:ab:61:ea:
                    68:9a:36:36:ed:ab:87:f1:48:f6:b0:e3:08:c9:9a:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:37:57:D1:2B:28:78:EC:60:00:B7:B0:36:F8:9A:28:07:82:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47599035-0495-37d8-b169-84eeb60f9196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:22:e5:01:66:6c:6d:d1:0a:49:86:8b:20:fb:3e:8e:08:
         e4:77:de:c4:18:5f:e4:b2:6f:95:2d:8b:70:58:7f:7b:d4:1c:
         6f:ad:8d:7b:af:04:e0:51:b3:69:ba:fa:38:23:23:ce:dc:12:
         9b:8f:99:e4:aa:23:8c:b3:0d:c6:29:4b:34:6f:e9:0e:24:ac:
         a9:ee:6c:0c:72:fd:db:17:cf:5c:5c:f0:5d:5a:c6:db:03:8b:
         31:a1:64:15:e6:d6:d7:60:7e:c2:56:b8:82:77:10:5d:16:ca:
         63:43:ab:0c:99:5f:5d:54:31:20:5e:16:93:3c:8a:e5:96:2c:
         d7:e1:67:7c:b7:6b:53:e8:7a:09:73:df:50:4b:4c:65:86:f0:
         1f:59:19:0e:77:a3:98:e5:23:b1:c0:96:1c:08:85:5f:bb:49:
         cf:65:a4:d3:00:66:35:15:7b:31:8c:2e:12:df:aa:c5:aa:b4:
         8f:8b:9e:dc:a5:be:af:a2:39:9b:eb:a3:b4:c2:6a:0e:6a:50:
         6b:aa:65:45:d0:3d:7e:11:0b:73:e2:d6:e2:ee:54:a6:f4:3d:
         3d:6d:3d:4d:18:62:39:cd:65:dd:04:64:f4:4d:51:42:9e:cf:
         8b:f7:ad:e8:13:22:af:f1:52:fc:2b:8b:91:a0:b3:62:b4:7e:
         0b:4e:91:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:08:49 2025 by rpki-client