Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7d3bd3c-5bcc-34c6-944a-0d5c68c21d2c.roa
File:                     a7d3bd3c-5bcc-34c6-944a-0d5c68c21d2c.roa (raw, json)
Hash identifier:          hK5zrEpWigi/QpZmfNfhdJIQ/MLT6v2ubXNkngJ2mbw=
Subject key identifier:   95:4C:0E:FA:83:C6:E1:6F:3C:DB:C9:81:DB:A8:33:A7:EA:E0:2C:DF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B153C195BAA209B33C57D5400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7d3bd3c-5bcc-34c6-944a-0d5c68c21d2c.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        34.144.169.16/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:19:5b:aa:20:9b:33:c5:7d:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=4f225e61-6773-473f-baad-a0761c114046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:13:f8:01:3b:b9:01:b8:7d:a5:26:49:63:
                    50:b8:4a:8b:d5:a0:88:40:78:8a:9c:e4:d8:a6:5a:
                    5c:f8:f0:9e:ba:22:5e:42:3e:0a:c6:7b:53:27:fc:
                    13:6e:58:64:e6:4d:8b:d8:8d:61:cf:6b:be:c5:e9:
                    38:68:68:b1:01:5a:a9:b9:3a:f7:f2:d7:8c:63:d1:
                    29:53:2a:f1:f5:fe:e3:e4:40:60:bd:d8:52:37:e5:
                    d5:e1:54:15:0c:59:6f:73:d3:f3:7a:58:9f:e4:6e:
                    86:9d:a9:fc:ee:3f:76:14:48:65:91:12:36:93:fb:
                    53:d8:a6:20:a3:b5:21:ce:82:23:91:06:bd:24:bd:
                    76:8d:f3:08:ef:eb:19:7c:3f:4e:82:9a:41:ad:29:
                    98:6d:de:e6:93:65:1c:81:b1:98:b8:20:65:04:95:
                    a3:9a:12:a2:fd:3b:3e:a8:a6:e3:df:3b:04:ec:15:
                    6a:60:f0:27:7f:22:06:34:d1:bf:f7:70:fd:98:03:
                    b3:c0:da:88:a7:43:ab:53:17:f1:7c:ab:7e:b0:b6:
                    f6:cc:8b:ea:87:2c:46:fe:5a:20:d4:ed:72:6f:75:
                    64:80:86:4c:d3:06:a5:f5:68:c9:c4:5c:77:28:1d:
                    03:ab:17:f7:13:4f:15:33:b5:f5:71:c4:fe:33:cb:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4C:0E:FA:83:C6:E1:6F:3C:DB:C9:81:DB:A8:33:A7:EA:E0:2C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7d3bd3c-5bcc-34c6-944a-0d5c68c21d2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.169.16/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:86:32:8f:59:12:7f:45:cd:8a:fd:d9:81:a8:1c:14:90:3f:
         7b:b8:c7:7b:b3:28:61:71:c0:22:50:c9:48:80:f3:d8:75:71:
         84:40:ef:97:8d:c1:13:ee:30:2b:69:23:a5:70:b9:f1:a8:ff:
         c4:7c:5a:24:09:1f:2c:71:c9:4d:58:4a:a8:38:89:02:ce:41:
         f9:42:2d:bd:36:14:dd:8d:56:32:c5:2c:14:f7:82:04:89:95:
         21:dc:27:02:8b:8a:e7:b9:c9:99:3b:83:22:6b:f9:f3:98:59:
         13:30:f1:df:b0:6a:5a:ed:f4:57:b1:4f:42:54:85:b3:43:0f:
         f5:26:23:88:0c:3d:a9:3f:01:e7:31:0a:46:79:4b:18:80:93:
         33:c9:42:1a:61:1e:86:3b:06:6f:8e:58:ea:eb:82:74:b8:a6:
         87:c0:65:cb:d6:49:6e:05:8a:8f:33:f2:6d:a2:db:eb:39:2c:
         e6:e3:81:24:71:48:47:7b:4b:6e:57:7e:94:3c:9a:66:97:00:
         30:ec:be:53:1e:19:12:07:e5:67:89:12:bf:82:53:09:0f:6a:
         66:2b:4f:4b:50:c5:82:e8:a4:4f:7b:2f:a9:c8:a7:3d:cb:e8:
         de:2f:a9:8c:52:3c:b1:25:47:3e:9b:90:a4:f5:92:40:71:63:
         93:2a:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:27:57 2025 by rpki-client