Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/34b149c6-3bbd-325b-9afd-df69a05277bb.roa
File:                     34b149c6-3bbd-325b-9afd-df69a05277bb.roa (raw, json)
Hash identifier:          SswRzoxOZD2REEOZ1twyLteqnjmWkPfHeKrCfr8sO2U=
Subject key identifier:   DD:48:62:EB:A2:BD:89:A5:18:98:EC:C2:3F:53:2B:46:16:9C:3E:EC
Certificate issuer:       /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Certificate serial:       010D0C9F4328584B5DD1E2408684C37BF3CED32A
Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/34b149c6-3bbd-325b-9afd-df69a05277bb.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     22379
IP address blocks:        134.65.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e2:40:86:84:c3:7b:f3:ce:d3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=ea1116e7-e086-4e24-a2b7-cbe82d14c63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:5d:d6:49:d4:0b:56:24:7a:fe:9c:06:79:
                    0a:0a:89:94:5c:68:9f:e4:fc:5e:c4:ee:21:de:67:
                    15:6c:ad:18:68:19:eb:ae:d5:50:45:b6:25:fd:32:
                    de:fb:69:ce:02:9b:b4:07:8c:11:23:2a:0c:d4:b0:
                    e9:9e:a6:7c:7e:2b:4d:a6:c0:6e:96:2e:02:56:76:
                    19:1c:56:9f:2c:93:17:2c:f3:8d:aa:16:db:82:34:
                    ec:68:52:ea:4f:9d:42:bf:23:b8:fa:05:e6:f2:e8:
                    9d:5e:be:35:58:ba:e1:c2:02:02:b7:7e:65:28:74:
                    f1:8f:9c:09:97:bd:f1:59:6f:da:4b:40:31:19:26:
                    06:47:2f:ce:9d:4b:44:2e:66:b1:d4:04:70:06:27:
                    dc:b1:28:79:a7:cd:e5:0e:42:7b:07:9a:6d:8a:45:
                    6b:38:24:8c:c5:df:2b:51:e3:94:06:dc:0a:b3:9f:
                    5c:22:d1:50:d8:03:b7:19:07:3a:64:3f:fe:08:bb:
                    df:78:30:b9:56:72:8c:04:90:d0:e5:a3:3f:53:58:
                    75:b1:1c:4c:e4:2b:0b:de:be:ca:8a:28:2b:25:3d:
                    02:67:b4:c8:c3:68:1a:48:37:17:2a:07:74:69:5f:
                    6f:08:1d:71:ec:02:02:c0:71:ae:8b:7f:53:ae:6e:
                    e2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:48:62:EB:A2:BD:89:A5:18:98:EC:C2:3F:53:2B:46:16:9C:3E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/34b149c6-3bbd-325b-9afd-df69a05277bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl

            X509v3 Authority Key Identifier:
                keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:ed:70:55:b7:77:ff:93:d8:d9:9a:bd:19:f6:ff:b2:6d:
         c6:52:a4:69:fb:6a:52:82:58:16:0b:6c:17:ef:bc:e1:20:42:
         7d:c0:d8:e6:ee:02:87:45:ee:91:73:f9:63:fc:64:f9:8c:79:
         9b:48:f1:ab:b6:0b:62:20:a9:3d:72:97:35:ee:b8:15:aa:a5:
         4d:1b:de:ea:ec:39:04:d4:d0:8b:2e:ca:1d:4b:18:e7:19:30:
         55:c6:0b:42:a4:f7:88:5b:13:e6:a7:a0:09:41:8e:0a:7e:f8:
         8f:8a:f1:f2:94:64:1b:2e:6a:ea:00:07:f4:9b:68:37:0c:4d:
         f9:52:66:d5:7c:ab:46:b4:60:9c:6b:a3:38:af:e4:de:38:06:
         3a:1c:5c:a7:b7:b2:de:0d:b0:e8:1f:1b:01:ee:2c:b1:b8:a0:
         b0:46:d4:2a:a5:54:99:51:d7:01:73:29:5c:b9:2f:08:34:28:
         4c:cb:77:86:4e:5d:3c:0e:1a:fa:76:fb:86:f0:e5:3d:88:7b:
         fe:48:c1:a0:c5:66:4d:e0:16:fe:2c:f2:f8:21:a3:fa:ed:20:
         ca:ab:f6:a8:76:cc:96:11:61:2d:08:53:62:3d:03:5d:31:7b:
         12:a9:4c:13:1d:20:67:de:e2:ee:00:7f:2c:f1:cc:2c:19:bb:
         82:e5:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:09:11 2025 by rpki-client