Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6851eea0-f84c-39f1-907f-519c1e1d88cb.roa
File:                     6851eea0-f84c-39f1-907f-519c1e1d88cb.roa (raw, json)
Hash identifier:          kygIaIC1t5X6KSzV4UQ5ZrXnIXCF0y9MvxUR/AkxmIE=
Subject key identifier:   A4:AF:F2:53:15:DA:18:D9:4B:21:81:9A:FA:7B:94:12:EE:4F:3B:71
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7853018B3BAACDB927706D0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6851eea0-f84c-39f1-907f-519c1e1d88cb.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.67.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:30:18:b3:ba:ac:db:92:77:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=f46405f6-3305-48e9-a3aa-1dc5351e7e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:70:6b:dd:5b:a9:42:e4:2b:1f:f8:8a:78:
                    f8:a9:14:6c:3c:6c:96:ed:66:8d:84:40:f4:eb:b4:
                    53:01:d0:32:91:f5:b6:9c:1b:90:ce:ca:02:a0:8c:
                    e9:fd:d8:16:f2:ab:18:0e:9c:9d:38:9d:8c:ed:34:
                    80:1c:55:e7:74:fe:66:b0:de:75:69:c7:8e:93:00:
                    26:58:c1:4e:3d:89:5c:fe:65:27:bb:e2:23:d0:1d:
                    db:55:74:94:36:81:29:4a:2c:51:bf:d7:cf:b8:d0:
                    cd:ec:60:7c:32:3b:d5:1c:f2:42:61:68:ae:a4:ab:
                    25:e9:3b:9b:91:6a:53:06:ef:76:02:f3:d1:f5:9b:
                    00:62:84:b3:92:74:5a:37:88:1d:b5:b8:98:48:24:
                    6e:2e:93:35:99:84:bc:14:4c:31:a8:71:ba:41:73:
                    16:e3:a7:21:c1:93:72:ad:2e:5c:de:5f:46:f8:3d:
                    bd:c2:f7:ea:36:f8:77:0a:83:40:9c:42:ce:8f:06:
                    96:9d:b2:7b:31:78:e2:fc:b6:15:57:08:28:16:2c:
                    15:10:97:21:9a:81:5c:ae:17:5e:26:3f:58:ec:3f:
                    2a:19:e2:76:e6:2a:63:fd:08:5e:02:3e:a3:9a:04:
                    3b:13:22:7f:b1:6f:6e:4c:31:1d:5c:fc:c0:48:5c:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:F2:53:15:DA:18:D9:4B:21:81:9A:FA:7B:94:12:EE:4F:3B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6851eea0-f84c-39f1-907f-519c1e1d88cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.67.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:45:99:c9:3b:ea:ef:f9:f0:66:8d:59:44:c1:c6:8f:1d:
         b8:fd:f8:c7:11:e0:92:07:1d:06:a9:3e:05:ac:23:71:da:61:
         9f:cc:a2:53:f5:26:08:2d:c6:a3:c1:1b:f7:60:16:f5:83:71:
         93:bb:65:c8:fb:dd:b3:aa:33:e0:cc:ea:5f:49:32:cd:ea:93:
         a9:04:c7:a3:66:65:f6:d3:56:2c:28:8d:db:a3:53:7a:f9:ea:
         51:6e:b3:45:a5:7b:cf:ee:6f:a5:df:0a:26:61:d4:f1:cb:88:
         63:7f:e0:95:fd:89:9d:1a:64:b9:9a:8a:b4:9e:18:aa:43:af:
         75:ef:c4:79:a2:34:fe:aa:0e:bb:3e:6a:72:e0:74:ef:ea:f9:
         44:4d:f8:c1:c0:46:3c:a9:13:ee:09:69:99:59:b7:74:2e:68:
         ba:ca:7f:c1:ab:e7:73:3f:0a:bb:69:ff:d9:c4:17:44:f8:c4:
         f8:4d:52:49:6e:77:df:cf:99:02:ef:55:fa:a9:c6:0b:86:92:
         73:d0:a1:65:c9:22:99:04:a2:81:c3:b9:f9:55:15:60:cf:4d:
         d5:41:01:59:9d:a6:33:c7:83:c1:3d:98:63:83:fe:1c:d6:88:
         0f:37:3f:c6:71:d7:80:19:23:33:81:eb:14:de:11:60:93:21:
         3f:48:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:34 2025 by rpki-client