Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a1b3315-7336-34c0-b3dd-b1110441a1f1.roa
File:                     6a1b3315-7336-34c0-b3dd-b1110441a1f1.roa (raw, json)
Hash identifier:          eYbK92A069NrytF+nIIr6TCRhg/6/KDlc45sOsfvVcE=
Subject key identifier:   B7:6F:95:FB:62:70:67:70:60:14:78:85:3F:1D:D1:33:91:5B:0A:8F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584AA590E8F2FD6A3CF47F6A5780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a1b3315-7336-34c0-b3dd-b1110441a1f1.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        34.191.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:e8:f2:fd:6a:3c:f4:7f:6a:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=03a22dc7-892a-40d0-9b93-10d7558c8279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:ff:0f:87:68:ac:e6:58:d1:15:39:a6:31:
                    ae:43:9d:5a:b8:70:d0:7e:3b:97:bc:9e:37:71:64:
                    34:df:62:41:62:b1:89:de:cb:fe:32:31:85:e7:d7:
                    76:7f:ac:80:62:cb:9a:8a:90:03:57:8d:5f:d6:9d:
                    82:14:e8:7f:cf:5e:bf:2a:bb:9a:f9:66:69:3b:df:
                    1a:6e:00:78:29:b7:d7:3c:89:8e:25:a5:1e:36:81:
                    99:b4:86:de:34:e2:29:23:db:8e:a7:8d:63:0d:af:
                    10:a8:be:f7:b2:30:e7:82:f3:76:e7:b5:fb:bb:b9:
                    53:72:05:74:09:61:6f:2b:d6:4b:88:e5:2e:ec:6a:
                    d8:e2:d5:65:77:02:39:0e:43:be:3b:a3:fb:e0:21:
                    a4:28:3c:88:79:11:ed:e3:23:19:94:3f:14:b0:1e:
                    52:05:cb:30:07:2c:b7:91:f4:0e:8d:d1:c8:7d:0c:
                    33:42:74:c2:a7:6e:cb:c0:39:22:46:9b:df:b9:bc:
                    7b:ef:82:c2:c8:33:9a:26:8b:ba:be:a2:be:19:bf:
                    84:1d:96:54:a7:15:b0:2b:5b:65:f4:1f:b0:e1:42:
                    32:8e:d9:84:c9:4f:f4:bc:cf:07:2e:8e:8d:ed:4c:
                    ce:dc:e7:5f:5f:da:1d:25:46:6b:59:fe:5b:3a:9d:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6F:95:FB:62:70:67:70:60:14:78:85:3F:1D:D1:33:91:5B:0A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6a1b3315-7336-34c0-b3dd-b1110441a1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.191.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:3e:c3:58:1e:2f:09:5e:25:16:df:20:90:bb:c3:b7:50:
         a4:6d:ad:7d:65:90:51:cc:cc:1b:9c:ed:98:ca:79:49:88:b1:
         a7:fa:3a:87:32:0e:68:2d:53:eb:91:58:91:0c:09:8f:80:f0:
         bc:7a:e2:f9:1e:08:fe:b7:1b:e5:03:68:fd:52:d5:dd:9d:75:
         fe:8a:91:2a:a6:cb:e5:e5:79:fd:90:2f:d3:aa:02:7a:26:ef:
         f7:b3:02:21:34:7f:0c:fd:3e:75:1a:87:13:b3:78:7f:e3:2f:
         1e:18:0e:58:8f:4a:30:f5:d9:13:f3:51:d5:6e:75:20:86:a7:
         3c:c7:78:e0:15:6c:f1:4d:a7:cb:ec:5f:89:f3:c1:a0:2d:d4:
         52:f5:70:49:b3:3e:ba:31:62:b4:da:36:ca:f9:7c:0e:64:a3:
         0f:1b:db:bb:1a:65:1f:a9:f1:48:f0:2f:40:4c:2c:91:f5:00:
         de:92:50:41:42:bf:de:e0:77:da:c1:26:5c:87:64:36:75:a9:
         61:55:03:f6:87:96:09:e6:d4:65:ad:f8:0b:b1:f1:da:bb:e4:
         17:77:88:d4:cf:3d:5e:e6:38:57:b5:e0:24:8e:68:9b:6f:1e:
         c0:df:20:de:f3:bb:c7:46:63:58:b4:74:e9:9f:d4:91:25:c9:
         6a:8f:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:11 2025 by rpki-client