Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6df832b4-a48c-3e81-862b-f71bb2752710.roa
File:                     6df832b4-a48c-3e81-862b-f71bb2752710.roa (raw, json)
Hash identifier:          Tq4wmyozEnzSGd7BtRhTi7ZBY6f0naRoMZdZXWTfT80=
Subject key identifier:   C9:58:75:1E:5E:3A:AB:79:C6:B2:94:F5:AE:F1:4B:F1:37:E3:A5:09
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584AA590F1222B1379CE6839BDA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6df832b4-a48c-3e81-862b-f71bb2752710.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        34.191.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:f1:22:2b:13:79:ce:68:39:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=34521514-826f-47eb-9cd0-3224d657a02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e2:a3:dd:2c:cf:e2:f6:66:8f:83:6d:ba:c5:
                    a5:c1:7c:6d:cd:2a:fb:81:52:fa:b5:fd:f5:52:49:
                    1f:4d:fe:7e:17:f9:ff:a2:d9:45:9a:17:fd:dc:19:
                    4f:af:cb:f6:1f:3e:42:98:73:cb:da:96:49:d6:65:
                    70:52:43:7b:b2:41:a0:a6:17:10:ab:36:1d:86:bc:
                    79:1d:61:92:75:48:bf:d5:1b:d2:ab:23:fe:6b:e7:
                    03:14:ef:da:53:36:d4:e0:c6:f1:c1:f6:b9:f0:ec:
                    a4:44:59:97:77:81:44:8e:a5:8d:cd:0f:81:68:fc:
                    7d:35:94:cd:4f:5a:41:02:67:9c:f9:87:32:ea:0a:
                    9b:f0:07:14:15:d9:fb:64:c1:34:6d:bc:bb:51:7e:
                    a8:f6:60:f1:49:f0:0b:5a:14:28:bf:e2:20:c2:85:
                    d1:ed:bf:51:8f:2f:ce:91:24:87:2c:a5:46:c6:47:
                    ec:dd:d1:83:a5:64:57:82:66:1b:4b:5d:75:6c:40:
                    15:e9:90:15:e0:82:f3:e7:a5:ff:22:b4:ac:af:5d:
                    5f:8c:3a:ee:72:a0:df:10:7f:0a:b2:3f:d2:eb:f2:
                    c2:f0:40:29:e6:9b:c8:9b:16:84:01:c2:9d:42:3b:
                    65:b0:1e:54:b6:6f:c7:be:cf:d3:bf:9b:ad:e6:c6:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:58:75:1E:5E:3A:AB:79:C6:B2:94:F5:AE:F1:4B:F1:37:E3:A5:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6df832b4-a48c-3e81-862b-f71bb2752710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.191.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:9f:1d:4b:60:99:03:af:4f:bc:93:3b:cf:12:cd:b6:ac:
         65:7f:bb:46:9f:96:d1:c6:da:c5:30:69:5b:d1:7b:35:a7:73:
         51:6e:47:d0:47:e3:25:54:a7:92:ce:8a:ff:57:ab:30:75:f1:
         80:b4:6d:76:9f:cb:a1:91:ca:23:a6:53:b7:94:17:a7:8f:a6:
         65:6d:da:d1:0a:50:34:9d:08:16:03:9a:cb:09:bb:33:1d:e0:
         ce:21:99:77:ab:64:50:fb:d9:fd:d8:6a:50:40:76:3c:a7:bc:
         e2:c0:d7:19:9b:3c:13:dd:c0:b0:a3:ea:98:1d:72:b0:be:b3:
         98:98:2c:af:15:af:4e:aa:3d:e3:19:ed:95:ad:81:87:ab:d4:
         49:e1:ae:c9:c0:15:f9:e7:36:19:82:67:fb:1b:d7:db:16:c9:
         7a:4e:7b:2c:77:87:54:dc:be:97:a0:e8:d3:8d:72:4a:32:d2:
         e6:04:16:8c:37:dc:7c:61:e7:e0:69:f7:ca:45:de:0d:1d:c6:
         53:10:ed:70:cf:08:d2:24:8c:81:50:36:b9:b7:7d:bf:13:9b:
         de:81:f2:b6:29:77:bc:72:05:70:70:96:60:83:0e:6d:e1:d6:
         1f:ed:2f:a6:21:a1:28:3c:80:2e:b2:53:16:f5:7d:50:06:8a:
         c9:57:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:21:13 2025 by rpki-client