Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ec37169-6958-34d8-91da-71ce2270fbeb.roa
File:                     9ec37169-6958-34d8-91da-71ce2270fbeb.roa (raw, json)
Hash identifier:          M716oFgjcL3s8OODLIBndw55ZBLRvc9I6x6GowcqfEg=
Subject key identifier:   EB:D6:4F:1A:CB:CF:D8:3F:B3:6A:B4:D9:EB:DA:70:8D:42:60:72:54
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584AB91C058317EE091CF6278A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ec37169-6958-34d8-91da-71ce2270fbeb.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396982
IP address blocks:        34.15.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1c:05:83:17:ee:09:1c:f6:27:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=db91399d-630e-41b9-b275-93c3869f5c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:22:92:e0:c2:a4:d2:17:dc:bc:c5:d0:d0:b9:
                    a6:a0:73:27:8d:b4:a7:57:25:5a:d8:7c:c3:6b:d6:
                    96:b0:46:e6:33:f8:b2:c7:a4:ee:d4:5f:02:1b:b6:
                    63:6e:a3:47:09:81:95:7e:1f:48:68:7a:93:7b:2e:
                    ee:17:22:af:00:58:ce:92:e0:fd:b8:53:07:46:5f:
                    2f:df:4d:d0:51:7f:c7:76:21:a8:a3:ef:a0:38:10:
                    e4:91:89:3d:72:4b:66:a7:34:84:3f:26:84:91:b8:
                    b0:dc:ff:c3:b3:5a:c3:95:26:1b:6a:12:70:c1:cf:
                    c2:4e:7f:a7:d7:4b:97:88:2c:e3:99:c1:76:60:5e:
                    28:d6:8c:f1:80:fe:56:b7:3e:ee:00:99:0b:ef:89:
                    8c:4e:2b:4e:8e:a1:3a:d3:a2:da:5e:dd:fc:28:b2:
                    58:bd:f8:59:7f:06:0b:32:7d:ca:97:36:35:69:83:
                    7e:4c:48:17:f4:13:ff:6f:33:41:13:e6:4b:c8:ef:
                    8d:36:07:de:53:f4:91:82:23:f0:62:64:6e:3b:10:
                    e3:d3:2c:14:8f:15:0d:61:0c:07:9c:0f:33:32:6d:
                    61:9e:f3:76:a8:66:19:4a:69:e0:dd:cd:cf:ae:d8:
                    88:65:e3:f9:ae:25:6d:18:54:6a:b9:c1:80:e3:c2:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D6:4F:1A:CB:CF:D8:3F:B3:6A:B4:D9:EB:DA:70:8D:42:60:72:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ec37169-6958-34d8-91da-71ce2270fbeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.15.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:07:2b:d1:28:d9:9b:23:e0:23:2c:9a:0a:33:e7:22:c2:38:
         c2:4d:cc:ac:ed:04:07:b6:c0:18:0c:20:3b:79:6b:62:d1:a8:
         e1:12:32:aa:15:06:7b:9f:74:50:33:65:c7:45:f9:71:b7:d6:
         54:a6:6c:08:a4:7b:30:f5:95:4d:e0:50:e9:00:9b:7b:ed:84:
         24:28:8a:0a:18:dc:22:59:ff:72:96:12:48:59:1d:aa:26:2a:
         ed:0b:53:9f:98:76:48:c7:48:3d:19:ba:e7:2e:e2:8b:f1:3f:
         5f:1e:ae:96:2f:a4:b4:5f:c6:9e:d4:4e:09:ef:89:89:f2:d5:
         11:91:1d:38:9b:73:ea:74:a3:2e:91:39:6a:61:92:ce:82:4f:
         8d:48:15:fe:b9:5a:81:50:77:d1:b9:7a:7d:80:14:ae:f0:53:
         c9:e0:be:e7:f4:4a:6d:c8:f9:61:e2:54:f9:b1:05:f9:ae:25:
         e7:01:bd:db:ff:4e:67:26:83:2d:37:41:f2:21:62:5c:6b:5a:
         a4:f4:a2:57:64:63:96:80:2c:0e:a1:ea:27:21:4b:6b:16:65:
         c6:9c:4c:c6:0d:68:6c:f1:ff:41:1b:bc:96:53:39:c3:46:f4:
         6f:4d:80:e9:ee:fa:8d:06:1f:e2:ca:f6:9e:2b:94:03:ad:1b:
         e6:f7:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:04 2025 by rpki-client