Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a769408e-6814-3f52-8303-450cee7379a2.roa
File:                     a769408e-6814-3f52-8303-450cee7379a2.roa (raw, json)
Hash identifier:          /EaqUVvzGgTkzVA1Sqh1larJl2zTddt/mos+oi4Z6n0=
Subject key identifier:   EA:CA:42:4E:26:79:B8:9C:14:2B:A8:18:DA:B1:5F:F9:67:B7:BA:C6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB8E2AF9E93F637B795900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a769408e-6814-3f52-8303-450cee7379a2.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.125.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:8e:2a:f9:e9:3f:63:7b:79:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=60406160-bb36-40b8-9408-873eae2db1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:62:a8:f8:8c:91:f0:dd:14:2f:0b:ad:42:
                    74:e8:e1:79:14:e8:2d:0c:ae:93:43:e3:e4:51:1f:
                    87:14:fc:63:24:7c:45:1f:5d:f2:60:d5:58:ec:2b:
                    49:e2:4b:1c:81:37:4f:ac:3e:ca:fa:67:e4:cf:f3:
                    77:4c:11:75:09:49:fa:e3:2b:eb:f1:51:0a:83:2f:
                    85:60:fb:ac:04:da:a3:15:c1:d7:0f:33:54:af:f3:
                    f4:5a:16:b6:1d:ce:a8:9d:95:fe:8e:97:79:3b:36:
                    62:7f:28:d3:e0:c5:b9:cc:de:79:ab:e2:08:36:2d:
                    25:5a:86:34:d0:85:18:e6:e0:bb:d6:5f:23:6a:45:
                    33:24:17:cd:5e:f4:3a:c7:c0:02:76:51:bc:70:69:
                    ed:8d:0a:d5:98:cb:04:ec:fb:33:70:27:c2:31:ef:
                    35:a0:7c:4e:cb:b5:3c:74:69:5f:8d:e8:79:49:2a:
                    7e:5c:67:54:54:b9:42:30:be:96:04:31:a7:00:2c:
                    a8:a8:db:67:3a:03:c8:66:2a:2a:b2:41:15:9e:5e:
                    6a:b3:18:a5:71:4b:96:04:37:22:bf:55:ca:3f:50:
                    a8:3a:55:b7:bd:79:db:9f:99:7d:16:f4:d8:2b:7e:
                    65:a3:c4:c3:f8:26:d6:09:ae:d8:c6:5f:25:70:b2:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:42:4E:26:79:B8:9C:14:2B:A8:18:DA:B1:5F:F9:67:B7:BA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a769408e-6814-3f52-8303-450cee7379a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.125.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:6c:04:90:7a:49:7c:3e:17:73:c3:72:88:dc:fe:72:b8:
         de:53:17:ed:5a:ad:2b:ae:ef:5d:da:8c:4c:cd:85:0f:4c:4c:
         88:ee:d4:5a:0e:03:4d:f8:98:53:2d:81:83:e2:0d:f8:52:6a:
         93:24:78:28:02:85:40:cb:0d:0c:7e:75:87:2d:d1:e2:22:12:
         7a:5a:08:98:6f:8d:b6:fd:c1:33:14:91:3c:aa:64:0a:43:4f:
         1c:40:13:6f:f8:3b:13:cd:cb:0d:dd:f3:75:b1:d2:1b:fa:bb:
         c1:5c:86:2b:c0:f2:6a:0b:b9:4c:b1:fc:90:2f:4b:77:ba:4e:
         78:35:bc:d8:eb:22:b8:be:66:24:9c:75:2f:d5:b5:fd:c8:c5:
         73:53:68:2c:98:8d:c2:cf:f8:48:3b:54:3a:8c:68:06:ea:7a:
         05:63:59:05:d1:b2:7c:94:6d:5b:a4:ae:b7:09:6f:cd:1b:bb:
         4d:bd:87:5b:c7:de:1d:90:22:68:88:69:0e:87:bb:28:71:b4:
         17:7f:89:a1:b3:ac:f4:d9:3c:fa:3c:9f:16:3f:47:7d:4a:73:
         e1:74:b0:ac:93:69:d0:a9:66:7c:77:aa:68:7a:c6:e3:e2:24:
         c2:89:fe:ef:3e:d0:eb:bb:d7:1f:b3:1e:7e:7d:61:97:dc:38:
         a5:d6:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:33:35 2025 by rpki-client