Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2ea3929-4836-3a62-8b4c-883d5c7d44a3.roa
File:                     b2ea3929-4836-3a62-8b4c-883d5c7d44a3.roa (raw, json)
Hash identifier:          MWaFg9y7i7lFAAjVmiH6o7atSo2ESTE19CwjmH9sOJU=
Subject key identifier:   65:84:F8:E9:B4:D9:86:8A:8F:45:BE:78:D8:6D:EC:32:12:51:93:4C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBBF077087708EFEF7CB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2ea3929-4836-3a62-8b4c-883d5c7d44a3.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.66.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:bf:07:70:87:70:8e:fe:f7:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=f8be9e24-71df-4e3b-884e-76676dc7ee9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:9e:e9:65:ff:03:46:74:79:ae:d1:96:b0:
                    d3:24:37:3d:86:ea:88:77:8d:87:4e:63:82:a4:a7:
                    e5:e6:6d:7c:ac:d2:f8:db:d0:f1:ee:69:4a:f6:d1:
                    12:1b:fe:a7:01:4b:72:3a:12:38:0e:bd:9f:68:1e:
                    fe:41:1f:53:8f:fe:40:3a:a1:fa:82:38:51:71:ed:
                    0e:70:d3:69:9f:ed:8e:65:12:21:32:0f:5a:17:69:
                    24:48:ec:7c:47:67:d1:42:51:af:10:0c:c0:68:d1:
                    a7:3f:b5:0c:5b:20:6f:2b:7e:79:c3:65:ea:dd:62:
                    b0:80:3b:96:ab:01:3a:42:b1:64:25:32:4b:5e:2d:
                    ac:4b:51:f9:13:bc:83:70:6d:d9:c0:66:a0:2a:81:
                    b2:cf:3d:11:fe:18:23:ee:33:64:9c:ec:c8:36:1c:
                    84:82:d2:dc:ab:0f:ef:86:5f:67:60:3a:b6:68:cc:
                    45:ee:ff:ae:4d:d6:fd:99:c7:f0:bd:b8:10:fd:f9:
                    fa:13:50:2b:8f:f2:05:31:e3:4d:e0:06:43:2f:ee:
                    83:94:58:26:7d:1c:de:5d:e3:06:8c:db:8a:1d:e2:
                    0a:e7:03:8c:56:42:54:ce:1d:d4:e9:b0:8e:a9:ef:
                    2d:61:7c:7e:d8:a4:4c:e5:13:27:69:bf:60:3a:12:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:84:F8:E9:B4:D9:86:8A:8F:45:BE:78:D8:6D:EC:32:12:51:93:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2ea3929-4836-3a62-8b4c-883d5c7d44a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.66.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:fc:65:a0:18:fe:ee:24:9d:91:f0:e0:d3:94:f6:c4:4d:4e:
         b6:68:d8:e1:1d:4e:e4:9f:26:21:1b:f4:3d:bd:55:77:3e:0f:
         78:1c:e5:9a:d3:52:ed:be:15:75:ab:10:23:7c:a6:e7:21:28:
         01:47:5b:05:5b:41:a0:4a:17:4d:65:59:d3:c8:5d:50:30:20:
         46:26:b0:10:9e:69:7e:50:fb:5d:fe:75:19:5e:03:fb:34:ca:
         6b:04:73:2f:77:1e:4d:f6:76:98:3a:37:aa:da:39:9d:62:a6:
         7f:5a:2b:4b:ba:6a:a3:13:72:d6:bf:e9:b5:f3:70:0b:a5:d2:
         63:eb:dc:29:8e:2d:22:7c:a2:69:1f:98:1c:b6:9a:1c:47:e1:
         6e:5f:51:03:be:bb:33:dd:a0:49:e9:24:4c:19:ec:2d:8a:20:
         4b:a0:2e:4d:da:b9:fc:ab:1d:de:bd:b6:75:17:5b:7a:a8:2e:
         f2:ed:0a:59:64:67:a9:1d:0d:51:04:65:b9:1f:c1:aa:3f:07:
         30:55:21:fd:b0:11:20:ac:e7:b7:9f:94:84:6f:7f:4b:4e:29:
         88:c3:d3:bd:74:ff:aa:26:31:f7:22:20:39:74:aa:2f:6e:c3:
         98:4c:99:42:b6:b3:34:57:34:04:da:26:c7:ce:5e:d9:c7:de:
         43:c9:eb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:36 2025 by rpki-client