Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa
File:                     c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa (raw, json)
Hash identifier:          TtltPcldOGekhUcXfmBuOAxLEwtgcg1csLGvJfEqmNU=
Subject key identifier:   1F:71:E2:86:C0:B3:9B:ED:5A:23:CF:9F:01:9C:3A:CE:98:37:60:12
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A78541241DCDE8820A5F6600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.65.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:41:24:1d:cd:e8:82:0a:5f:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=71351e6d-297d-4b7d-bd03-6cafe707fcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:98:bb:c2:60:45:ce:66:39:9d:f8:77:83:
                    05:94:9c:df:5a:55:e9:c4:ad:0f:3a:75:c1:5c:b0:
                    92:b0:7b:c7:b4:49:5a:db:e1:b7:75:35:80:15:d5:
                    f5:db:18:76:41:3f:7a:62:6d:dd:16:b1:1a:d0:50:
                    ed:4d:e3:6f:8c:b1:6a:27:f8:2c:9b:9c:c0:0e:ec:
                    af:8b:4e:08:61:ca:93:e1:93:0f:b7:4b:0f:5e:43:
                    13:af:65:19:65:61:bf:d1:7c:41:1f:a9:39:f4:f3:
                    0c:69:56:92:4e:8d:74:16:a6:49:90:6e:f4:61:57:
                    f3:ee:5c:33:ac:d2:e5:29:22:70:57:25:f2:5a:cb:
                    e1:3a:7b:39:39:d6:1d:24:97:0d:d4:69:17:a6:04:
                    09:e3:85:ef:37:b6:7d:d2:15:06:8a:bd:53:72:64:
                    7d:44:48:f9:00:2d:81:b9:6a:ad:65:0c:e7:ba:74:
                    ca:30:94:cc:57:1b:c0:8e:f8:82:3a:23:44:2a:99:
                    c0:51:46:84:98:07:8f:37:eb:ea:0c:e4:4c:47:df:
                    44:a5:6c:e9:36:9f:7c:51:12:cf:7e:32:41:e7:e4:
                    c0:35:32:1a:b7:06:d5:b4:4e:9f:0b:fb:09:32:f2:
                    cb:35:2b:7d:f5:4b:c3:18:bd:b6:1b:d1:32:db:47:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:71:E2:86:C0:B3:9B:ED:5A:23:CF:9F:01:9C:3A:CE:98:37:60:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.65.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:69:a6:00:d3:99:97:97:2c:61:61:71:a7:9e:82:fe:d2:88:
         6a:85:ec:8b:49:34:54:e4:bf:8f:25:43:a3:5b:d3:74:4b:75:
         51:52:74:b5:24:3f:6f:ad:30:a4:3b:1c:70:eb:8f:c9:ce:d2:
         63:6d:2c:44:48:cb:e9:13:f8:32:1d:22:f2:1a:c4:a8:f7:bc:
         ab:9d:bc:6f:b2:88:c3:06:ae:7b:96:02:43:53:be:15:83:c4:
         0a:9d:8e:c8:20:5c:77:3f:76:ac:2a:9b:f2:d0:83:74:1d:63:
         95:ed:0b:7b:86:45:2f:bf:12:32:bb:9d:ae:1a:37:77:bf:b4:
         bc:ac:a6:f0:7a:0a:19:98:d2:b5:35:8a:f8:69:ed:4e:96:e2:
         51:3f:5b:a0:08:37:00:77:1d:c9:0f:b0:1f:61:2c:9a:3a:ed:
         9a:f5:13:d5:2c:d4:63:c2:57:cb:bf:57:62:74:c0:cc:f1:c3:
         8c:68:f7:ff:36:58:f7:e6:76:93:80:45:40:45:ae:cd:5e:3f:
         20:1d:2c:1c:7f:ac:e4:1a:85:47:59:53:0b:de:07:1b:d6:15:
         72:60:7d:f6:2b:62:c5:d4:23:6c:fb:fe:d8:b4:76:ba:7f:80:
         0e:c1:d1:40:75:08:87:9a:3a:9f:13:aa:ba:7d:8c:bb:92:6b:
         dc:16:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:04:02 2025 by rpki-client