Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17dc6810-9244-3a82-8285-1f11106a83eb.roa
File:                     17dc6810-9244-3a82-8285-1f11106a83eb.roa (raw, json)
Hash identifier:          +8KG013fsXH+vS/fVDQpMjz16bZupsjQ9AwopME8yp4=
Subject key identifier:   22:F0:E8:E9:85:05:82:A1:AF:18:0F:E9:A1:D5:B7:6F:55:96:6A:EE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B2E5C51FE9A7BCACC4E3A4E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17dc6810-9244-3a82-8285-1f11106a83eb.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        34.51.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:51:fe:9a:7b:ca:cc:4e:3a:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=6014c6a5-4b07-41ef-91e4-8c1634fbf71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:b2:5e:ab:b4:40:b0:3f:51:28:b9:e2:98:
                    b6:e8:b8:a6:fb:a5:a1:50:20:95:92:a2:13:89:74:
                    ae:6d:3a:54:f1:6b:a9:57:9c:e0:13:fd:85:f2:c9:
                    cd:28:d4:72:37:75:c7:d4:8a:f5:02:89:9f:ac:f4:
                    1e:63:da:ae:f9:c5:f6:ee:f3:ae:20:71:c1:b1:23:
                    98:3c:ae:de:de:59:c1:97:d3:3f:1a:f1:1a:54:28:
                    39:0a:19:33:8f:26:4c:20:0c:14:65:66:84:60:fb:
                    af:5a:ff:91:db:94:0e:08:32:05:18:a6:1d:e4:52:
                    98:f8:f6:88:49:0f:e1:21:a0:61:4a:03:76:56:f7:
                    3c:88:c4:0d:17:93:c8:52:b0:30:15:26:e2:a1:32:
                    f8:06:71:2f:e8:1f:95:2e:45:6a:ba:5d:58:14:55:
                    6d:c0:31:9d:e8:6e:00:25:dd:b6:48:a4:f4:41:08:
                    9f:eb:1f:ab:35:f0:65:2c:fa:3d:1f:1b:03:1e:13:
                    39:a6:2e:0d:43:6e:40:31:41:f0:96:ee:98:1d:fb:
                    6f:6a:9e:28:74:14:69:0d:81:cf:b4:e7:5f:41:87:
                    8b:16:13:a9:96:f3:ae:2d:46:38:05:19:1a:40:59:
                    84:5b:a7:50:fd:31:b0:68:e2:db:d8:e9:c6:7e:3c:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:E8:E9:85:05:82:A1:AF:18:0F:E9:A1:D5:B7:6F:55:96:6A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17dc6810-9244-3a82-8285-1f11106a83eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.51.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:3b:dd:02:b8:f3:96:fd:58:8e:f4:01:02:3a:c8:a7:4b:c7:
         1e:fa:40:93:87:5b:33:13:1a:f7:c6:b3:e4:9a:a3:cb:e0:58:
         79:0a:ba:aa:f1:d0:dc:c8:44:9f:a2:46:36:ac:6f:d5:82:09:
         24:ee:aa:4d:33:6f:3f:c5:15:0a:14:7a:94:59:2a:35:81:99:
         46:26:d8:ea:34:82:4d:41:f9:4a:11:70:e3:e9:c3:18:ad:2e:
         a9:0e:dc:4f:40:ad:9c:70:b6:64:b3:c4:f6:d6:fd:26:53:34:
         9c:1f:42:85:8d:ef:89:aa:99:ea:a3:d0:7e:a0:df:3f:98:1a:
         5a:15:1f:79:18:4c:3d:1f:e1:08:52:6a:79:78:d6:33:7e:f9:
         c0:5f:d5:be:f4:da:4d:be:00:4f:6a:1e:be:ad:59:5e:0c:37:
         ce:c3:7a:d7:92:59:ab:ee:89:c7:05:5c:08:0c:7e:19:e9:f0:
         a6:ad:f4:7b:01:6a:5a:ed:c7:72:99:1e:7e:ae:65:cd:7d:dc:
         de:7c:f2:ea:1f:75:3e:ac:d6:f9:31:e8:e9:30:6a:da:65:67:
         c4:a0:14:5a:16:df:9c:e7:61:77:9c:70:a7:1f:2d:85:ce:9e:
         f5:4f:60:81:3d:49:c3:45:2f:47:82:a9:5a:c4:2d:71:03:f3:
         40:53:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:34:18 2025 by rpki-client