Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2177d5f2-77e6-3dcc-8b4d-51d5584aeadb.roa
File:                     2177d5f2-77e6-3dcc-8b4d-51d5584aeadb.roa (raw, json)
Hash identifier:          tC4sw99LW3rTASM9URv3SCWWmMaiRauQGPwGuf7P2Pk=
Subject key identifier:   91:94:8D:40:34:19:B4:95:3E:CF:3B:B3:F0:1E:33:46:A1:B2:89:79
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A51D06FCC695976851957F0C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2177d5f2-77e6-3dcc-8b4d-51d5584aeadb.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.13.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:6f:cc:69:59:76:85:19:57:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=678f4b64-7922-4ff9-b0eb-788615370c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:b9:81:8c:30:84:0a:83:4b:36:f3:16:79:
                    aa:4d:9f:3e:7b:15:cc:52:f6:07:19:42:75:69:f2:
                    a1:40:a6:49:0d:12:17:76:c4:1a:22:96:67:fb:1b:
                    ee:cb:66:4c:4f:b0:9c:30:46:33:3c:e7:a0:e9:fc:
                    9b:12:b9:e6:d0:f6:4c:e4:c3:c5:a1:9d:30:ec:ac:
                    19:5a:c4:6f:57:79:e1:36:57:f1:97:0d:9b:98:06:
                    0b:39:37:12:1d:d7:ed:4a:2c:14:78:77:bd:a1:76:
                    b3:f9:5f:8c:12:81:f1:8c:96:52:8a:bc:8c:f6:5d:
                    6b:63:93:3e:d6:25:ab:22:e3:59:92:de:53:04:7b:
                    70:03:dc:37:a6:15:c8:20:7e:ce:d7:49:2c:52:7b:
                    0c:5b:13:fb:c1:f1:af:e9:58:93:17:1a:81:41:8e:
                    65:9e:1a:aa:da:0e:30:85:a0:40:74:8d:d9:2f:30:
                    eb:db:83:72:08:67:41:a5:44:93:4d:c3:f7:b2:c9:
                    9e:41:31:25:7c:76:28:95:fd:1e:80:2e:f8:fa:40:
                    80:02:ed:4e:30:b0:9a:ff:9c:f9:f2:a5:8e:b5:1c:
                    26:01:a1:ef:af:a3:49:b1:fd:08:3b:56:cf:5f:92:
                    f6:c4:9f:bb:ff:d0:4e:a6:ea:b8:c1:db:99:f7:2b:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:94:8D:40:34:19:B4:95:3E:CF:3B:B3:F0:1E:33:46:A1:B2:89:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2177d5f2-77e6-3dcc-8b4d-51d5584aeadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.13.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0c:20:cc:ee:c0:6d:fc:dd:d4:09:3d:16:13:04:72:6f:50:
         db:a0:10:16:2b:18:7c:e1:a0:c1:a7:ba:b5:cb:c1:28:04:4e:
         ca:1a:93:e5:0b:98:db:c9:bd:05:9a:7a:ac:5d:59:87:39:73:
         d3:8f:1a:7d:af:4d:34:9b:6b:19:ba:58:5f:11:8a:5f:be:d1:
         ce:bf:06:ba:15:f6:41:a9:77:f3:c9:22:d3:60:e3:4e:82:4d:
         d6:68:14:4a:17:26:54:ea:3a:89:02:63:b2:63:af:72:54:7d:
         b1:93:ef:ab:1b:dd:89:a5:f9:78:69:49:b6:59:09:11:ed:89:
         99:51:ef:c1:c6:b0:51:83:54:f8:0c:ce:34:18:dc:c9:1d:00:
         f5:ff:78:62:e1:68:30:c9:24:c1:a2:b6:88:29:fe:0f:16:27:
         e1:62:26:5f:8f:49:db:5b:a0:a2:bf:2f:40:06:ea:73:e4:c0:
         3c:a1:16:c1:cf:4c:d7:94:ba:93:77:57:a9:2a:43:a4:de:e5:
         ac:d6:1f:0e:2e:d3:38:3c:27:31:10:c9:44:f4:96:08:3a:11:
         00:7c:4f:3e:5f:10:c1:9d:bb:4a:65:72:b2:ed:7f:13:9f:68:
         be:4b:ad:e2:4e:2b:67:7e:e2:f7:0e:b7:df:4e:fd:33:6f:8e:
         0c:34:db:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:24:48 2025 by rpki-client