Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50838e06-9622-33ba-a768-864cbd7e7d3d.roa
File:                     50838e06-9622-33ba-a768-864cbd7e7d3d.roa (raw, json)
Hash identifier:          vcebwrmo2Gd9lFaayAhFTDVhlcfKweiqsYRuTtVRZTg=
Subject key identifier:   6B:D0:3A:1E:2A:AD:CA:AD:9A:C1:F1:D0:2F:AE:41:02:5F:28:56:2A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A5335B5B2335F3ECF871C5530
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50838e06-9622-33ba-a768-864cbd7e7d3d.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     19527
IP address blocks:        34.1.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b5:b2:33:5f:3e:cf:87:1c:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=dcf095ff-6b20-4c2f-9e0a-fe330b84daad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:58:e1:a6:2b:6d:90:b4:d1:33:f4:0f:92:
                    fe:d2:e0:db:05:18:8e:00:84:0d:1b:e1:53:41:37:
                    51:d3:2f:73:89:25:97:18:f4:72:98:93:80:93:76:
                    8c:98:eb:68:a2:d6:39:3c:19:4f:23:20:ff:1c:48:
                    f6:57:57:01:1d:ce:d2:e3:a5:9c:a3:5e:b3:f0:b6:
                    c0:f3:c5:51:3c:d3:ba:65:63:bf:cd:47:a5:26:89:
                    07:44:46:02:4f:d0:af:e0:d1:df:03:99:16:5e:33:
                    f0:1b:0b:25:a1:a8:4c:c1:e1:69:e3:cc:9f:03:e1:
                    cb:a0:85:31:e3:0d:e2:e1:d7:2b:ce:b8:18:4a:6e:
                    50:05:3b:12:06:53:31:1e:97:5d:e9:b7:87:4b:55:
                    e9:1c:52:c0:e6:0d:fa:6e:40:6d:80:90:2a:dc:26:
                    dd:97:e3:e2:e6:dd:89:3b:94:0c:e0:eb:f0:96:ee:
                    1f:00:ea:ff:94:e2:ff:da:2a:c4:96:e3:e1:45:6f:
                    8c:a2:bb:e1:00:50:d6:da:1d:6f:0e:54:f0:49:08:
                    06:b3:da:8f:22:62:94:04:0c:16:9e:75:24:04:a1:
                    ac:fc:48:18:b2:0d:66:72:e0:b6:b2:a0:62:0d:bb:
                    71:59:e4:f7:8a:4e:bd:63:92:47:85:0f:51:d1:2b:
                    12:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:3A:1E:2A:AD:CA:AD:9A:C1:F1:D0:2F:AE:41:02:5F:28:56:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50838e06-9622-33ba-a768-864cbd7e7d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:de:42:d2:d7:31:b3:40:4c:64:b0:fb:d8:cd:66:38:02:
         64:09:b0:6c:1a:7d:c3:57:8e:0f:e5:c9:f9:ea:02:95:2b:01:
         11:1b:f0:45:4b:62:92:33:6e:93:20:57:25:09:11:43:ca:65:
         bd:d9:76:d6:6c:98:fa:09:da:49:c1:7f:a0:b7:04:84:e1:1a:
         a6:a9:89:b8:59:da:c8:47:c0:67:4a:85:ee:57:ce:1e:06:ee:
         46:3c:92:40:0a:7e:13:7e:ce:ee:d5:a5:b8:e2:87:2a:06:bb:
         04:c8:79:e4:da:1f:6b:30:41:4e:6a:ed:1c:1c:6b:1c:ee:1b:
         ee:b9:66:7d:f0:09:be:d2:12:4b:d9:9b:25:73:28:48:f6:10:
         a8:1a:24:96:38:f1:3a:f5:32:23:77:3e:bc:ba:ba:bb:6b:60:
         9f:20:d5:82:85:43:3d:71:75:4f:4c:5b:79:10:89:fc:ea:cd:
         bd:80:32:66:01:08:9a:92:8f:e8:dd:62:ae:0b:94:80:48:28:
         66:c0:be:45:f2:1e:fa:36:28:57:6c:e7:95:c1:ca:53:0f:9d:
         7e:e9:49:58:da:e6:d1:31:3a:d1:45:61:f4:dd:40:13:d6:65:
         6b:f6:19:d1:26:4e:76:65:5c:5f:c6:72:28:c4:34:76:da:f7:
         12:7e:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:53:09 2025 by rpki-client