Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81c89afc-5b29-3f9c-89d8-f47b5852725e.roa
File:                     81c89afc-5b29-3f9c-89d8-f47b5852725e.roa (raw, json)
Hash identifier:          QXFQ+2tk1yAaZYXQGLQWw6sTbhPyTn9LuQmZDlCcSfg=
Subject key identifier:   AC:85:ED:91:76:2F:41:91:9E:77:88:8A:9F:09:02:3D:59:1D:45:E8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A5335A4228E7E6113F5A5FDD0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81c89afc-5b29-3f9c-89d8-f47b5852725e.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     19527
IP address blocks:        34.2.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a4:22:8e:7e:61:13:f5:a5:fd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=8a83c4e6-2fa3-4e8f-92da-28dd42c0b999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:98:bf:a5:39:b6:e7:65:e4:f1:ef:1c:74:
                    b4:05:07:7a:ac:86:ce:1f:97:68:76:45:c8:63:47:
                    62:05:e6:b9:36:91:e8:e8:6c:d8:4d:3a:62:d4:6f:
                    f5:c8:7a:e4:90:e0:00:06:9e:7f:5e:5a:cb:5e:19:
                    2e:03:a6:99:22:f5:77:ae:1d:fe:5c:ff:b8:49:7c:
                    9a:c6:9d:7b:6b:a3:b9:10:a0:68:59:53:bf:02:02:
                    ba:57:13:4f:be:d0:de:31:2b:35:53:e7:e3:56:a8:
                    31:cd:29:68:09:f1:02:1e:cc:a6:f9:0f:08:3b:85:
                    a2:64:ac:63:72:33:b3:b7:1e:d7:94:b3:e1:3e:04:
                    a6:27:fa:82:d8:f5:82:c3:1a:3b:b9:ad:e1:82:04:
                    16:d7:57:d6:23:33:3d:ed:3c:c8:ef:94:42:04:01:
                    76:60:cf:b9:64:8f:1d:0f:04:32:89:9b:f9:ea:2b:
                    cf:f9:54:ef:65:30:74:0f:f6:5f:f2:e5:2d:29:b1:
                    58:69:bf:73:3e:3b:42:db:f1:87:56:6d:be:06:f7:
                    fa:36:d3:aa:19:a9:78:5b:21:71:f3:00:70:63:00:
                    08:bd:97:30:ee:08:ba:0c:46:70:c3:1e:cf:71:06:
                    46:bd:6c:de:cc:c0:79:d1:ed:ea:68:64:8a:a8:bc:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:ED:91:76:2F:41:91:9E:77:88:8A:9F:09:02:3D:59:1D:45:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81c89afc-5b29-3f9c-89d8-f47b5852725e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:1a:3c:c6:81:2c:30:8e:4e:4e:70:9e:1a:13:9a:01:94:fa:
         ac:9d:ea:09:59:70:d2:a0:6d:49:77:a0:f4:9c:b0:36:b8:19:
         ce:22:a9:86:da:55:0b:d1:3a:aa:d3:ad:12:2e:fd:02:9f:e4:
         f3:5f:63:6d:68:4b:86:be:91:07:14:16:1f:93:d8:b6:f3:d2:
         f6:3d:f4:5a:56:39:84:e4:c7:b3:98:5d:5b:cb:68:55:2f:60:
         40:c1:29:2a:53:26:a1:15:20:26:c6:f4:d6:40:bf:b8:f8:9d:
         8f:29:57:30:c6:ab:a2:4a:3a:70:ca:dd:ea:e5:39:65:be:fe:
         48:de:d4:03:91:df:ef:1c:37:d8:cc:f8:09:78:2b:1f:46:e0:
         1a:ab:63:4d:17:5f:fc:37:b0:89:39:62:54:09:83:dd:62:0b:
         93:67:a3:16:6c:9a:0e:c1:7f:46:31:b6:96:35:fc:c6:8d:77:
         2b:c0:28:f4:e4:e1:41:96:15:74:55:df:76:87:4d:58:85:c1:
         e1:de:58:15:1e:ac:a0:f2:b7:6e:60:0b:12:30:ea:61:b1:a2:
         11:3b:96:8c:44:ac:5b:31:77:d8:b3:35:19:26:67:c5:b8:a2:
         16:15:2e:2d:b6:ba:37:c1:de:72:8c:cf:fc:83:9e:90:cd:84:
         41:77:3f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:29:39 2025 by rpki-client