Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa
File:                     b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa (raw, json)
Hash identifier:          wmvaRkusoM8kQ4YphLntA/51uvCGHhLPmf5Cyl+xN70=
Subject key identifier:   4D:22:D6:8F:7F:7D:00:69:0F:91:62:77:B3:05:F3:8A:DF:7C:59:A8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A480AEC5B612728F440E13600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     19527
IP address blocks:        34.1.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:ec:5b:61:27:28:f4:40:e1:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=99b51cf2-ab09-44c6-829d-f3b1169ae0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:12:28:78:da:b2:ad:58:17:74:c1:fe:bf:
                    2e:51:10:93:27:1b:b2:3a:70:a8:34:a6:66:70:e4:
                    f1:45:5f:38:6c:df:e1:1e:dd:a7:55:6c:e8:d9:a8:
                    3b:b3:5f:7f:2c:53:91:27:22:0f:e2:4c:fd:b6:c3:
                    fa:b0:8f:02:51:88:7b:31:39:d3:d9:fc:89:6e:0b:
                    1c:a8:d9:50:56:57:53:8d:16:fe:94:85:e9:17:42:
                    a6:24:d1:ce:9e:a3:26:71:81:65:6b:f6:ad:3d:45:
                    89:bc:d8:68:4f:64:c2:4c:15:75:1e:ba:e2:2f:09:
                    5e:cd:82:51:23:12:9c:d7:e2:38:7c:fb:98:13:92:
                    01:3e:31:45:fa:89:a7:15:d9:83:9a:75:b3:1c:d9:
                    88:de:e9:9a:04:c8:46:d0:7e:65:c5:f7:69:74:8a:
                    28:7d:ba:dd:28:f5:ff:57:0d:f8:74:ef:5a:f0:09:
                    2e:ca:cd:99:a1:7d:9e:de:1f:df:ce:e7:d1:a2:cb:
                    71:db:f1:99:86:f7:05:52:48:3d:a7:d8:90:19:4b:
                    fd:89:21:d8:8c:91:02:46:8e:9d:49:67:d7:b7:14:
                    7d:8d:03:85:77:81:36:fa:c7:2e:1c:c6:f1:2e:b0:
                    ad:23:ab:30:52:f8:30:ae:4c:2d:1a:12:4f:5c:7a:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:D6:8F:7F:7D:00:69:0F:91:62:77:B3:05:F3:8A:DF:7C:59:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:02:12:60:94:e0:6d:0d:c1:2e:bc:b8:01:53:38:1a:af:cb:
         64:dd:35:69:63:21:e1:c6:6e:bc:88:07:45:e2:af:c3:54:42:
         95:f2:da:48:4b:49:a5:d7:ef:d9:e4:d6:0e:a1:61:e4:0f:e6:
         54:d7:94:de:a1:36:9e:18:07:6b:09:70:d6:a1:55:21:23:33:
         55:44:3c:44:43:df:a0:e8:d5:b1:84:ad:cb:de:b4:04:4a:0c:
         bf:86:4c:05:64:6e:47:94:fc:16:b8:4d:3f:c0:ec:76:87:75:
         4b:e1:99:c2:8d:90:91:1e:68:36:6b:f7:c6:6f:35:ec:b8:e4:
         c3:88:52:0c:67:ee:dc:84:6a:d1:7e:e5:10:b8:68:e9:43:d3:
         d9:7e:a2:1b:f0:e7:95:89:08:18:e8:ea:95:dc:d3:8a:c2:38:
         bb:24:82:f0:ab:ad:a7:21:1d:83:82:95:a0:3b:11:3d:4b:23:
         e2:eb:f8:67:51:38:6b:46:4f:65:86:28:0c:05:48:e2:3c:a5:
         b5:e6:48:a2:6b:cf:51:9c:81:2c:03:68:45:ba:41:de:e0:c6:
         7d:78:fd:98:92:72:31:80:fe:07:2f:4d:77:74:40:d2:15:fa:
         cd:b2:b4:53:ea:4b:2a:f3:89:69:13:d6:59:2d:e8:9d:d5:24:
         fc:34:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:38:41 2025 by rpki-client