Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
File:                     e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa (raw, json)
Hash identifier:          YPGblENvvSaMgWRelxRmXmnCkPOXAYzIH0DTDtLOrOg=
Subject key identifier:   C1:73:5E:97:A7:44:A2:69:DB:80:50:5A:C6:E8:B4:92:91:F2:D1:64
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A497051618888D4A7C33B1380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     19527
IP address blocks:        34.2.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:51:61:88:88:d4:a7:c3:3b:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=2ae0da22-cd30-43ea-9764-97e9400b1e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:b8:8e:29:bb:4e:b7:f7:1b:b6:73:f2:69:
                    52:43:d5:b8:69:e8:83:c6:b2:67:77:c3:5b:0b:10:
                    c1:76:47:d9:ee:ef:37:d4:60:dc:8c:c8:78:f5:fb:
                    21:ac:63:0c:c2:d4:b5:4d:52:c9:ee:31:77:7b:35:
                    2c:96:43:f5:1a:87:07:46:38:7b:92:8f:09:ba:f5:
                    89:4a:da:f0:a3:4e:08:26:99:e5:d7:5b:c9:b1:ff:
                    67:9e:e1:79:81:5a:75:37:f0:26:92:61:55:c5:8a:
                    d2:87:5a:02:61:80:95:92:40:cc:0a:b3:02:d8:c7:
                    ec:e8:87:2a:5a:17:d9:11:37:f8:ed:db:b1:7c:b4:
                    c2:4f:30:6f:7e:5f:d2:77:72:7d:78:45:69:6d:c9:
                    2a:af:8b:b2:34:f5:80:21:1e:8e:3d:e1:0d:1f:38:
                    cd:17:9f:5b:74:3a:ae:ed:17:e6:79:3e:fa:17:1a:
                    ea:e4:35:e3:19:05:68:32:16:a0:57:31:be:f4:5b:
                    d8:d7:10:7f:c1:07:96:f4:60:48:53:c6:e6:49:49:
                    7a:38:e2:db:32:0a:db:68:70:11:12:78:7d:4c:a5:
                    34:9c:3c:47:a9:9c:4d:6f:76:35:e9:9c:bc:86:e6:
                    1a:de:a0:c2:d1:17:9b:40:aa:ef:bf:02:ec:d2:ec:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:73:5E:97:A7:44:A2:69:DB:80:50:5A:C6:E8:B4:92:91:F2:D1:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:45:70:7a:4b:55:ad:78:ad:22:e6:b7:61:a3:f4:0a:b5:
         60:c3:89:95:ee:ac:d9:b3:ec:22:8e:50:9d:16:ac:94:0b:06:
         6b:bd:77:ea:a1:0f:52:27:d7:a8:20:0e:a1:99:9a:bf:d7:4c:
         39:10:f0:e9:e2:77:3b:58:98:7a:04:92:91:8f:24:33:8f:cf:
         8e:d9:fc:22:3d:ef:24:6d:98:c6:33:3d:0e:31:32:bf:f0:c2:
         f8:9f:d3:af:ec:ee:6a:08:38:87:79:e2:24:b0:01:81:1b:a8:
         7c:e6:8c:cb:f3:29:03:41:84:d0:00:88:ce:60:36:73:50:e6:
         9a:75:39:30:e8:1b:10:7d:5b:c4:89:a3:1a:5e:7b:0a:07:97:
         90:8d:9c:af:97:d1:38:e5:29:a0:73:76:04:d4:32:f3:32:48:
         24:87:a2:c0:a6:e3:52:20:71:cc:fc:79:5b:87:5c:1c:8f:37:
         5d:39:62:b1:1a:30:99:05:1d:d9:e2:fd:7a:47:21:11:1b:5a:
         2e:da:5e:fc:a0:15:13:21:94:52:d4:4e:ca:12:2d:12:da:51:
         43:62:ac:4c:ac:91:f2:36:90:61:72:12:74:0e:fd:a1:1f:ea:
         a4:e9:41:fa:4c:1d:b7:75:19:03:ee:37:76:2a:04:00:b1:9a:
         5b:16:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:40:11 2025 by rpki-client