Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f618a155-a386-38b2-b4ff-fe8a3d850900.roa
File:                     f618a155-a386-38b2-b4ff-fe8a3d850900.roa (raw, json)
Hash identifier:          w6bQE/FuM7B+0dSlig+DqAmgl6n+rmGQTW4g9ZsNqsw=
Subject key identifier:   A1:44:60:25:88:E1:F3:D7:A1:27:B1:A3:74:AC:97:C2:13:BD:F6:D6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584AD23C31EAD48EBAD5268500C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f618a155-a386-38b2-b4ff-fe8a3d850900.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        34.7.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:31:ea:d4:8e:ba:d5:26:85:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=65dd41fd-b350-4e75-a8dd-874df1772507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:fe:8c:91:41:5f:97:8e:cc:81:aa:5e:ae:
                    03:d8:a4:21:f6:3a:a4:24:ae:f4:81:94:4e:93:d4:
                    b3:d4:64:ef:2a:ed:0d:a2:69:93:58:ef:a9:d0:14:
                    a0:ae:b2:6f:ce:ee:93:82:85:b5:ce:f7:09:8e:8e:
                    c2:a0:ef:d5:e9:1b:44:40:1c:23:c3:0e:fb:e9:ee:
                    f5:44:1b:d0:f6:5d:45:31:a2:80:5e:18:78:d9:6a:
                    61:9d:aa:c4:49:d5:e1:d0:fb:39:40:21:10:16:e1:
                    3b:e8:59:71:4f:32:16:36:46:9a:77:75:36:98:10:
                    b6:78:9e:62:88:7c:99:05:52:5b:f4:ec:eb:0e:d9:
                    fc:82:df:8d:bd:8b:a3:1b:aa:13:31:0e:a2:ff:2e:
                    3d:20:37:00:86:73:f5:c1:00:5a:db:91:43:0d:02:
                    c0:4b:6f:2f:6a:9a:1c:3b:0b:ee:63:aa:98:45:20:
                    fa:6c:27:86:82:8b:c4:13:50:e6:67:2d:67:e5:d8:
                    96:8d:fc:61:11:1f:e3:31:71:bb:d7:b7:f5:f4:9c:
                    04:1a:c0:72:d6:99:62:68:71:bb:06:fc:49:d3:11:
                    1c:72:cd:76:0c:86:e5:ca:11:80:dc:6d:65:ac:01:
                    b2:00:43:0c:af:ac:83:6b:d5:95:d1:9f:0c:3a:54:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:44:60:25:88:E1:F3:D7:A1:27:B1:A3:74:AC:97:C2:13:BD:F6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f618a155-a386-38b2-b4ff-fe8a3d850900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.7.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:78:79:8a:88:5b:3c:e4:8f:75:e5:bd:30:cf:d8:34:52:fc:
         28:d3:e8:7d:7c:39:f6:5d:60:19:53:de:a7:86:22:68:67:75:
         7a:59:d8:8e:76:00:51:65:ed:45:be:ca:c3:5f:e5:e4:1f:d2:
         d8:ec:b8:d3:8a:f3:24:cd:54:40:d5:b7:bb:f3:8e:e7:a6:6b:
         7d:b3:de:af:52:aa:01:9f:bd:77:b7:6a:42:1f:f3:65:9f:b0:
         4d:4c:cb:f4:89:c3:e6:c8:38:a3:09:da:fb:29:b0:c4:f6:85:
         66:0d:c5:ee:ad:06:c2:ef:36:be:0b:72:77:0c:d0:53:b2:e4:
         2e:89:1f:00:27:68:59:11:0d:d7:f3:73:73:68:c6:3b:a1:59:
         d0:31:3b:ca:dc:77:e6:cc:e2:2f:c5:b6:3c:2d:d2:ac:ef:67:
         ce:00:8f:d8:33:bb:47:fb:ac:1f:bb:64:63:0d:68:e8:f7:f6:
         29:6d:c4:a3:0b:27:2e:75:e5:b1:ea:42:d6:0c:08:f8:18:3d:
         ce:5e:82:40:ef:0d:70:5d:62:c8:f1:a3:fb:22:78:be:c7:c0:
         ea:4e:b1:b6:39:b8:84:ee:25:29:8e:74:43:7f:1b:63:64:68:
         48:1e:e0:03:d8:b9:d5:3e:ef:52:60:80:65:0a:e8:8a:56:51:
         5e:b8:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:11:48 2025 by rpki-client