Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
File:                     00848c69-e0a2-30a1-87c4-14728f62595e.roa (raw, json)
Hash identifier:          O35vkhm0B46IhAC2ACr1tH0AKUvriD9y1XzK9SuBRS4=
Subject key identifier:   FA:E6:56:A4:21:A6:0E:73:72:4D:CC:AB:6E:B7:B7:61:EB:6D:FA:AD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797AB8A42C14A8C61B05000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.192.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:ab:8a:42:c1:4a:8c:61:b0:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=ffd60a64-8368-43a2-b684-747e6b6643a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1d:47:30:fc:e3:4f:2a:a7:b0:71:8f:f5:64:
                    c7:37:ce:56:25:6b:62:aa:aa:b6:aa:15:f3:6b:98:
                    69:cc:cc:15:29:10:e9:70:80:da:b4:ab:f9:a0:00:
                    ca:f0:49:5a:0c:c3:7f:d9:67:c3:2c:b7:85:c2:75:
                    8b:44:92:e2:9c:dd:09:1c:18:22:06:93:9c:6c:b5:
                    8e:ad:43:0b:19:23:f7:b0:5e:f6:d1:da:fc:27:17:
                    46:dc:22:cb:0f:da:b2:61:06:b0:7f:75:d0:23:3a:
                    09:af:57:96:4e:98:0e:86:03:a1:53:ce:12:13:04:
                    bc:0b:2c:a7:12:7e:09:4e:74:2e:3c:cf:b1:14:95:
                    cc:8c:11:52:5d:75:df:2b:0c:e1:79:18:db:5a:23:
                    64:d9:56:19:0f:08:1e:1a:a5:3b:23:ac:f1:1d:23:
                    21:15:8d:87:da:ed:c7:90:ba:9e:18:8e:a0:dc:0c:
                    64:43:c0:bf:f5:63:77:a8:20:db:08:5c:d5:7a:02:
                    e0:52:ce:2b:79:66:78:de:97:3b:eb:cb:8b:d6:57:
                    69:1f:71:c6:2f:e6:7f:6c:4f:71:bd:34:db:71:d8:
                    9d:3d:32:2d:5f:4d:20:64:49:3f:36:8c:f4:17:c0:
                    c0:26:47:ee:20:98:90:f8:85:2e:bc:6b:0c:3b:76:
                    36:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:56:A4:21:A6:0E:73:72:4D:CC:AB:6E:B7:B7:61:EB:6D:FA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.192.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e2:5f:9d:9b:65:9f:51:86:08:60:28:73:6d:16:59:23:29:
         bb:4e:ba:19:9b:b9:17:c2:42:e1:8a:89:fe:ac:63:9b:88:f8:
         06:c0:c1:af:e2:5c:b5:4d:a3:7c:eb:3e:cc:a1:d1:0e:4d:78:
         07:97:62:4d:8b:00:6f:24:76:af:8c:44:94:3a:e8:2f:cb:16:
         18:c2:f3:d1:d0:0e:c9:54:4c:a0:9c:da:e0:cf:cf:38:e4:10:
         31:33:66:51:4a:c7:c3:40:df:94:98:f4:d7:e2:e8:69:98:94:
         ed:f8:d2:a8:94:cd:e7:47:c9:57:b0:63:58:5d:99:72:94:33:
         a9:44:8a:3d:73:8b:1b:f8:0e:61:c2:ff:1e:79:fc:53:8e:9b:
         f4:7f:31:e6:f3:c0:ab:96:96:6b:ad:4e:19:df:d8:6a:47:c7:
         fb:e5:0b:8e:82:4d:3d:2d:51:bb:0a:bf:ba:16:5b:89:dd:71:
         54:1f:bd:cd:33:81:62:ad:26:74:71:5f:19:b1:d6:52:8d:72:
         8d:de:66:8a:dd:9d:72:db:fa:7b:82:19:f9:dc:10:fd:cd:c0:
         e7:24:e6:6b:00:b8:c7:0f:6a:2b:62:ec:76:68:47:6e:07:d5:
         b9:22:3d:84:92:71:4f:8b:0f:8c:a9:29:10:db:27:6e:94:5c:
         4d:80:29:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:57 2025 by rpki-client