Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/105ded4a-4190-322c-9233-3cbf0fab9e50.roa
File:                     105ded4a-4190-322c-9233-3cbf0fab9e50.roa (raw, json)
Hash identifier:          XRbwHotOiLfGq2ITgdMBoxRMuZbIvzYBPqKnCeI3pbM=
Subject key identifier:   06:2F:9B:BF:6B:42:41:25:04:29:A3:BC:44:F6:F6:D0:06:54:FD:AB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B679754A7DE606B21004EDC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/105ded4a-4190-322c-9233-3cbf0fab9e50.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        34.152.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:54:a7:de:60:6b:21:00:4e:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=f14e6d03-dee6-4caf-84c5-a4e687c0d3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:35:32:47:61:26:57:92:5e:05:26:3b:cf:
                    df:d6:16:90:8b:18:b4:4e:b8:2f:f6:0d:a0:f4:8b:
                    2b:8d:af:61:da:6d:e7:84:9f:1b:f9:08:5c:37:fe:
                    88:e3:8c:41:d6:59:60:62:ca:81:17:be:0f:6f:fc:
                    f2:d0:df:1b:90:a4:85:84:6b:fa:0c:3d:e5:50:d6:
                    6c:cc:93:23:8c:09:16:f4:f0:f5:00:0e:bd:8b:70:
                    ce:79:ac:8f:5b:cd:46:f6:e2:30:53:69:67:28:7a:
                    b0:82:d2:1f:af:c0:4a:1f:3b:e6:8e:e9:c4:46:1e:
                    2f:5f:24:fc:29:34:0b:2b:00:5c:ed:24:92:c1:e1:
                    86:9b:7a:00:35:44:ff:24:b5:51:f4:e7:45:55:cc:
                    70:1f:6a:95:53:b3:13:ac:05:54:ed:95:99:fa:c6:
                    b9:24:2c:37:9a:3d:d9:f9:db:0f:8d:8d:22:e2:5c:
                    a3:e1:6e:c1:f1:b7:45:8e:2e:e7:c6:d0:0e:38:4b:
                    a9:6a:8e:5d:cd:33:d0:fd:ae:f3:cb:d9:d4:d8:90:
                    2f:8d:20:7c:96:d3:f1:d0:40:09:ea:72:25:77:f2:
                    de:94:8c:3e:38:fa:e6:50:63:b4:57:db:03:6b:48:
                    94:8d:c8:ae:4c:2b:69:4a:f0:35:0b:05:a9:f2:34:
                    6a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2F:9B:BF:6B:42:41:25:04:29:A3:BC:44:F6:F6:D0:06:54:FD:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/105ded4a-4190-322c-9233-3cbf0fab9e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:20:bb:38:48:22:d3:bc:64:0f:b4:92:0b:8e:a8:92:db:94:
         f6:f5:cc:b2:75:5e:ea:1e:bd:b2:92:21:89:eb:2a:b9:e7:ce:
         1c:a3:8d:4c:e1:f7:c3:f0:14:0c:f5:35:9a:a5:94:26:a5:fd:
         87:9e:7a:d7:a3:b2:75:d4:59:9e:a9:f1:f0:2e:80:84:88:23:
         0e:dc:56:be:9a:9a:95:50:4b:78:a1:14:a4:69:13:ce:d8:83:
         2d:f8:64:a3:a9:7f:5b:ec:d4:a6:f9:ac:a4:7a:b3:e4:ed:da:
         4f:59:36:36:f0:ee:5c:40:44:61:be:45:7a:a0:b8:c8:53:af:
         c9:dd:3f:f9:66:f7:eb:f3:fc:e6:33:22:e6:95:ec:8b:54:9c:
         ef:59:5b:c7:06:2a:80:6a:82:39:09:1c:ce:f1:26:9a:91:bb:
         45:d4:53:58:63:b4:29:93:8f:d1:c4:d0:fe:b9:21:70:3a:5d:
         da:a9:91:86:6c:6a:d1:27:74:d6:d0:d5:3d:a0:6c:39:5c:c3:
         46:c7:83:84:17:ef:3f:40:8c:25:df:1c:cc:ca:bf:43:cb:2d:
         42:88:a5:b7:d7:37:c8:fa:7a:04:38:c4:fa:06:b2:4c:55:04:
         d1:ea:ff:b1:1e:db:09:b7:09:29:fb:0d:19:69:41:a3:e3:e6:
         ba:bb:d9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:22 2025 by rpki-client