Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/298c2507-fdd2-3ef3-b182-aec5d0571825.roa
File:                     298c2507-fdd2-3ef3-b182-aec5d0571825.roa (raw, json)
Hash identifier:          himaPKLqcTIS5YqvHbezNNtXNpayadD80cqHlVx052s=
Subject key identifier:   EB:3E:B6:7C:D7:59:E6:C4:4C:29:DE:1C:0A:61:31:FB:FF:D8:A5:A2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797D5E0756ABB3B91A0C280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/298c2507-fdd2-3ef3-b182-aec5d0571825.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.91.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:d5:e0:75:6a:bb:3b:91:a0:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=e21e2cec-3f68-4fcc-871d-53a2fd487e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:6b:5d:97:c3:1e:82:67:de:d9:33:8b:77:
                    1d:73:19:c2:93:56:82:95:05:ab:30:47:0d:b3:ca:
                    f3:3e:bd:36:54:6d:a5:7e:37:b9:d9:60:0b:d6:5b:
                    da:ad:1e:50:57:b2:c7:c2:75:78:88:cb:f2:51:a0:
                    c2:e8:6e:d7:9e:78:43:a6:27:b1:93:10:b1:97:2f:
                    75:22:4a:87:6a:36:b0:50:cb:fe:72:50:78:0e:67:
                    85:5c:83:d0:6c:e9:db:09:aa:74:5f:94:b8:da:e8:
                    42:3e:58:9d:02:58:bc:dc:b3:12:3e:a8:91:f1:e5:
                    9c:51:99:ef:e3:40:38:fc:08:a1:b1:3f:0d:cc:83:
                    e4:61:f1:29:1b:e5:e8:0c:c9:cc:d2:98:88:64:58:
                    f2:e4:e1:ff:3e:3c:6c:f7:bc:3f:ce:25:f5:44:a9:
                    a3:f0:08:fa:84:b1:3a:9f:36:5d:b3:19:d5:cd:da:
                    ac:87:29:42:3c:53:3f:da:a8:5f:38:71:98:d8:bd:
                    07:74:98:93:e0:49:d7:ba:46:b6:00:c6:3d:1e:f8:
                    ef:52:8c:fa:56:99:06:4e:73:12:2d:60:11:bd:60:
                    3c:ea:21:b0:88:ab:83:6f:dd:2b:8e:78:32:ab:9f:
                    31:bc:77:93:29:40:1f:37:13:c7:bf:1d:28:e1:55:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3E:B6:7C:D7:59:E6:C4:4C:29:DE:1C:0A:61:31:FB:FF:D8:A5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/298c2507-fdd2-3ef3-b182-aec5d0571825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.91.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:54:09:d6:a3:d6:82:b0:4b:35:1b:73:e3:b0:1d:00:44:
         14:e0:71:31:a9:a0:9a:6d:0a:d1:5b:8d:49:34:72:60:fe:a8:
         e0:47:55:a1:05:e5:78:55:38:ec:29:e4:ff:06:b7:fb:73:f5:
         a9:e0:99:b5:e3:1b:5f:51:c7:ed:b6:c8:8c:0a:4d:77:18:49:
         54:ef:db:d5:29:96:7f:23:c9:95:1a:8e:7a:30:5c:c3:8f:03:
         42:db:e5:3b:6f:df:31:c6:9f:f9:c6:e1:8d:dd:61:e8:db:9d:
         64:ee:79:ce:73:12:5c:19:c5:a2:ff:d5:9d:94:94:d0:c3:97:
         ea:68:01:bc:db:23:0c:46:42:e9:84:06:86:fb:36:48:97:72:
         f1:84:96:90:d2:4a:d2:61:9e:18:14:b3:5b:4d:4f:f2:bc:33:
         9a:7c:15:c2:e9:f1:f1:d8:25:11:71:77:66:a3:d4:bf:62:a6:
         b3:2e:ff:39:4a:57:92:6f:9e:56:b5:15:70:18:3c:54:df:0f:
         65:be:e3:46:b8:e6:d7:4d:ab:14:42:d2:ae:d4:9f:d4:1c:3e:
         1b:b3:26:fd:04:29:9d:26:04:2c:7c:4a:e1:5b:60:7b:01:ed:
         43:e6:bc:dc:13:77:05:c1:7e:15:01:39:1c:9f:68:2c:dd:43:
         28:b2:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:41:01 2025 by rpki-client