Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa
File:                     2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa (raw, json)
Hash identifier:          4ZHLFXJBKD4UtAOwIFHHmYsZz0axvVoZn6JcSc4LVEc=
Subject key identifier:   9A:60:FA:0A:53:CC:95:06:9C:08:AE:86:6A:F3:CE:96:E0:7D:55:87
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67979E47115B798C43BE5800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.77.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:9e:47:11:5b:79:8c:43:be:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=ad38c9a1-3045-422f-9860-57499a6ce28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:e2:3b:42:fd:b7:b0:30:09:2a:95:6a:7a:
                    45:42:37:ff:9b:6f:e4:ff:31:b2:e5:84:80:95:63:
                    a3:b6:3f:25:e7:42:e5:c8:16:a5:2f:3d:03:da:49:
                    e3:aa:48:3f:2c:05:84:70:e6:16:3c:b4:31:78:18:
                    59:74:99:84:be:82:d9:a7:f0:ca:8a:53:ed:91:8f:
                    57:f8:91:c9:9a:b8:21:67:f5:c6:61:a6:b7:42:2d:
                    59:22:fe:65:54:42:32:ff:da:ee:f7:d5:ad:c7:bf:
                    ec:60:bc:a3:1f:03:22:cd:98:0b:14:9d:88:da:ee:
                    0c:0b:51:ee:ff:79:6a:66:7b:0a:36:d4:8c:87:db:
                    fb:20:60:f2:71:aa:e3:c2:54:6b:b1:8f:88:4f:a0:
                    36:29:09:81:90:bb:9f:6f:94:b2:0c:09:1e:8f:23:
                    dc:49:60:1a:ce:79:4f:39:0d:0a:82:ff:5d:0f:d5:
                    d4:bf:49:23:0e:92:8a:fb:99:03:b0:56:7f:2f:eb:
                    28:b6:91:d3:ce:0c:f7:92:6b:4b:7e:e3:1f:a3:cc:
                    a1:8f:c4:06:a4:74:0b:6e:6d:36:45:27:04:e0:ae:
                    fe:fe:06:ff:60:f9:15:f5:ab:57:7f:4b:65:eb:66:
                    8a:a1:f4:29:84:e3:18:ed:5d:af:46:2e:b2:d5:73:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:60:FA:0A:53:CC:95:06:9C:08:AE:86:6A:F3:CE:96:E0:7D:55:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.77.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:79:9f:4f:3a:53:29:08:71:71:3a:e8:60:ca:d8:ad:66:b0:
         d1:f9:26:10:f3:03:bf:9a:89:31:82:57:ec:9b:e9:9c:9c:90:
         ec:12:15:a4:57:ed:38:70:52:6d:ea:07:e8:22:40:0e:bd:95:
         4c:40:50:d4:01:17:5f:c5:28:81:55:eb:17:b7:fb:16:63:a8:
         81:b9:2a:81:87:6c:7e:bf:b1:a5:33:a3:4d:7c:2e:7d:57:bc:
         6f:4a:38:43:b1:70:ee:50:2f:f0:21:d6:1e:89:0c:78:5d:1e:
         f0:ec:b7:a6:7f:84:53:e8:62:95:d4:b6:8e:41:a5:93:be:dc:
         dd:d9:92:48:4f:f4:1e:20:11:e7:7f:62:92:2d:55:77:a6:d3:
         75:4a:8f:1f:49:62:92:8b:04:07:4f:3e:d7:49:d6:c2:5f:6e:
         14:db:c4:eb:cb:63:81:5b:71:be:7e:cd:26:fc:1e:92:08:85:
         df:14:01:ed:2f:17:43:59:31:bf:4c:de:1d:39:50:e0:55:69:
         d7:a1:72:47:0c:c7:a8:20:8d:cb:76:15:70:67:5d:61:3a:30:
         5d:59:34:a4:3f:55:61:97:26:2b:15:ed:e5:2b:eb:d3:b0:fa:
         6e:e3:14:ef:c8:b4:63:73:c6:4d:1f:ad:79:be:07:7f:c8:c7:
         ac:b8:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:22 2025 by rpki-client