Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/31db3522-3747-355c-a6dd-086c124457e1.roa
File:                     31db3522-3747-355c-a6dd-086c124457e1.roa (raw, json)
Hash identifier:          cIniSEItNZHmoBoZ2GT9YvKLVLy7sZ/r6S274+LcGmk=
Subject key identifier:   DE:AB:5A:AE:84:8F:70:2D:E9:75:0F:10:56:38:C3:B8:98:05:B8:A3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67977A182B45271DD708C270
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/31db3522-3747-355c-a6dd-086c124457e1.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.75.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:7a:18:2b:45:27:1d:d7:08:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=83a3ef10-9af2-419b-a1ff-80cce3c54f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:0f:81:73:00:50:f8:a1:f6:fd:a0:06:fe:
                    c9:64:08:b0:a4:87:d0:92:09:5f:44:37:b3:1d:02:
                    c1:fb:b6:d4:6a:e1:bb:aa:60:f1:4c:fa:eb:ef:f3:
                    c3:47:da:1b:18:72:7f:6a:71:05:66:41:2e:97:e2:
                    91:45:79:1a:c5:5a:fa:b8:c4:2e:d3:5d:ae:43:55:
                    74:47:12:b6:dd:53:78:9e:07:09:a9:67:96:95:c9:
                    59:87:a6:1e:55:c8:96:32:15:d6:91:63:10:16:d7:
                    2f:3b:7a:ac:20:1a:37:41:40:38:d8:9c:2e:b7:d0:
                    dc:10:eb:35:6c:f4:4a:a7:32:d0:02:67:0c:63:d5:
                    d4:e8:1b:b5:38:9b:1c:d1:ce:c6:88:3e:3e:9a:6c:
                    1f:05:53:58:1b:dc:d9:0a:ee:68:da:c3:15:5e:43:
                    f4:7a:1a:b7:f7:1e:9f:50:f5:c9:23:8d:9d:9d:3c:
                    c4:53:13:9a:5b:25:50:77:13:e4:11:a6:20:87:47:
                    3f:46:f7:73:a7:99:91:36:37:e8:da:90:73:de:6b:
                    0f:c2:5c:fe:4b:50:04:00:92:d8:48:2f:8a:92:cc:
                    c6:30:21:1f:e0:54:41:fa:a1:ea:4f:9b:a2:3d:42:
                    30:b0:f4:16:28:ea:0e:74:4a:25:3f:d3:16:10:2d:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AB:5A:AE:84:8F:70:2D:E9:75:0F:10:56:38:C3:B8:98:05:B8:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/31db3522-3747-355c-a6dd-086c124457e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.75.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d1:85:fa:44:57:9c:a7:42:fc:8b:16:b8:78:02:15:27:2a:
         a5:c7:97:3c:f5:c0:e3:be:e6:b3:63:83:6b:b8:f1:0d:7e:41:
         52:03:c8:a4:d3:5e:a5:f0:e8:42:03:f2:49:4b:f7:86:16:ae:
         be:a9:69:66:dd:17:ce:4b:f9:dc:38:ea:4a:7b:31:57:66:0a:
         dd:2f:2b:f3:c0:88:f5:1b:11:81:0a:d0:42:8d:b2:ed:7c:db:
         0e:47:01:56:8b:36:f1:5d:45:48:ad:a7:e8:ec:31:10:c5:f9:
         66:81:84:40:9b:20:ee:35:35:5d:62:b4:45:89:e2:ef:61:40:
         31:4c:60:29:1b:67:66:ac:ec:e1:e1:52:91:08:aa:e6:7d:83:
         98:52:53:83:93:63:30:fa:f0:03:ac:ba:f9:c2:66:4b:3c:18:
         15:10:4b:b2:b0:0a:80:87:89:62:15:20:0f:7f:6f:c2:34:f6:
         b9:bf:16:64:08:17:3f:85:b4:69:84:90:f9:b1:49:b4:17:96:
         ad:27:1a:1b:f4:a8:ab:5a:77:0b:b8:69:e1:06:68:38:f2:58:
         21:8e:28:cc:53:41:d0:aa:33:d9:a4:14:c8:69:d1:6f:e5:96:
         78:87:d2:82:b8:32:e0:6e:e0:b6:33:84:73:6a:dc:0d:db:ec:
         0a:05:b3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:37 2025 by rpki-client