Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/464cc12f-b45f-349d-8e5d-e63e5bde2cd8.roa
File:                     464cc12f-b45f-349d-8e5d-e63e5bde2cd8.roa (raw, json)
Hash identifier:          iOC35LyibrFAsPoweUVbC9fgoNcnJJrCEWhnvsKj6W8=
Subject key identifier:   AF:9F:D9:87:72:9C:D7:AF:E0:C4:2A:B8:69:98:92:74:1A:AA:22:61
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67975AE085EDA6210DFEFEE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/464cc12f-b45f-349d-8e5d-e63e5bde2cd8.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.138.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:5a:e0:85:ed:a6:21:0d:fe:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=2128c337-7753-4102-b740-d0040c0a6924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:c2:02:9f:30:7a:7b:05:d5:e0:ba:6f:f5:
                    51:cf:c7:66:25:6f:28:b3:c5:3f:78:d4:d9:ad:13:
                    97:33:65:cf:cd:df:e8:1b:04:f2:c9:ef:ee:0c:2d:
                    6c:b2:d6:1c:c0:1f:bf:16:8a:c5:92:d5:a6:45:78:
                    70:5f:82:5b:32:81:13:0c:70:d2:5f:44:e8:5d:4d:
                    52:53:9a:a7:da:72:5f:77:3c:17:de:fd:45:66:02:
                    23:f5:61:30:95:69:3a:da:98:4a:95:bf:35:88:c2:
                    ae:ed:d1:1b:6a:24:e2:67:f9:15:86:21:ec:1a:e1:
                    69:95:e2:2c:60:93:10:b3:6a:fa:28:13:d2:c2:5c:
                    be:ae:6f:43:94:15:2b:86:f2:cc:6f:b8:3d:06:36:
                    98:7c:bd:0f:65:be:4b:61:13:32:b2:64:e1:90:fd:
                    3a:6d:d0:e2:d6:64:9b:bf:37:98:e4:a5:47:53:0c:
                    64:04:dc:d0:3b:dd:7d:04:0f:4a:c0:e0:7f:0e:a3:
                    2f:7c:15:54:7f:29:b1:54:7b:bf:f8:18:17:14:70:
                    95:7a:d4:4a:e9:ab:82:b2:1b:2b:56:1d:5c:5a:38:
                    47:10:2b:2b:95:7d:89:0d:23:db:04:6a:16:0c:f6:
                    2f:b1:c5:21:6d:10:24:13:aa:07:d4:d4:ac:dd:ca:
                    a8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9F:D9:87:72:9C:D7:AF:E0:C4:2A:B8:69:98:92:74:1A:AA:22:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/464cc12f-b45f-349d-8e5d-e63e5bde2cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.138.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3a:3d:71:3b:54:b9:4b:72:bf:c4:dd:df:56:dd:f4:82:ca:
         3f:3f:9d:e4:8e:d4:35:9a:66:2a:b2:1c:6c:75:7d:43:4e:ea:
         47:04:24:d8:29:a0:6c:47:4a:0f:db:63:ee:cb:09:3b:0f:dd:
         36:1c:22:ff:37:c2:b9:61:9c:87:9b:45:68:9e:dc:ae:4f:69:
         e6:72:33:0b:b4:62:0d:5f:b1:4d:d8:44:bf:86:3b:77:71:95:
         3f:6e:5c:e4:85:a6:ef:55:33:5c:10:89:67:e7:03:68:c4:f2:
         16:c4:ad:b7:f3:ea:8f:38:d1:0d:38:20:38:42:a6:fb:4b:7c:
         06:a3:fb:2d:d1:d5:07:51:2d:ac:59:63:c3:de:e8:4c:ea:e1:
         b0:06:c9:3c:2a:b4:cf:52:c3:89:82:80:19:4f:42:9d:97:3e:
         bc:f9:a4:c6:e9:f8:27:8c:6b:de:c6:6a:36:e2:9e:ff:15:5a:
         f5:86:9c:0f:4c:27:8e:99:f4:b0:26:89:75:d4:63:bd:32:5b:
         de:68:53:fa:1a:c8:87:77:56:d0:b9:fa:9a:8b:0d:76:45:12:
         45:58:d6:b1:be:5a:67:cf:6a:5c:d5:22:e3:fb:f2:49:e9:29:
         27:b5:ab:af:2b:e5:d5:eb:d8:c7:3a:a3:c1:69:47:6e:aa:06:
         3e:35:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:47:13 2025 by rpki-client