Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c99f151-1834-368a-adc5-443958bb22a4.roa
File:                     4c99f151-1834-368a-adc5-443958bb22a4.roa (raw, json)
Hash identifier:          hExmMHLyXmFxoon1gR/TrYUS4nY9rFK/PwhKdB5mzUU=
Subject key identifier:   32:13:4B:83:A6:4B:7F:06:0E:9A:F6:21:16:55:E8:0B:03:86:0D:04
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B8BE239493414E6E12A7EF900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c99f151-1834-368a-adc5-443958bb22a4.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     396982
IP address blocks:        34.57.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:39:49:34:14:e6:e1:2a:7e:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=5afe73ac-3180-4108-b27a-9ea3a243f376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:4e:69:d5:e1:df:31:22:f6:bd:93:14:1c:
                    1e:d7:3f:cd:f4:55:26:b0:84:3f:11:db:9f:6e:83:
                    d3:c5:1f:cf:d0:bf:50:78:f9:fb:4f:46:20:ea:0b:
                    d7:41:06:71:8a:bb:f8:37:9d:b0:a7:24:2e:d3:67:
                    fd:ec:59:a0:b6:b2:e8:ec:50:92:0a:97:d9:54:e3:
                    e8:06:5c:72:e3:fb:03:d1:14:3e:0a:2c:96:c9:82:
                    57:82:2a:b3:f2:ce:60:52:38:20:27:53:04:f7:cd:
                    8b:6b:32:6d:7b:43:e9:e7:25:6d:8d:a5:43:d8:86:
                    70:5e:5d:a5:12:b5:d5:1e:1e:3b:fb:b5:ee:80:0d:
                    35:86:dc:67:44:dc:cd:34:77:59:eb:e8:9b:a9:5b:
                    c3:90:d0:70:ec:95:67:34:29:ee:1e:b6:a8:13:ea:
                    7c:81:c1:3e:41:2b:99:e1:09:5f:c6:02:15:6e:f3:
                    44:f8:5e:1d:07:a9:28:ed:55:28:0f:fc:04:85:92:
                    b6:14:da:cd:45:d4:f8:0a:9f:9f:0d:54:f8:ad:b7:
                    dd:66:07:10:3c:ac:e8:59:1d:51:c4:4d:e1:ed:c3:
                    8d:ac:2a:85:31:fe:77:7f:27:cc:6b:89:26:3c:67:
                    5c:24:49:4c:2e:a7:f1:aa:a8:38:c9:78:ba:2f:77:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:13:4B:83:A6:4B:7F:06:0E:9A:F6:21:16:55:E8:0B:03:86:0D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c99f151-1834-368a-adc5-443958bb22a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:22:65:7b:37:89:55:72:71:e2:ff:78:32:73:0b:c1:92:
         ac:1e:77:4b:de:5b:7a:8a:cd:d9:96:c5:c4:24:1e:cc:e9:10:
         0c:33:78:c5:73:54:35:80:2a:92:a4:9e:73:2f:a1:9c:29:63:
         ae:4b:4a:c5:d3:ff:8e:a6:6b:2e:13:98:d2:a5:18:9d:7c:5d:
         8c:6a:be:b7:8a:22:15:d8:ac:c9:8c:e4:07:69:34:ff:ae:0d:
         34:12:7d:62:29:74:bc:60:c2:14:b1:75:3c:af:78:64:4b:d6:
         09:cf:6e:99:dc:d7:7d:2e:00:6c:47:93:4c:bf:12:64:c2:a7:
         7b:e3:1f:d7:6b:82:a8:0c:16:b2:ef:10:6c:e2:da:f1:7a:e8:
         2f:64:1a:db:12:2e:56:87:56:e4:30:49:30:40:64:d2:b3:22:
         87:d7:28:dc:77:74:1e:1f:81:b8:23:5c:2d:d9:3b:a8:61:1c:
         ce:40:89:fb:7a:bf:f9:4d:d0:42:db:60:e8:fd:c6:e0:99:59:
         03:bb:8f:4f:2a:1a:02:0b:d9:6a:01:2c:63:8f:48:b5:f0:33:
         8d:f1:f1:14:9c:b4:8f:c6:77:cf:4c:9d:c6:74:54:97:c1:e0:
         ca:cf:1f:2d:5d:4d:df:36:de:87:1f:9f:fe:97:19:64:a2:88:
         09:6a:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:09 2025 by rpki-client