Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa
File:                     5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa (raw, json)
Hash identifier:          +TACsCafWYU4qJu3JJNfu0Fb/G08rHYNXKfauSZtzws=
Subject key identifier:   A8:37:92:92:5B:F0:44:D8:AB:85:70:DF:F5:37:69:00:8A:E0:34:FB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67975F41951423D3CD7A3C60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.152.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:5f:41:95:14:23:d3:cd:7a:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=629bbaf1-eadb-487b-a02a-76ad974c0434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:0a:a3:83:2e:c3:4e:f9:c1:7f:ba:05:8a:
                    ca:96:33:bb:6b:ce:f2:35:d9:c1:5f:04:e5:4b:13:
                    e4:80:73:07:46:14:a2:5c:3a:29:2d:c8:49:21:9a:
                    92:ca:3d:86:62:9d:45:8d:5e:54:a4:b2:e6:05:76:
                    62:a4:b1:58:4c:2c:1a:b6:aa:a9:7a:9d:59:9c:b5:
                    f3:9f:b4:9c:91:3e:81:5d:15:6d:15:8b:00:61:26:
                    de:db:ea:a3:cf:fc:0e:fb:9b:e6:26:33:30:af:e4:
                    54:91:ad:56:88:bf:3e:e3:08:01:d1:05:cc:23:28:
                    64:5d:d2:8a:77:8a:9e:1f:e7:63:7a:cd:85:03:46:
                    77:79:ad:ee:98:b5:e3:82:5f:1d:bd:07:b9:12:3d:
                    37:9c:04:cc:a3:5e:f9:3e:bc:ad:ff:a0:07:ca:75:
                    db:7c:29:9b:0c:19:6e:2e:bf:1a:1b:c6:94:2e:f5:
                    1d:d0:b9:7d:f6:c2:de:8b:dc:6b:9d:ee:99:19:fe:
                    7f:67:be:53:b4:fd:93:e4:47:2b:ee:d6:9a:fe:3c:
                    0a:39:fe:5e:92:83:6f:dd:f1:a6:a4:f8:72:3f:b9:
                    f0:7e:9e:40:bb:67:b8:c2:f0:41:ec:e1:2b:d7:15:
                    56:c2:68:8f:f0:68:bb:01:35:22:aa:ac:21:9a:26:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:37:92:92:5B:F0:44:D8:AB:85:70:DF:F5:37:69:00:8A:E0:34:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.152.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:f5:bc:72:8a:d6:4e:c1:9e:8a:99:1b:02:52:a3:b9:b5:
         1c:7e:e4:87:a6:f4:d5:dd:48:60:90:cc:1a:fa:b2:80:a5:83:
         90:03:d6:0e:c8:99:01:ea:b0:ff:3e:ed:66:e6:03:5e:a9:a3:
         8b:3b:b8:7d:eb:bc:17:3b:07:ec:bf:f1:de:2f:19:20:30:cc:
         e6:b5:c7:54:59:23:6e:2d:2d:8e:f1:a4:11:83:6e:d4:c9:81:
         c5:27:3b:e0:da:15:49:78:cc:98:71:ee:95:4a:de:ff:0f:c3:
         65:13:13:c4:ff:df:e9:98:c7:b0:65:d4:a4:52:4f:d7:9f:70:
         19:bd:f7:2d:d0:cc:fe:3b:fc:e3:19:e1:6c:eb:8c:9b:a1:bc:
         fb:94:70:98:fa:42:91:e3:d6:9b:32:6b:19:7c:fd:20:61:cc:
         19:22:1e:6c:2a:24:49:c5:ed:d5:8e:00:61:a4:64:ff:15:03:
         62:8b:b4:15:73:ad:3b:f9:de:00:74:36:22:9f:70:c1:52:ba:
         91:d0:8c:2d:a1:71:a9:49:33:9b:15:62:63:07:80:9f:f8:38:
         66:c0:7b:bb:fd:48:af:4e:57:68:28:89:3f:32:4a:9b:79:a4:
         a9:13:ed:b5:10:62:e5:36:c3:96:41:6b:ad:ee:42:ee:97:38:
         ad:58:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:40 2025 by rpki-client