Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa
File:                     672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa (raw, json)
Hash identifier:          zHRZR/VAFBzk40Nl7DDmTptzDR/YJ/FgH0oekidmQx4=
Subject key identifier:   E0:F3:99:2F:7C:9A:8A:2F:32:F4:A1:FB:B5:6C:5A:99:06:F0:47:55
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B679794E3F17167CE97442200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        35.190.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:94:e3:f1:71:67:ce:97:44:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=65e7ecc8-0b48-40b4-b012-7544361897ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:fe:ff:82:2a:3d:d8:17:b8:a4:18:8a:4b:
                    39:e5:be:bf:2c:52:a3:e7:ae:43:ae:81:63:03:d4:
                    49:c0:64:14:d7:9c:f0:aa:c9:d6:8b:62:79:02:ab:
                    0a:39:eb:39:a3:5c:21:f9:31:2f:3d:62:8b:2c:b9:
                    e8:37:37:4d:48:c2:6e:0c:fc:83:b9:d6:51:e7:7a:
                    0d:86:61:14:79:a8:2c:b5:27:4b:08:81:8f:81:b7:
                    bd:da:36:c4:43:40:c4:0c:10:a8:fb:77:6b:e2:9c:
                    49:1d:cb:fe:d7:61:fa:d8:f6:cd:ce:59:74:9f:3e:
                    73:bf:ce:ca:80:19:30:11:20:1b:3c:7c:93:c4:5a:
                    4d:c4:7b:36:56:53:0a:3a:15:8e:3b:b6:94:18:77:
                    cc:83:94:e0:ec:20:81:d0:f8:e7:de:a2:ce:8e:25:
                    37:82:81:e2:0a:11:63:45:72:8f:77:ad:b6:ed:f5:
                    58:df:b1:b4:e3:02:41:51:4e:6d:2f:7f:aa:0c:28:
                    ec:0f:01:42:1d:72:0c:99:21:f3:75:a7:0d:d0:be:
                    8a:2f:12:65:74:b3:15:cd:d7:c8:11:ae:a3:22:4d:
                    0a:c9:28:fb:7b:27:c4:4a:87:dc:ec:15:46:67:aa:
                    5c:d8:7e:41:dd:62:96:6a:2a:31:07:fe:0c:c6:20:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F3:99:2F:7C:9A:8A:2F:32:F4:A1:FB:B5:6C:5A:99:06:F0:47:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/672f7841-3aa9-35cd-b556-5ed1bc9be3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.190.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:66:cd:9f:85:18:e0:04:e1:6e:58:1a:52:25:04:4a:8f:
         72:1d:90:5e:cb:48:ee:b7:be:c1:64:da:c9:27:20:06:53:6e:
         b4:1b:ce:12:56:8c:c6:5a:4e:cb:d3:46:e9:15:87:23:07:98:
         f3:e0:ae:b0:19:95:04:ba:75:49:66:95:e1:77:bf:8b:30:49:
         2c:c0:c3:d9:00:f9:90:7f:0e:c2:af:85:3f:72:00:2f:d7:74:
         ad:7b:03:00:7a:99:c5:ac:a8:65:61:50:71:d7:ce:bf:ac:79:
         83:2a:b9:3e:3f:91:0f:fb:2d:fe:2d:f1:95:5a:3e:15:65:c7:
         6c:47:b0:b9:42:5d:8a:07:6f:04:0b:f1:da:d9:3f:9f:e1:90:
         f6:0e:6b:28:e9:25:2c:42:df:fe:2a:30:94:c1:2d:8b:35:82:
         d4:62:38:8a:ac:00:9c:79:ab:6e:c0:0d:38:0e:dc:99:28:30:
         da:90:fb:c7:3e:f3:89:f7:48:44:da:11:2d:e6:d2:7d:47:e5:
         f6:a2:f5:f0:ae:6b:3d:ee:d0:64:f1:25:6e:5d:14:bd:eb:f8:
         e8:a1:69:e2:6a:5b:65:49:80:09:42:59:4e:d4:c5:ce:44:96:
         61:a3:1b:06:58:67:f5:c2:54:d7:de:89:9d:50:f3:f1:02:58:
         80:b2:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:34 2025 by rpki-client