Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67a360a6-0885-3445-9fa7-9df22b8d43b7.roa
File:                     67a360a6-0885-3445-9fa7-9df22b8d43b7.roa (raw, json)
Hash identifier:          ElaVKTnyTPR4I6zmoXXHUrRyfDaeQU7CA2D/afuL+5w=
Subject key identifier:   F0:7B:5D:B8:6D:4D:A4:D9:D4:04:16:A5:4C:9B:9C:DE:CE:81:AF:49
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B864CAFD3965A4425FB1BDA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67a360a6-0885-3445-9fa7-9df22b8d43b7.roa
Signing time:             Wed 15 Oct 2025 01:00:30 +0000
ROA not before:           Wed 15 Oct 2025 01:00:30 +0000
ROA not after:            Tue 13 Jan 2026 02:00:30 +0000
asID:                     15169
IP address blocks:        34.190.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:4c:af:d3:96:5a:44:25:fb:1b:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 15 01:00:30 2025 GMT
            Not After : Jan 13 02:00:30 2026 GMT
        Subject: CN=f2c13a79-e662-4c9b-adae-5b0bb1c5cc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:db:7b:cb:1b:bd:7c:e2:61:2a:41:de:9c:
                    49:a8:78:57:92:74:24:7d:49:b3:a4:89:51:b7:85:
                    11:3f:ab:5d:0d:b2:56:e8:52:77:cf:cc:09:47:71:
                    8a:67:88:d5:04:25:60:3d:ff:03:2c:d2:54:26:ed:
                    7c:0d:8f:9e:4a:31:8e:be:04:4a:e5:b1:7b:f4:ca:
                    9b:e5:61:77:d8:31:81:0e:7b:cf:4e:de:ea:8a:86:
                    de:aa:b5:2e:34:51:a3:91:8e:30:38:92:d2:7d:ba:
                    ae:19:e2:56:76:e5:26:31:ca:47:d5:b6:2d:56:d5:
                    91:2a:48:21:17:2e:1d:a6:3f:88:3b:64:8c:ad:0a:
                    50:d8:dd:26:ad:8a:de:c6:ac:18:5f:7d:89:dd:60:
                    28:47:2e:40:35:46:6a:00:24:65:88:04:d8:72:fc:
                    7c:4b:c6:6a:3b:24:09:1e:b9:74:b8:8d:09:5d:a4:
                    fc:b4:d0:19:e7:85:92:c6:b1:32:ce:78:9e:19:a8:
                    eb:46:f4:e0:d7:02:ba:ec:33:e2:fa:5f:6f:c6:a0:
                    b5:11:4e:7c:5f:a5:90:88:c6:52:8e:ce:27:d5:ea:
                    c2:d5:89:33:4d:e8:43:61:53:f2:ab:b6:1d:5e:28:
                    04:bc:e0:7a:6a:bd:16:70:6d:1a:1e:8b:58:53:4c:
                    f5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7B:5D:B8:6D:4D:A4:D9:D4:04:16:A5:4C:9B:9C:DE:CE:81:AF:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67a360a6-0885-3445-9fa7-9df22b8d43b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d9:86:43:fa:71:78:77:f0:0b:83:ee:51:fa:9c:65:45:b4:
         bc:c4:18:11:bc:fb:74:a5:f0:c2:14:f8:cb:5d:5b:2b:3d:24:
         f2:82:b3:0e:dd:09:70:63:74:72:35:64:c4:66:16:6d:93:dd:
         06:cc:2f:33:80:cb:ab:4e:b3:3a:7d:41:d2:83:e0:af:cc:52:
         50:92:9c:4f:06:43:46:9d:d8:f2:a5:ad:ca:e7:d6:aa:47:22:
         50:29:a6:c5:4a:bf:95:76:58:ee:7b:6f:15:82:8b:59:25:c7:
         ca:23:dd:fa:05:ea:b6:e6:6d:c5:5d:81:ed:ce:44:50:bc:07:
         72:85:f5:b4:ea:48:eb:ae:4d:dc:a6:dc:bd:13:9b:47:e0:d2:
         cb:46:fa:54:76:c7:bd:c7:c1:7a:51:e3:6e:97:aa:1a:92:55:
         6c:b8:6b:71:71:f7:91:ce:ae:6c:f6:51:4a:6a:9d:b2:38:76:
         77:e5:e4:7c:76:d9:6e:3c:4b:9a:de:ff:d1:03:08:06:70:13:
         ab:de:75:08:d3:2e:48:ac:2e:52:10:07:26:1d:72:3a:1b:7e:
         51:97:b1:9b:dd:92:52:42:52:cb:70:db:43:cd:95:2a:a2:77:
         03:74:88:e0:b2:8d:f9:f5:4e:90:33:0f:c3:13:16:7f:33:ec:
         ed:3f:f9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:53 2025 by rpki-client