Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72ada2e9-2bf2-3b7a-bc51-f1f8fb3e39ee.roa
File:                     72ada2e9-2bf2-3b7a-bc51-f1f8fb3e39ee.roa (raw, json)
Hash identifier:          eykmN+lO2rI5M5/8kcmxOjzp2T9K0jHts3ZiG0gJn+Q=
Subject key identifier:   C3:B9:EB:49:8F:59:74:52:2E:2E:35:07:CC:2C:5F:40:C9:E8:33:07
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797E2F366AD2EEADF470300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72ada2e9-2bf2-3b7a-bc51-f1f8fb3e39ee.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.130.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:e2:f3:66:ad:2e:ea:df:47:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=82344704-137e-44c2-959f-259fdb209fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:f1:02:79:97:d0:3e:db:76:df:4e:1a:90:
                    2e:16:cb:a1:e8:2a:8f:57:f1:cf:23:9b:1b:b0:4e:
                    32:7a:c9:bd:53:ac:9e:59:d2:ab:43:4a:85:53:86:
                    04:9e:c2:ea:3d:31:4a:ee:15:e7:24:ec:0f:7f:29:
                    3f:be:7f:b2:7f:a6:8f:93:17:1b:ab:6e:5e:c6:51:
                    10:1d:c3:da:2a:15:a3:c0:b3:3f:a7:54:f6:ca:0c:
                    7e:49:eb:15:3c:c9:88:d8:64:36:d7:ce:7c:4d:ca:
                    bf:98:7c:40:7f:3e:c5:ca:df:41:52:ef:a4:58:52:
                    cc:99:54:de:43:4a:ea:a0:e1:76:73:96:ce:4d:38:
                    2c:57:9a:6c:fd:c7:a3:61:55:c6:3b:45:24:d5:2f:
                    eb:18:bd:bd:df:b5:5a:a0:7b:38:2b:f6:65:68:72:
                    2f:6b:65:2c:d9:7b:98:de:43:17:74:0b:71:b1:28:
                    ba:b4:ee:29:a4:a5:4b:a6:6b:39:f5:74:de:f6:ce:
                    c8:36:bf:ad:4e:10:b8:40:57:0e:69:9f:5e:53:48:
                    36:a5:3c:ae:fa:e7:e8:0a:70:06:e7:0e:6f:fd:19:
                    6a:75:b9:8e:bd:42:64:a4:84:12:e2:da:ca:aa:d8:
                    1a:8f:61:48:10:e4:62:9c:d7:c0:a0:c9:e7:64:a5:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B9:EB:49:8F:59:74:52:2E:2E:35:07:CC:2C:5F:40:C9:E8:33:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72ada2e9-2bf2-3b7a-bc51-f1f8fb3e39ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.130.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5b:18:c7:bc:9c:d2:62:f1:d4:45:0b:eb:d7:b8:77:21:dd:
         0a:41:04:c7:9a:9d:2f:01:3c:8c:8d:f3:56:55:b5:73:fa:b6:
         dd:20:43:5a:54:76:9b:3c:83:a7:16:2a:e9:76:8a:42:90:87:
         29:c5:b0:e7:1d:9a:b4:7e:bf:eb:7f:c1:0c:ce:82:40:3f:39:
         31:54:50:66:99:92:f7:e4:03:97:05:b8:f6:2a:01:f2:7f:4e:
         d0:64:60:e9:92:d2:07:09:f0:b9:11:3b:60:1d:57:a8:a0:53:
         e0:c2:e7:cb:18:1b:75:da:cb:8a:34:fc:3d:f3:bd:56:c9:11:
         60:c2:6a:af:ea:2b:dd:1c:a4:02:0e:30:ad:43:e0:f9:19:98:
         cd:65:62:37:f4:ba:93:56:ad:f2:36:b2:a5:cd:44:b0:f7:27:
         5a:eb:83:f2:3d:e8:82:69:95:28:94:0f:a9:ab:d5:ee:98:fc:
         62:86:46:a7:a1:e1:1b:4b:67:58:20:cd:b8:0a:99:4a:c0:f5:
         d2:dc:9b:ce:d7:01:9f:82:6f:17:a1:cb:69:39:f0:0f:98:16:
         d8:e6:57:02:93:c8:21:9a:e1:d1:0d:1c:23:1f:ab:38:ca:6b:
         2e:07:69:80:48:35:f5:57:69:1f:2f:04:8c:b8:e1:d7:6a:e9:
         aa:0a:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:49 2025 by rpki-client