Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa
File:                     861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa (raw, json)
Hash identifier:          W8n7dn5JQvtxkYNEwzxhFN6teMwk+SDfsZeWXZkHDtU=
Subject key identifier:   5B:16:B3:14:93:75:44:91:4C:06:EB:CD:20:22:84:13:74:6E:10:B8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797BD8AA77D4CECD963F940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        34.98.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:bd:8a:a7:7d:4c:ec:d9:63:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=d4cca5b1-5c7a-4539-bffc-e8a01e347fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:e2:7a:27:31:b3:ad:4b:5e:6c:ac:cf:ea:
                    a4:8a:3c:a7:80:ef:74:c5:fe:bc:11:61:88:f5:de:
                    31:b7:1e:8c:fa:df:e2:6c:60:90:d5:5f:0d:66:24:
                    06:e3:02:bf:c4:1b:53:4a:bd:8e:2a:33:d9:fe:aa:
                    44:40:3a:42:59:68:dc:0c:b9:66:4a:0c:95:3d:6b:
                    3d:94:8e:2e:74:26:df:26:4f:83:c9:53:1f:f6:78:
                    b1:94:cd:bc:56:e1:eb:3c:02:33:28:49:37:d1:6f:
                    70:77:20:07:de:b1:0c:97:27:c9:01:59:55:3a:d8:
                    9b:48:b7:df:c4:2d:af:72:5d:4b:6c:9f:e6:a6:61:
                    dc:0e:cb:7d:be:be:da:cf:87:0a:a2:a8:d1:e6:2f:
                    47:c1:d1:a2:57:53:fe:43:44:06:85:88:4a:c9:bf:
                    e1:17:6b:78:15:80:aa:d3:f7:a8:1f:a0:c5:20:05:
                    c0:0c:29:36:4e:0e:d8:d5:5d:70:0f:4c:3f:68:d0:
                    9e:e0:05:35:39:e2:93:ce:0f:c9:99:5c:93:73:35:
                    97:6a:1f:61:dd:40:15:9f:8d:55:43:64:99:ec:65:
                    18:2f:0b:61:67:d4:1d:fc:29:92:eb:73:6d:2b:7a:
                    24:8e:cc:d2:51:9c:1e:d6:05:e2:6b:48:42:50:b2:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:16:B3:14:93:75:44:91:4C:06:EB:CD:20:22:84:13:74:6E:10:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:78:89:95:d0:28:54:84:f9:88:e2:b9:e4:9f:ce:9b:09:
         d2:9f:6f:7a:c1:f9:85:f7:05:30:3c:7b:01:ec:66:c8:54:41:
         ee:db:8c:df:60:92:38:33:f6:0b:a7:70:90:6b:7a:f0:36:51:
         3a:8e:4d:5a:9a:cb:92:03:57:2d:93:32:42:71:0b:fb:bf:a9:
         57:09:9a:9d:40:0a:95:a1:de:22:95:1a:af:41:d6:3f:ab:9f:
         23:5d:d6:1f:56:25:6a:32:a9:33:e9:15:73:b7:01:90:e6:b4:
         6a:4e:29:b0:5c:f9:c3:9f:ae:6f:bc:08:9d:77:7d:79:bb:e4:
         2b:70:9c:54:c4:30:47:25:f2:a5:fd:ef:e5:96:1b:d7:6e:14:
         dd:93:73:41:ae:da:7a:55:3a:d7:1c:33:ad:30:bb:3a:12:c6:
         93:cb:9c:31:1b:fc:76:d3:79:0c:7d:2f:06:d9:5c:cf:04:05:
         a1:e7:5c:ed:49:0e:85:5e:11:1e:85:40:e7:f6:bf:f0:ec:58:
         5b:d5:b0:cb:12:06:9f:84:b3:cc:a1:f3:cf:0c:db:1e:c2:af:
         53:e7:b6:a0:89:c0:dd:a2:37:ab:42:42:5a:5c:64:2a:23:69:
         5b:7a:b2:67:d7:10:18:b8:81:f8:a4:67:aa:dd:22:2c:67:d8:
         e9:e3:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:12 2025 by rpki-client