Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888661dc-967b-3e38-886f-5fadc6157a2b.roa
File:                     888661dc-967b-3e38-886f-5fadc6157a2b.roa (raw, json)
Hash identifier:          IIhfs9M5h5SSxxq88nRV1vJ/G7rM7p/gtSi2acNAgL0=
Subject key identifier:   69:10:C3:E8:E8:DB:BA:8C:AD:B3:14:AD:DB:FD:8F:AF:46:FB:7D:57
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B864CB1A1F6A7DAA05491F060
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888661dc-967b-3e38-886f-5fadc6157a2b.roa
Signing time:             Wed 15 Oct 2025 01:00:30 +0000
ROA not before:           Wed 15 Oct 2025 01:00:30 +0000
ROA not after:            Tue 13 Jan 2026 02:00:30 +0000
asID:                     19527
IP address blocks:        34.190.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:4c:b1:a1:f6:a7:da:a0:54:91:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 15 01:00:30 2025 GMT
            Not After : Jan 13 02:00:30 2026 GMT
        Subject: CN=eb1c682c-84d8-4562-adb5-b115062af515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d8:b9:ea:29:dd:ba:49:8a:d1:08:62:40:7a:
                    9f:b1:50:78:97:3d:08:97:9b:cd:a4:5c:10:e3:ba:
                    71:3f:f7:a8:83:61:41:ab:d8:98:ea:32:22:3a:e5:
                    58:a6:da:15:a4:02:8e:1e:48:24:0d:49:68:77:e5:
                    82:d6:54:5e:80:98:19:20:f2:a4:a2:e1:63:3e:46:
                    8d:b8:ca:b7:73:2b:5d:85:ed:71:db:e9:b4:e9:1c:
                    b0:66:9d:40:01:54:87:35:49:50:d4:6a:ff:77:49:
                    6c:62:0d:99:eb:29:6f:44:9e:e1:60:df:0a:38:45:
                    84:f8:e7:2c:f8:ea:13:fb:65:ad:a9:73:9e:8c:ba:
                    84:b5:cb:9b:e6:17:f0:59:b6:2e:06:fe:ce:bb:91:
                    fa:4c:fb:f9:0d:1f:7b:89:f9:4f:0b:36:72:c1:12:
                    e6:1f:5e:55:85:42:78:a2:aa:17:ba:88:40:ab:86:
                    64:5f:4d:e4:26:a5:cb:e7:d5:91:9a:37:de:f1:d9:
                    e8:7d:7d:86:3f:be:a8:ec:f7:1d:61:48:ec:9e:2d:
                    02:62:5f:77:a7:e2:c2:e2:11:08:a4:2d:b5:da:ca:
                    5c:8d:84:b8:3b:e1:cd:83:cb:57:d5:72:58:3a:2a:
                    d6:36:84:10:00:b0:0d:26:38:b0:7b:92:4d:c1:54:
                    d2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:10:C3:E8:E8:DB:BA:8C:AD:B3:14:AD:DB:FD:8F:AF:46:FB:7D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888661dc-967b-3e38-886f-5fadc6157a2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d7:d7:f7:16:d0:30:25:6c:73:7f:40:2e:57:31:94:91:bf:
         0d:e9:eb:8f:26:74:ed:fc:10:c7:bc:02:51:84:56:b4:10:ce:
         0f:6f:17:36:2c:d8:ce:98:27:13:79:66:8e:04:68:ff:30:61:
         a8:8a:3a:0d:c7:37:24:ec:44:ff:63:45:ad:d5:ec:37:dc:b7:
         29:82:b2:b3:15:98:c3:c6:45:a9:f4:bf:c8:e7:ef:a1:1a:ae:
         a0:66:4a:de:04:13:81:d2:e6:eb:ec:d6:15:00:93:6e:e9:bb:
         6c:e9:17:ae:ce:19:bb:15:3d:57:46:f8:7d:8b:e3:8b:32:aa:
         0c:5b:02:79:13:14:66:b8:f8:db:13:ad:38:dc:42:a7:e2:f5:
         cd:83:72:0c:5e:37:a0:9a:7b:87:cc:02:8d:0f:b8:0c:fc:f4:
         2a:75:d5:40:a5:8b:80:5b:88:89:2c:87:de:90:60:41:70:cd:
         d2:bc:fb:b3:c4:ed:2e:d5:b7:15:ed:bc:8d:6a:25:39:9a:d8:
         dc:43:5d:88:0e:d0:34:21:70:7a:0c:f2:b1:7f:20:03:7b:79:
         a0:cf:67:f6:dc:9b:75:38:2a:e7:f8:1e:05:0b:a7:53:1d:73:
         87:95:0c:85:4a:a7:0e:d6:65:64:bb:dd:6e:61:77:3f:cf:db:
         e2:b4:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:21:31 2025 by rpki-client