Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91e33832-9868-312c-9af5-43522a2e1ae0.roa
File:                     91e33832-9868-312c-9af5-43522a2e1ae0.roa (raw, json)
Hash identifier:          OiaNgN8boYROYlpJHP+9IkglTpmElTTgpsndHIMPy8k=
Subject key identifier:   B4:7B:B4:E5:2B:87:82:71:E9:60:EE:99:A8:0D:4B:7D:D8:E5:35:DD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797ADAD3C313DF4C6C9DC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91e33832-9868-312c-9af5-43522a2e1ae0.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.90.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:ad:ad:3c:31:3d:f4:c6:c9:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=470ef836-01a6-4260-a5c5-e365cfd3704d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:47:a0:ee:99:41:dc:68:06:cb:58:cf:fd:
                    0f:a4:7f:06:7c:35:f0:cd:3a:10:2d:57:c2:72:37:
                    10:73:64:e4:27:17:28:17:cf:ec:fb:56:05:0a:8d:
                    0c:11:d6:59:0e:59:24:0c:9a:33:53:11:88:96:80:
                    98:bb:ce:3f:3a:fa:00:44:b2:ec:a8:d1:c7:cd:8c:
                    cf:71:fe:f5:05:f6:c3:cb:08:61:0d:32:51:37:3c:
                    aa:a2:fb:56:7c:95:5e:ad:06:57:51:32:0e:04:dd:
                    32:e8:9b:93:34:2c:f2:ed:88:e5:45:2c:8c:42:9e:
                    7f:c6:74:18:54:1c:eb:99:03:db:e1:05:fa:18:68:
                    2a:6e:1f:49:93:5e:12:35:2e:66:63:ae:83:55:a0:
                    b2:a9:55:64:fd:60:c2:a9:ad:09:66:8c:c4:be:7e:
                    7b:3c:27:1c:b2:7b:65:76:02:53:09:5c:bb:f0:52:
                    fc:39:ef:b8:2b:4f:5f:2b:2d:c4:7b:2f:02:16:02:
                    15:81:56:7e:be:8a:e1:5e:09:6b:77:c6:a4:6d:41:
                    f5:8f:72:4b:28:5d:37:74:8c:b9:70:b3:43:c3:da:
                    61:4d:10:7f:af:7f:37:0a:0a:00:49:ea:c0:e4:0f:
                    e3:8a:fb:3e:30:1d:be:8b:de:98:23:f4:5b:6a:48:
                    4a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7B:B4:E5:2B:87:82:71:E9:60:EE:99:A8:0D:4B:7D:D8:E5:35:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91e33832-9868-312c-9af5-43522a2e1ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.90.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:83:b8:f0:81:bd:7d:70:d1:1a:40:ee:b8:9a:cb:1a:90:f2:
         21:6a:bc:17:9a:05:d9:67:e8:8f:11:9e:e7:8b:43:09:94:a9:
         f6:2d:70:94:7b:f1:ad:d3:2c:53:43:4e:f5:dc:f5:e7:40:53:
         7d:68:fd:95:de:62:cc:6c:6a:0c:e5:eb:84:21:26:e1:75:c2:
         09:32:e7:11:7c:b0:ca:9e:55:f1:10:b2:d1:76:96:eb:14:6c:
         f3:b1:56:d3:5b:6d:ab:9b:4f:2e:3e:bc:e1:7a:83:94:e0:fd:
         6b:2c:92:1e:1d:84:01:d4:3a:79:ac:6a:a3:64:78:9e:32:14:
         bf:af:5e:61:60:95:03:07:cc:aa:3a:87:92:ea:5d:6f:d7:e3:
         fc:9a:f9:65:0a:7d:26:cc:f8:a1:eb:ab:a4:07:f5:d8:3c:3b:
         10:4f:94:32:35:07:52:b3:94:11:b7:83:7d:56:0b:45:82:c8:
         88:41:1c:b3:bc:c4:ea:c8:30:8b:7c:72:05:6a:0c:b5:0d:ae:
         64:1e:f2:f3:7c:3f:99:53:71:79:c7:1c:6b:d0:c0:1c:ea:b4:
         ab:b8:85:40:18:97:04:b0:31:6a:aa:ae:29:28:aa:80:51:d1:
         cc:40:56:81:0d:09:34:cb:7e:ad:51:f3:1a:df:ec:f3:e9:d2:
         30:19:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:06 2025 by rpki-client