Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/994c9203-e599-318e-91d1-ee2a66ede130.roa
File:                     994c9203-e599-318e-91d1-ee2a66ede130.roa (raw, json)
Hash identifier:          3ohQncRWwH2VOI2dqisB9ARYM8WmsryP+eSPb0ficno=
Subject key identifier:   FA:7E:48:9D:5C:6B:85:0E:8F:98:00:B8:FD:AC:D5:8A:BC:FE:95:BC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B5F376637E1676859867D8780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/994c9203-e599-318e-91d1-ee2a66ede130.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     396982
IP address blocks:        104.197.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:66:37:e1:67:68:59:86:7d:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=0d8330e6-b088-4f18-884a-ee755e4af6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:57:17:c8:c3:38:34:3f:5d:c2:77:62:ee:
                    22:af:11:0e:b3:de:22:31:27:f0:2d:59:2a:08:0c:
                    af:08:cc:35:e3:85:db:e5:fe:be:60:c8:4c:24:9d:
                    b8:40:1c:3b:57:00:1e:a7:15:d1:5a:39:b9:06:b4:
                    dc:b1:07:20:80:35:33:54:35:72:4a:9f:c6:d8:3c:
                    98:71:0b:f2:76:99:82:de:8d:1f:76:55:24:62:73:
                    a6:18:f6:41:1c:18:ba:8c:01:7a:06:6a:77:f0:32:
                    f4:25:c2:6e:e9:4e:31:9d:e2:54:93:3e:b0:40:6b:
                    97:da:80:34:d7:58:6a:51:0e:61:ef:fb:6d:df:8d:
                    9b:08:30:ee:7f:f4:8f:74:c1:6a:5d:30:e0:12:ba:
                    2f:b7:eb:6c:67:04:27:c9:d9:28:b8:5c:0e:e8:2e:
                    53:2e:2c:88:56:67:e3:41:3a:c2:b6:b6:63:b5:72:
                    30:27:32:28:a7:73:dc:33:43:5d:9b:eb:36:91:dc:
                    1a:1f:17:3b:77:0f:be:af:94:40:a0:38:8f:c4:6c:
                    77:0f:2a:6a:19:1d:2f:6b:b0:5e:3e:e1:1a:9b:79:
                    2c:f4:ec:c0:76:3f:60:c8:03:07:35:c9:1c:9e:ba:
                    98:eb:1c:bc:19:6c:5c:d5:e9:4d:c3:11:ae:ac:82:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7E:48:9D:5C:6B:85:0E:8F:98:00:B8:FD:AC:D5:8A:BC:FE:95:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/994c9203-e599-318e-91d1-ee2a66ede130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:78:95:99:9b:d0:99:3a:a4:75:ed:c3:0f:67:44:27:aa:fc:
         26:77:88:a4:73:94:fc:60:d4:78:b5:f9:10:63:b4:cd:07:23:
         79:9b:32:a1:ef:9b:16:8d:cf:53:5b:28:60:65:00:7b:c9:8d:
         02:c7:7c:69:93:e9:fa:5c:25:46:c8:d5:58:d3:4b:b8:c6:88:
         49:f3:da:d1:1e:c6:ed:02:d9:b9:c4:51:62:fe:5b:a0:4d:07:
         16:b7:81:91:42:de:5f:14:c2:d0:be:3c:37:7e:a3:10:20:71:
         15:41:f2:91:80:2c:b3:c6:8b:7a:6b:14:15:89:a6:cf:42:8d:
         d6:7d:2d:6e:8c:bb:87:c2:85:24:db:a9:1f:33:25:b9:cf:a8:
         b4:95:5d:26:a6:5e:57:de:c8:4b:09:d1:b6:49:c4:ec:6e:91:
         69:03:84:0d:88:ef:ee:3c:c4:3c:d9:3c:16:5b:26:02:8d:d3:
         24:1a:dd:d9:be:77:bf:ff:6e:9f:66:26:d0:28:cf:b7:05:8e:
         e8:e0:07:40:3d:bb:79:11:f9:e6:5e:c3:67:dd:50:f8:7c:9b:
         99:67:d4:19:f5:1d:57:fc:e7:db:72:49:49:11:cb:6e:b5:ee:
         ae:56:84:38:cc:8d:50:45:51:93:dc:4d:d3:a2:52:27:de:11:
         af:af:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:58:38 2025 by rpki-client