Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1087be2-ad1b-34bf-9381-6289e15647a5.roa
File:                     a1087be2-ad1b-34bf-9381-6289e15647a5.roa (raw, json)
Hash identifier:          UtmM1KnYrC5ReeDwxniJ1qkqn+Ejys+5XEQK9dIMrw8=
Subject key identifier:   8E:EC:5F:5A:24:83:CB:14:B3:AC:5D:F5:57:2A:0A:5B:12:CE:9A:DD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CD576B8EFA4A1E4EDCF740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1087be2-ad1b-34bf-9381-6289e15647a5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        34.101.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:57:6b:8e:fa:4a:1e:4e:dc:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6bc457fd-0539-4da3-a319-cc09a68d4bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:0e:96:1e:0f:12:4e:96:56:21:b6:17:ff:
                    3f:51:b2:81:87:ba:fd:d0:e0:c5:76:94:43:95:9e:
                    50:7e:90:74:a6:74:0a:d6:86:04:7e:42:39:74:a5:
                    a6:fa:75:fb:db:3b:a4:10:25:e9:46:46:03:b2:26:
                    0e:ee:16:99:7c:0e:30:2a:b4:89:6b:e5:4f:6c:80:
                    f1:63:d2:47:d7:3d:32:e2:1c:c0:3c:d1:05:58:6e:
                    00:50:62:5f:be:78:19:fe:94:1e:72:17:86:17:02:
                    df:4f:58:5a:ad:0f:42:68:53:f7:22:fe:0a:24:ea:
                    1f:73:4e:8b:b7:f1:c0:ad:56:17:77:6b:c3:47:61:
                    9d:f5:cb:79:8e:f0:49:75:c5:01:94:e5:d5:fa:10:
                    06:1c:87:6b:af:a8:b1:9a:44:d9:49:12:33:42:e3:
                    6c:e0:e9:a5:99:2b:06:de:3d:0d:25:6c:37:c5:f6:
                    87:29:46:ce:69:e6:b3:18:d4:49:a1:2d:05:6d:b4:
                    57:69:2d:cc:d3:e9:db:c0:8f:40:dd:31:bf:e3:3b:
                    07:70:b7:dc:06:11:8c:bc:5f:a0:95:4e:9a:42:0c:
                    88:3f:1d:89:f2:e1:bf:43:43:39:0d:10:24:35:9d:
                    df:2d:5c:a6:7a:65:c2:c6:ef:6b:2e:eb:b0:d8:7f:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EC:5F:5A:24:83:CB:14:B3:AC:5D:F5:57:2A:0A:5B:12:CE:9A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1087be2-ad1b-34bf-9381-6289e15647a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.101.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:93:84:30:b1:0d:91:86:1e:a9:a3:16:6e:1f:1a:5f:67:76:
         35:88:b7:1d:19:30:12:eb:15:d5:c0:6b:54:8f:79:91:2b:cc:
         de:cd:44:9a:d0:d1:b0:5c:85:b9:f2:58:35:49:e9:8d:7b:49:
         aa:e9:91:bd:31:17:ae:4b:fd:48:a2:e8:e4:16:9e:a1:b3:d2:
         aa:b9:4f:2d:71:aa:e5:4f:da:13:6c:78:37:77:8a:62:a0:00:
         49:55:11:6b:97:b5:bb:87:85:2b:85:79:e1:54:f3:17:59:30:
         d5:2d:18:82:10:8d:29:fb:93:e7:00:f4:0a:a1:6f:3c:af:41:
         6c:d7:7c:81:41:81:4f:df:21:08:47:f4:30:21:c5:7b:d0:f4:
         bf:d2:1a:04:9a:b0:fd:23:08:6d:ba:39:5a:a5:2d:fd:b0:91:
         b6:74:87:37:6c:b8:68:53:a3:16:ba:d7:cb:ee:86:ad:43:30:
         d2:f4:92:6f:fc:16:b4:1d:aa:b4:6a:08:38:76:37:1f:05:c3:
         81:42:91:fe:30:be:ec:b2:f7:ba:8b:26:20:de:75:1d:02:a5:
         89:c1:2e:c7:93:4f:16:97:b7:fa:6b:22:a6:b3:3c:72:f5:20:
         7e:91:f5:71:e5:b7:05:32:15:6f:f3:4f:00:2f:bb:46:df:1c:
         12:45:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:21 2025 by rpki-client