Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a69ce546-0a35-3ae5-9450-8c9244209ae0.roa
File:                     a69ce546-0a35-3ae5-9450-8c9244209ae0.roa (raw, json)
Hash identifier:          8rzCyau2zV52wKRKC1YEBqQUKDHItQvsqePz8AxVbCc=
Subject key identifier:   C6:85:7F:D9:0B:B3:C0:00:92:AD:CA:55:24:E5:DC:00:74:35:66:A7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67976C66F174DC05F761F5D0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a69ce546-0a35-3ae5-9450-8c9244209ae0.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.64.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:6c:66:f1:74:dc:05:f7:61:f5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=a30c4e4f-552c-488a-aa3b-5382eda3e1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:40:87:72:8f:66:6f:91:cf:73:d8:2c:3d:20:
                    86:0c:65:e0:02:e6:e8:7f:c9:c9:44:d4:3d:ab:0b:
                    1e:29:35:87:9d:e3:6c:10:d3:d6:06:a0:fe:69:66:
                    19:15:48:15:e3:28:21:98:a9:5c:8f:55:a6:d2:99:
                    21:8d:c1:f7:08:f1:af:ee:16:23:75:9b:c2:3a:c8:
                    d3:aa:a4:52:57:cc:19:a2:d2:f2:44:5d:20:fa:34:
                    92:02:fd:0a:6f:30:61:14:16:f1:85:9a:94:6b:39:
                    5e:df:44:a9:fd:e1:9a:c7:80:e8:17:ab:62:ef:75:
                    4a:d4:65:bb:77:46:0a:0a:4e:a9:5d:39:19:c2:d1:
                    a0:e6:b3:1f:d1:6d:a4:2d:16:b9:e2:fa:23:b1:41:
                    b9:93:8d:f1:a1:04:3e:a9:00:f2:42:be:46:39:0e:
                    5a:10:3e:13:c5:c7:45:8c:d0:83:cd:20:bf:47:63:
                    98:d1:37:4a:5f:34:23:8b:5f:a3:4c:f5:6a:23:59:
                    55:86:51:b1:0e:3c:51:06:7c:5e:91:89:3b:4f:13:
                    9b:a6:d0:3d:6c:57:4f:43:0b:c7:16:d5:39:b2:7a:
                    11:31:d0:44:56:84:a8:11:ce:92:51:fe:e7:dc:87:
                    ef:66:29:71:98:e9:eb:ad:7c:ec:c2:18:41:90:fc:
                    ad:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:85:7F:D9:0B:B3:C0:00:92:AD:CA:55:24:E5:DC:00:74:35:66:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a69ce546-0a35-3ae5-9450-8c9244209ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.64.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:82:6a:ba:0d:4b:47:5d:41:09:19:36:29:d0:2a:fe:8b:55:
         a6:7f:4a:aa:0f:b8:dc:8e:5e:4b:c1:02:e9:4a:ed:be:ea:b5:
         7b:b6:35:d2:0b:9d:75:39:71:83:e8:95:b4:fc:2d:8e:fe:0b:
         8d:44:e3:d8:17:25:8c:ea:0f:5c:39:bf:e6:6a:23:05:e2:09:
         52:15:f8:f0:94:74:a2:bc:23:3e:5f:08:c3:6a:83:f1:fb:5c:
         db:d9:b7:03:45:e1:5e:00:8d:aa:af:b7:33:c0:91:cf:c8:04:
         dd:9e:b3:d4:20:5f:1d:04:e2:87:63:82:72:af:9e:36:28:d2:
         60:99:91:ed:9b:30:37:77:49:8c:b8:21:77:e7:de:b9:2b:4f:
         ac:be:ca:1a:ee:f9:86:cd:c9:32:63:f2:53:97:2b:0f:a1:89:
         e3:a0:86:48:7c:24:01:8d:7d:47:67:d4:85:44:ea:5f:76:af:
         f9:d1:bc:ea:83:93:cd:6c:fc:07:1d:b8:32:f0:10:d5:29:54:
         b0:30:92:9d:5c:8c:86:f9:db:59:f4:fc:9e:64:60:4b:db:8e:
         c0:2e:c0:b1:23:1c:9e:9a:b6:af:db:4c:78:e2:a6:0b:e4:6e:
         1d:f0:d7:95:74:16:7b:82:68:fa:91:50:ce:a6:fd:4c:f2:f3:
         c7:9b:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:37:40 2025 by rpki-client