Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4d51337-c1ca-33d7-9160-6741649e6d35.roa
File:                     b4d51337-c1ca-33d7-9160-6741649e6d35.roa (raw, json)
Hash identifier:          LG8M3HNiyct6PxxwclXXaofdaVT9RSo1Y6nXU/5Dh74=
Subject key identifier:   40:E9:A1:6F:C3:0D:1A:79:AC:E3:11:9F:DD:F9:68:CE:AA:11:DC:57
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B21CC3155916061148EF38380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4d51337-c1ca-33d7-9160-6741649e6d35.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        34.124.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:31:55:91:60:61:14:8e:f3:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=c9991ab4-b604-419c-86e1-c55b52053cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:e8:4c:8f:9b:d9:9b:34:72:59:4c:44:d6:
                    26:94:04:9a:f2:25:c3:74:39:c5:b0:9f:3d:05:c4:
                    86:29:3b:ed:1e:cb:c3:42:5d:39:e6:70:7f:77:81:
                    d1:cd:98:85:cf:d9:7f:81:18:28:fb:f0:63:bc:e5:
                    fd:7a:3e:c8:28:37:45:f1:ba:56:de:5a:04:f1:5b:
                    bc:78:8a:c5:d5:77:0a:e8:b8:88:bb:43:57:be:f9:
                    d4:7e:62:62:78:aa:aa:77:09:e5:84:3e:ef:5e:df:
                    2f:c9:09:64:d5:d9:15:2a:7e:3b:85:ce:12:6d:cf:
                    05:cf:de:18:dc:08:41:49:c2:9d:20:d8:5d:6d:45:
                    f6:6f:09:d8:41:ef:96:58:89:50:ab:65:a9:49:47:
                    db:db:c6:9f:4a:ca:9e:5c:0a:a7:c0:ce:77:d9:f1:
                    af:73:d6:3a:35:83:d3:28:8a:bd:fe:55:d6:a9:cc:
                    20:ae:52:e9:b4:e5:f3:ad:53:56:51:dd:50:87:7c:
                    94:19:8e:fc:c5:be:0e:d9:b1:2e:a6:0a:c5:0a:a4:
                    ea:bf:71:a3:81:30:32:7b:f2:7c:a5:a7:71:15:25:
                    bb:b9:4c:f5:28:3f:f6:3e:ff:70:77:90:02:0f:89:
                    48:d0:e0:18:61:4c:de:3f:df:eb:ea:f3:fb:68:be:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E9:A1:6F:C3:0D:1A:79:AC:E3:11:9F:DD:F9:68:CE:AA:11:DC:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4d51337-c1ca-33d7-9160-6741649e6d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.124.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:91:31:88:66:2f:f7:bf:da:8c:b2:cc:b3:bf:94:4e:49:2b:
         38:26:14:33:f6:31:7c:01:c3:ab:67:93:fd:f2:c8:d1:23:c9:
         3a:13:02:09:70:ef:23:d0:c2:29:e4:c5:b7:8f:81:db:59:c2:
         b6:c8:21:89:48:28:53:7e:fa:7b:45:11:fb:3b:4a:49:61:0a:
         aa:d6:17:a8:6a:b2:48:84:38:77:ee:c4:24:42:0a:a8:0a:50:
         fd:0f:ef:ce:b6:33:bd:43:e1:86:c5:82:7b:8c:54:2e:1c:78:
         3f:05:8f:64:9f:bd:d9:4d:9b:d2:57:6c:33:71:06:cb:a0:10:
         90:b1:33:67:58:7b:81:88:66:51:80:5f:df:b7:cd:c0:25:58:
         50:b2:d9:89:10:e3:dc:13:b4:fa:89:41:79:6c:e2:3f:cc:14:
         69:71:9c:83:8d:3e:8a:6a:35:22:aa:e9:a6:de:30:63:ee:19:
         78:6d:e5:73:3f:a4:51:88:dd:1a:e4:9e:b4:39:02:43:0d:2b:
         a8:60:87:f2:ea:a5:4e:6d:87:62:ff:b8:e2:9a:21:72:6e:7f:
         54:bc:ee:4b:77:e4:26:61:18:b2:9b:36:4e:27:43:b7:05:6d:
         ee:08:9d:fe:cb:bb:6e:20:b7:bc:2f:20:05:d8:60:23:77:68:
         ca:fc:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:54:06 2025 by rpki-client