Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7946bd6-1d41-3870-96a8-a56deae3a1b5.roa
File:                     b7946bd6-1d41-3870-96a8-a56deae3a1b5.roa (raw, json)
Hash identifier:          7Gm3AE6/SFusUyGY+FDB5OWaSwXK1l9vs2J6EhLcDM0=
Subject key identifier:   DD:D9:EE:7D:A6:47:9E:5F:72:01:BD:63:C7:7A:73:49:BA:9A:5A:98
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797C8353D80C3F063AF8F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7946bd6-1d41-3870-96a8-a56deae3a1b5.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.145.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:c8:35:3d:80:c3:f0:63:af:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=9ee583ec-8046-4e00-a83a-0434c9427c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:cc:cf:0a:a2:cd:52:fc:31:4c:ac:ec:d8:
                    72:9e:4e:b3:a1:60:ae:a1:c9:c5:1d:03:c2:c6:e5:
                    42:f6:22:90:29:75:61:10:5b:32:eb:2d:c3:14:c8:
                    58:43:05:00:32:97:e7:9e:16:0d:8e:e6:11:b5:9a:
                    3e:2c:35:a0:0e:46:fc:bd:ad:26:97:65:78:a7:69:
                    73:b1:1d:25:a1:df:0f:32:54:41:ba:42:2a:f6:83:
                    37:ad:1e:13:f0:35:3a:86:e6:06:c0:8b:94:50:73:
                    a8:be:99:a0:aa:32:eb:cc:ea:fd:6b:60:9d:d1:22:
                    65:22:b6:4a:ad:a8:9b:47:60:47:97:ae:fc:53:ff:
                    de:fd:5f:32:a1:7e:9c:66:ea:f6:a0:5b:d1:7c:40:
                    23:f9:cd:8e:22:41:d2:b9:4c:25:36:3a:6c:b5:e8:
                    28:6d:98:d0:06:49:07:94:54:bd:df:0a:f0:18:9f:
                    a3:5b:23:a0:8e:87:ab:09:9a:e8:2e:36:db:08:f1:
                    49:35:a6:23:64:60:f6:cb:e0:a4:64:a1:36:d0:ac:
                    c1:bc:2f:64:d2:99:0d:ff:74:04:57:1d:ef:e1:42:
                    49:74:1a:73:c3:67:9c:44:14:85:ea:65:ff:04:80:
                    04:f3:32:1b:eb:ce:c7:6b:1f:4f:81:70:45:6d:d1:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D9:EE:7D:A6:47:9E:5F:72:01:BD:63:C7:7A:73:49:BA:9A:5A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7946bd6-1d41-3870-96a8-a56deae3a1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.145.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:97:0e:06:bd:b3:50:12:8a:0c:69:02:c7:eb:7c:91:21:c8:
         e4:49:36:ff:d2:87:f0:fa:9c:44:f5:90:15:30:34:93:10:fb:
         77:0e:4d:84:21:33:12:49:1b:90:af:6e:68:b1:6e:8e:01:3d:
         21:22:b1:91:45:d1:9f:8d:5b:4d:a7:ba:20:19:08:83:72:f2:
         9f:33:36:22:dd:e6:e5:35:0e:2a:1e:20:f5:0a:bf:1e:e5:ba:
         37:9c:93:c1:17:e0:1b:5b:64:41:6b:50:af:c1:3e:d9:2a:14:
         c7:8e:78:4a:c1:14:e8:a7:f0:95:5c:5c:c3:bc:db:5e:e9:36:
         32:c0:d5:c2:d1:c7:e8:e4:3f:76:40:33:d9:e1:22:7e:43:c0:
         95:ef:4d:ae:bd:63:b6:40:9e:60:54:b3:d0:b2:f0:f4:43:32:
         06:b4:2f:b7:b7:b5:c2:84:6e:8c:4d:80:66:63:23:02:e5:3f:
         d2:3f:00:e0:38:48:36:e3:8c:3e:65:4a:5f:0c:85:44:61:99:
         76:12:c4:dc:92:67:dd:4a:d3:d2:a6:06:ba:de:b8:86:2f:fc:
         e3:7e:32:d7:65:c8:a0:32:36:54:fc:1d:3f:cc:90:9c:92:11:
         6c:db:be:09:8e:25:e4:27:85:04:89:dd:24:4c:a4:78:04:e1:
         8f:92:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:03:54 2025 by rpki-client