Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b923acca-0610-30e7-8989-d0627ce3e95f.roa
File:                     b923acca-0610-30e7-8989-d0627ce3e95f.roa (raw, json)
Hash identifier:          rKU2UMsEo6/OY1MBVPihlPGqlCopulbhbEmuyneWwTM=
Subject key identifier:   10:95:48:B6:78:AB:FF:74:E7:6D:7B:98:37:52:F4:58:70:A4:BF:84
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797E68CF639BA2EF6561700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b923acca-0610-30e7-8989-d0627ce3e95f.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.79.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:e6:8c:f6:39:ba:2e:f6:56:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=27ecb020-86c8-49d8-9072-41edeea5f0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:61:51:7f:9c:3b:e4:8c:3c:4b:0f:b1:86:
                    d8:b3:90:c6:f2:25:ad:9a:81:20:10:b0:7b:13:2a:
                    63:2a:da:16:54:0f:84:16:16:5e:02:b5:39:1f:23:
                    ee:23:0b:cc:17:2a:fe:97:ca:67:98:f5:5e:d1:1c:
                    fd:30:ad:ab:c6:8f:8b:01:d9:14:58:e3:78:1b:fa:
                    6d:dd:4e:cd:36:2c:15:80:dd:76:1e:fd:87:c3:c6:
                    c0:cc:09:4d:3e:7b:c4:fb:8b:8e:bb:83:67:58:e0:
                    a5:53:7a:92:1e:55:30:bf:ce:12:3f:33:34:0d:1a:
                    93:63:89:ab:fd:eb:cb:6a:45:c0:cc:8f:a5:d8:2e:
                    6e:7d:dc:74:da:69:06:17:97:0d:a9:f5:70:e9:37:
                    76:b1:ac:8b:f3:ac:45:3e:d6:aa:4e:8a:39:eb:b8:
                    5e:2f:60:4f:86:d7:8f:3c:71:9e:08:b6:ed:79:ef:
                    c8:ac:3f:80:09:fd:45:33:36:09:bb:f6:16:65:4b:
                    a4:45:1d:0a:2d:72:37:ee:4c:68:c2:42:33:b9:50:
                    28:b8:a8:9e:02:80:8b:ce:24:a2:7e:4f:3c:63:03:
                    cd:f6:18:66:e1:5d:a9:fc:15:aa:ea:ef:ce:cc:d8:
                    98:99:1d:db:72:90:89:23:da:2b:e2:e1:0c:c8:37:
                    1a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:95:48:B6:78:AB:FF:74:E7:6D:7B:98:37:52:F4:58:70:A4:BF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b923acca-0610-30e7-8989-d0627ce3e95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.79.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:c0:a2:66:e4:a4:8c:e5:6d:c3:0c:f9:1f:ed:fe:1f:6c:
         29:a1:f3:87:a6:e0:ba:41:5b:97:4c:47:e1:23:6c:41:27:c0:
         bd:74:32:23:d3:32:e4:2d:ba:86:b6:55:c7:66:0d:1f:9e:aa:
         03:63:2b:20:d9:57:7a:9a:99:1a:99:c0:27:de:1e:16:14:2d:
         a4:55:cf:ff:59:04:7c:d4:d7:1d:ba:fc:6b:94:04:c3:1b:00:
         1a:19:1c:03:27:aa:96:60:b0:b3:e2:1f:49:b5:60:f2:4d:b6:
         94:a7:ee:17:f6:e4:87:1e:6e:6a:8e:2a:49:d1:8d:b0:59:3c:
         72:c7:c8:ec:6a:53:5f:cb:54:ba:48:83:bd:2e:5b:4b:eb:5f:
         08:25:16:87:f1:50:3e:f2:64:da:54:28:2d:33:17:da:63:c2:
         b8:f9:92:fd:1f:35:bc:bf:c4:6d:7f:fb:3f:9e:46:40:64:53:
         7f:7a:0a:da:a1:18:4a:c0:12:8b:f6:66:18:7e:22:9a:91:68:
         fe:c4:a8:af:f7:7e:54:53:4d:3a:de:73:9d:36:1c:ed:31:d2:
         ce:7f:76:81:3f:64:c3:7d:1a:ad:34:fe:6e:92:62:44:d1:ab:
         33:34:4f:9a:bf:52:40:a5:c9:71:86:81:aa:79:ce:e0:4d:10:
         0d:01:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:25 2025 by rpki-client