Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c11f58c0-c88a-3982-8efd-4b6cd0d094e5.roa
File:                     c11f58c0-c88a-3982-8efd-4b6cd0d094e5.roa (raw, json)
Hash identifier:          jqRaEkCagMsJuQTp7UpUwUlxWu7NkGXJMa3BYnzScTo=
Subject key identifier:   EF:85:C3:AE:C1:CC:1F:31:4A:DB:F3:8D:FF:28:6E:83:D7:FD:6B:C6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67979C7FB3CB9641F9C6E680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c11f58c0-c88a-3982-8efd-4b6cd0d094e5.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        34.133.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:9c:7f:b3:cb:96:41:f9:c6:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=79d2e89f-a78e-4409-b73e-b4d5618d28ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a8:f0:e0:97:57:93:52:e1:9b:c4:a3:e5:a4:
                    89:ed:ec:1e:99:f3:94:57:3a:81:ab:a4:9a:85:8d:
                    72:13:ce:b9:08:d0:b5:b3:dc:5c:6c:92:4a:89:e3:
                    46:3b:98:3f:ce:30:10:5d:57:74:7c:9e:bb:0a:50:
                    12:a3:67:c4:60:e8:52:fc:cb:86:f7:b5:bd:f5:1b:
                    95:f8:a1:f8:9f:41:72:45:0e:f7:d7:44:02:b6:7c:
                    07:51:08:b6:7e:03:09:09:8c:e2:ab:f1:29:42:55:
                    84:b4:ed:39:fc:3a:48:c4:f5:37:00:86:90:0e:4a:
                    e5:1d:dd:04:2c:6c:74:71:8c:61:25:46:56:d5:c3:
                    68:75:36:d6:16:0c:e8:a4:32:67:52:c8:fc:b4:43:
                    a8:44:83:17:53:15:07:2b:0e:90:4b:a5:bc:53:16:
                    9d:69:2e:05:92:ba:85:2b:dd:19:e6:93:7b:58:74:
                    22:19:ac:17:78:37:11:f4:60:bc:64:fd:8e:f4:12:
                    f4:2c:98:f8:9f:ae:44:28:fc:76:ba:1b:16:e5:f4:
                    ec:d8:db:40:46:e1:76:ad:08:40:82:76:71:33:64:
                    cf:19:a4:02:b5:ce:68:84:e1:06:ce:83:65:9b:28:
                    26:01:27:2f:0d:8b:09:e0:e1:9f:c5:56:82:33:09:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:85:C3:AE:C1:CC:1F:31:4A:DB:F3:8D:FF:28:6E:83:D7:FD:6B:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c11f58c0-c88a-3982-8efd-4b6cd0d094e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.133.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:64:a2:05:e7:dc:c2:11:d3:5c:e3:6e:1b:0a:2d:97:b4:98:
         7e:bd:34:f3:68:1f:de:18:1f:39:b9:60:c4:ac:a8:d9:2b:17:
         ac:de:0e:56:df:ba:72:e5:3a:0f:a1:2d:2b:4d:db:54:92:e3:
         2b:f8:87:16:75:49:11:3f:38:bc:e2:75:7d:fe:6f:7f:49:96:
         ad:fd:05:61:df:58:22:21:56:1c:e6:de:f3:9c:11:07:8e:92:
         01:85:77:7c:52:3e:fc:21:44:c4:7d:f3:81:1d:44:8c:9d:cb:
         3a:f5:a4:02:36:e0:f6:95:db:ce:b7:bc:d7:2a:61:3a:0b:8c:
         5a:15:9f:19:6f:e5:6f:48:f6:96:ed:dc:22:9e:41:92:00:b5:
         ac:f6:17:a0:0b:56:03:5e:73:de:24:66:11:76:08:75:a7:01:
         0d:49:86:25:79:e9:c0:a3:2e:5a:c5:60:56:39:4f:48:2c:18:
         c2:5f:22:d7:f9:c4:cc:09:a0:a0:eb:7a:a6:d5:b3:28:bd:3a:
         cf:ac:56:23:55:f8:75:3c:e4:e8:3d:75:d4:71:f2:72:00:0e:
         e3:0b:41:8b:d5:d1:d6:2c:21:5f:ea:09:b7:b7:d3:ad:ca:4d:
         9d:18:98:fa:20:64:80:6d:46:15:69:a0:9c:67:5f:63:ec:9d:
         1a:af:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:01 2025 by rpki-client