Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c39b71e9-8c6d-36fb-9529-547ee5d71b36.roa
File:                     c39b71e9-8c6d-36fb-9529-547ee5d71b36.roa (raw, json)
Hash identifier:          c5rPV64F1+TGZIMjwut5LwaRS2W7d5HvQr3Vqup01mg=
Subject key identifier:   71:34:80:F9:8E:23:93:A3:74:55:8C:BA:23:88:A6:0C:49:23:11:5F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67978B1A59184148C0024000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c39b71e9-8c6d-36fb-9529-547ee5d71b36.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.96.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:8b:1a:59:18:41:48:c0:02:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=f5559b63-cd6c-4bf6-ac50-8d061336d50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:28:e1:58:1e:d9:3b:11:ab:40:e6:9c:0c:
                    1e:f9:2e:74:e4:2a:c3:00:35:cf:71:97:22:cd:f0:
                    c1:e8:87:9f:93:e7:0b:17:7b:7d:60:6d:e8:4b:25:
                    5f:8b:23:f7:01:6c:1c:a9:2c:b9:95:3a:34:db:51:
                    e3:13:f0:19:e7:99:2a:84:b9:5a:45:4e:c1:df:8e:
                    ee:0d:6e:8c:bd:cb:b8:59:34:15:1b:21:86:c4:0b:
                    23:c3:6b:35:fb:5c:fe:2a:b2:17:48:42:9e:17:5e:
                    e1:b4:63:dc:b0:ad:47:a8:a4:97:d6:89:4b:35:dc:
                    58:61:eb:5b:91:c8:86:87:ed:57:c7:e7:04:45:0d:
                    56:02:d9:61:06:25:77:8e:67:b4:21:d4:0a:96:60:
                    84:dc:b4:c2:dd:91:e9:62:0a:eb:c8:b4:77:a6:6a:
                    63:df:70:af:7d:c0:cb:6c:8c:a9:cc:fb:b4:4a:65:
                    47:82:31:88:8d:be:2f:fb:3f:f0:c9:47:62:6e:0e:
                    63:df:45:b9:af:72:6e:59:95:07:50:10:ec:7a:c2:
                    ee:ad:b5:d4:f5:da:f6:93:de:3a:36:46:09:22:7b:
                    b6:fc:cb:f3:9c:1b:04:ea:30:af:e9:39:b0:fc:b2:
                    98:18:af:a0:07:01:9a:10:29:b2:26:93:48:bf:4e:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:34:80:F9:8E:23:93:A3:74:55:8C:BA:23:88:A6:0C:49:23:11:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c39b71e9-8c6d-36fb-9529-547ee5d71b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.96.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2b:62:15:64:9e:90:3e:95:bd:83:39:73:45:28:6c:8f:13:
         fa:43:77:f8:0c:1c:e6:0a:16:7c:5e:f6:75:5b:ee:b7:46:b3:
         f0:40:ef:2f:8a:af:c6:7c:6e:54:2d:45:ac:47:16:cd:b9:7c:
         82:7e:f8:81:59:be:27:da:ef:77:75:73:27:af:1c:96:c9:b3:
         6c:6b:98:8d:39:a0:a7:31:5a:45:18:02:b9:05:0a:6f:b8:8f:
         20:63:a8:55:0e:d7:46:1a:f1:e1:ed:19:50:58:8f:31:19:fd:
         c4:09:78:53:2c:e5:1d:f2:7e:5d:4d:35:5c:49:96:54:33:0e:
         b4:b9:dd:9d:c1:c1:fb:cf:aa:f9:8a:25:86:9e:08:e4:10:93:
         45:bc:31:f4:e0:fa:24:7c:e0:51:82:74:8c:27:f1:ca:0c:59:
         44:cc:8b:fa:92:da:3d:6e:df:d8:12:56:77:63:06:79:6b:91:
         9f:91:21:11:d7:a3:ff:d2:d6:76:65:45:f6:62:ef:8e:58:17:
         7b:68:d4:a0:8c:2f:bf:ac:de:a5:26:b8:7a:ef:f7:70:6e:32:
         41:93:a9:0f:ba:86:de:b1:01:64:9f:90:34:9e:c7:82:df:7d:
         aa:61:e5:27:32:bc:e1:95:cd:e7:09:6e:91:78:da:dc:d4:f6:
         10:23:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:37:30 2025 by rpki-client