Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa
File:                     cafacae6-4253-3d5e-b635-56c65cb9329e.roa (raw, json)
Hash identifier:          qnw1s1hOa3rhda7BDQR8GDBI+X80dmoD8ABq3aIKlOw=
Subject key identifier:   25:B3:CF:CC:15:31:3E:7A:FA:C9:6F:1B:05:67:C1:0F:BF:09:97:AF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797AA1B3BA1B8D0EB229640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.124.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:aa:1b:3b:a1:b8:d0:eb:22:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=53e062a4-3930-4a63-8c26-bad02e3d68b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:29:25:44:d5:b6:0c:aa:a2:37:2b:79:c1:
                    89:35:ad:30:f8:5a:df:2f:d1:1e:d6:d9:73:eb:2b:
                    41:d5:dc:04:3c:dc:25:09:e7:66:45:28:62:f5:70:
                    03:62:0c:9c:b8:99:d5:3e:8f:75:6a:ae:fa:da:b3:
                    63:31:ef:01:c1:2b:f0:ed:0e:21:40:b5:83:35:24:
                    d5:0d:37:8c:84:9d:06:4d:b0:75:38:d6:29:4e:0f:
                    81:1e:47:78:d6:36:49:f7:dd:bc:99:40:68:6b:54:
                    ef:ff:0e:10:02:67:48:30:6f:2e:fe:95:61:4c:91:
                    a4:63:a0:ea:9f:c3:4d:8a:44:b4:0e:6d:15:90:7f:
                    be:c7:ed:e8:4e:68:27:38:a9:91:9c:35:bf:c1:f9:
                    be:ef:f8:e3:f2:3a:b2:3b:e3:f4:3a:d4:91:8c:ff:
                    c2:43:81:a3:32:23:11:bd:20:89:46:b6:6e:7f:29:
                    3f:2f:aa:8c:85:1e:b2:88:f5:76:50:98:84:23:b3:
                    83:3b:fc:37:31:32:a1:1b:bd:97:af:8e:52:9b:91:
                    fa:31:cf:a2:18:7a:ec:0b:ac:1e:ed:1c:cd:cb:83:
                    2e:0e:19:36:26:97:1d:37:08:3e:c7:17:30:76:19:
                    17:25:88:f2:86:3f:82:2b:e4:85:5e:11:cd:ec:1c:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B3:CF:CC:15:31:3E:7A:FA:C9:6F:1B:05:67:C1:0F:BF:09:97:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.124.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:cd:7d:a5:fc:f3:35:3a:9e:51:44:e2:f4:64:d7:b6:c6:a4:
         96:ec:6b:1b:08:ab:37:ea:6a:72:40:68:cc:cc:b3:48:89:88:
         d9:83:9e:db:99:79:10:c3:80:f6:90:74:86:1c:22:99:e3:3d:
         67:09:02:9f:17:1e:e3:c5:58:be:b7:9c:41:b4:f9:2e:d3:de:
         27:1d:c6:76:64:f7:d6:ec:20:ec:f6:f8:37:dd:88:85:fe:74:
         84:bf:49:94:b6:72:37:85:72:10:98:13:ab:4a:6f:1c:02:48:
         8e:3f:5d:fb:19:52:2d:1d:77:f8:0b:d9:b0:5b:dd:10:01:29:
         ef:79:cb:1b:3b:ed:be:98:3f:17:1a:33:de:b8:60:94:44:1a:
         3e:26:bf:7d:3d:28:23:df:bd:73:a1:4b:de:50:d4:cc:21:22:
         55:3d:29:ec:29:40:55:86:05:e1:fa:80:62:4d:db:32:08:11:
         dd:2c:e3:76:82:62:40:ff:f6:fe:5f:05:bd:7b:37:ff:87:e4:
         54:2a:df:c2:f1:99:2f:99:11:fa:41:52:d6:cc:38:78:aa:30:
         77:fa:5b:75:0e:04:1b:dd:8a:a8:a1:35:1b:4f:a0:1e:78:54:
         e0:98:6c:9f:64:7c:7e:a6:90:16:89:f6:e4:32:4d:88:d8:f2:
         46:0a:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:01 2025 by rpki-client