Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcfb4335-9c94-3e61-bc60-d2b72b490756.roa
File:                     dcfb4335-9c94-3e61-bc60-d2b72b490756.roa (raw, json)
Hash identifier:          i8o2U5hJT/b1Ednx6LVpdyWWQS4Nmw/yRCVSh3JV24g=
Subject key identifier:   C8:51:96:72:B8:E0:A8:AA:A5:CD:69:FB:84:92:00:96:7E:8D:CA:A3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CD691A1C2F206B4F932780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcfb4335-9c94-3e61-bc60-d2b72b490756.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        34.119.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:69:1a:1c:2f:20:6b:4f:93:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e7618979-0435-4e87-aa7d-5c1c466e16d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:57:c2:95:ea:41:88:a6:db:8b:74:45:5f:
                    91:2e:29:48:fb:4b:55:35:e2:0c:a0:3d:f2:44:9a:
                    92:af:56:b5:85:d5:04:68:11:0b:76:6a:77:a9:41:
                    d7:75:0b:3b:70:8b:2c:dc:41:8f:57:c5:91:42:2a:
                    66:cf:e1:fe:22:ee:55:8d:21:d0:b9:2a:1a:18:db:
                    13:bc:fd:8a:6d:8f:0f:01:49:20:ff:92:0c:a0:93:
                    46:fd:e5:23:b6:df:73:f6:06:94:41:74:bb:86:5c:
                    5f:4c:08:1a:ad:5c:2c:9e:5d:6d:38:23:76:5b:21:
                    b3:dd:8b:f3:8d:69:45:ff:54:b0:9b:26:59:3a:74:
                    f5:b7:04:fe:08:96:77:04:38:93:1e:ba:61:cf:e1:
                    08:f2:aa:61:d5:a1:1b:b3:5b:b4:7f:eb:14:00:b4:
                    0e:b1:90:21:d2:b3:55:52:e1:ab:3f:6b:28:da:92:
                    aa:36:5b:e4:07:e5:47:e9:83:45:2d:f1:0c:fb:18:
                    2a:75:e5:9a:3e:f7:20:50:15:ac:10:19:88:4a:bb:
                    48:c9:2f:b5:ff:18:f5:fb:5e:7f:d7:4d:d2:b1:24:
                    f1:06:3f:ea:bd:b2:aa:20:5e:65:cd:db:cb:35:57:
                    24:f9:f0:2e:71:e9:95:f7:21:01:26:b5:b1:ad:e7:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:51:96:72:B8:E0:A8:AA:A5:CD:69:FB:84:92:00:96:7E:8D:CA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcfb4335-9c94-3e61-bc60-d2b72b490756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.119.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:ec:72:82:a7:53:eb:81:c6:2d:9c:c8:f5:99:85:b2:84:
         80:dc:2c:f5:df:d8:ce:44:72:7f:1a:96:1b:11:ac:3f:3c:d3:
         89:eb:ef:0c:f2:42:b7:49:c9:61:99:b5:ec:f8:a5:da:8b:de:
         35:a0:65:8f:4f:c8:44:eb:52:8c:46:1b:c4:15:40:6c:e2:5d:
         ef:8b:84:f3:93:97:d5:3f:af:cc:22:ba:c3:ad:ac:47:b9:9a:
         f2:6f:af:72:3b:71:c9:4f:de:c1:1e:d8:ec:ed:b6:85:f4:f1:
         b3:5e:82:61:0a:eb:5e:f3:1d:5a:47:fb:13:5d:b9:d9:98:c5:
         ba:97:30:80:0c:90:f5:5f:ab:22:73:28:a9:ff:ae:cd:c1:fb:
         4f:67:4c:27:f0:58:39:b5:6f:4e:e6:2b:81:d6:73:2d:ef:29:
         65:f2:a7:41:29:b5:16:64:9e:e9:72:4e:3e:d4:25:80:9a:69:
         55:2e:0b:07:44:98:1b:5a:84:6f:33:31:fb:45:d9:09:4d:06:
         cd:83:ae:93:1a:b1:42:ce:f9:e6:90:9c:98:46:43:9a:56:3d:
         87:3d:ef:f4:d0:c5:dd:62:e8:80:b8:af:f8:b0:8b:f7:ea:b9:
         5a:13:5b:37:c0:b1:8e:1e:f5:7e:a8:f5:63:37:df:4d:c0:94:
         df:ff:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:34 2025 by rpki-client