Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e18b2840-54f6-30d9-9086-ead88b340d4b.roa
File:                     e18b2840-54f6-30d9-9086-ead88b340d4b.roa (raw, json)
Hash identifier:          t6optwanDqw+hq6p1VrmWHzeWQOhMfyp9bC3mXStWtk=
Subject key identifier:   08:15:9A:6F:F7:48:CF:ED:5A:74:D7:AD:00:71:0D:00:83:73:AC:02
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797E3D345146FF3A1E09DA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e18b2840-54f6-30d9-9086-ead88b340d4b.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.136.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:e3:d3:45:14:6f:f3:a1:e0:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=cbc4a018-d677-4790-91f9-fd7db1593824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:58:93:8d:22:9f:0e:73:98:f2:01:9d:09:
                    10:7e:5d:e9:2a:16:03:49:d7:45:04:13:b7:4f:c7:
                    ae:72:f5:b2:33:66:6e:d6:da:af:77:b2:d4:2b:b8:
                    bf:0b:b1:9e:a1:1b:3b:bd:c7:68:ed:36:89:97:fd:
                    6b:29:b3:28:4d:6d:d5:ed:90:53:31:d6:1e:96:8c:
                    7c:fd:df:fa:b5:49:d2:98:c0:38:c0:f5:d8:d4:76:
                    7b:73:36:22:27:26:39:42:a3:de:18:cf:70:13:27:
                    eb:2d:c3:27:e5:91:af:4c:37:75:b5:df:bc:a9:1c:
                    13:f6:1e:ae:f9:83:bb:a5:a0:c0:64:75:7f:bc:d3:
                    96:e6:97:7d:21:f1:aa:10:30:84:fd:a9:24:6c:0a:
                    a7:df:7a:7e:07:0d:2d:6a:15:d7:e7:c2:92:b5:6f:
                    34:f8:09:f9:05:3e:ec:ff:e3:d9:02:e3:89:e6:2b:
                    a2:6d:25:71:db:8c:b8:27:88:34:d5:25:4f:6b:13:
                    23:e1:f9:fa:0e:a2:48:f1:d3:80:9e:62:2d:cf:aa:
                    6d:b1:23:7a:72:d1:70:26:21:78:20:7c:48:bb:c6:
                    31:5a:68:1a:6c:aa:dc:e8:fd:aa:e8:04:c0:64:1a:
                    9e:15:1c:7c:3b:64:ae:9f:d5:84:45:a6:b1:34:ba:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:15:9A:6F:F7:48:CF:ED:5A:74:D7:AD:00:71:0D:00:83:73:AC:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e18b2840-54f6-30d9-9086-ead88b340d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.136.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:16:e6:a4:21:cb:75:57:a6:70:05:94:e2:56:53:9f:9b:
         14:bd:fe:cc:17:c7:5c:ac:35:8b:7e:0b:29:30:0d:b1:90:ab:
         87:e9:ca:71:8a:fd:15:a5:42:7b:ab:16:56:3d:50:0c:2c:fa:
         76:93:8e:a4:51:f9:6d:49:c4:43:ca:f7:c1:4d:d0:23:5f:6a:
         8f:a4:47:d3:61:d4:47:9b:a2:01:8c:95:ef:8e:13:f8:aa:fc:
         9f:67:12:22:ae:93:33:95:86:2b:b9:94:af:e8:6f:16:0d:98:
         68:d0:51:f6:15:cd:61:3b:e9:2d:53:08:d7:e5:33:b3:4f:37:
         0f:f9:c7:f3:52:46:ad:c1:96:41:6e:d5:7d:cb:3c:5a:27:d3:
         76:9a:ce:44:ef:ee:27:d3:6c:ef:91:de:5b:a7:0f:3c:1f:1b:
         46:70:78:4b:f5:66:1b:2b:be:c2:ed:58:a0:89:fd:05:6f:14:
         59:82:b6:58:57:ef:3e:50:9a:9a:c0:97:f5:f7:f3:1f:87:11:
         69:96:70:b9:d1:06:94:e9:2f:26:43:ee:39:00:35:c6:fd:e0:
         e7:df:8e:81:af:f5:d8:a0:67:e7:73:1a:97:b6:32:a6:4b:91:
         22:36:bc:55:59:4f:4f:0f:58:c8:dc:42:df:05:a6:63:f0:a8:
         d6:b9:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:53 2025 by rpki-client