Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e70d3e86-5a95-3948-a7fb-252e09afe03c.roa
File:                     e70d3e86-5a95-3948-a7fb-252e09afe03c.roa (raw, json)
Hash identifier:          PqaaHmxM0HzDB04/I6ejGQjVCLmy/mjYYFp2VTANuR0=
Subject key identifier:   61:AA:E5:A8:03:DB:0C:79:79:90:81:FF:73:84:E9:D0:10:2C:85:0E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B72C1F47E10DED82AD8AE2F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e70d3e86-5a95-3948-a7fb-252e09afe03c.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     396982
IP address blocks:        34.174.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f4:7e:10:de:d8:2a:d8:ae:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=59bd12f1-8d68-448b-be35-4039c70e0fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:66:a8:39:f7:bf:8d:cf:a8:23:92:e4:46:f7:
                    f6:4d:86:c8:14:38:4f:f6:dd:e7:98:2d:57:fe:e0:
                    af:c8:4b:1d:14:ac:b8:78:84:aa:19:c7:b9:e1:ae:
                    c1:0c:94:01:e8:de:68:ed:03:8b:ef:51:57:3d:99:
                    2c:af:2a:37:a6:04:6d:ea:ca:7e:10:89:e0:c7:0e:
                    04:8f:1c:d5:53:44:c2:9d:29:eb:1a:68:95:60:ca:
                    fe:7a:d2:00:3a:06:43:04:f4:09:fa:c4:ba:a4:78:
                    ff:5b:a7:1a:b6:3d:9e:09:25:72:83:09:06:26:61:
                    cc:32:d1:2f:13:81:be:00:31:76:6d:ab:51:db:d6:
                    c0:f2:ed:c0:2e:e3:a9:0b:92:4b:c5:77:bb:f1:ff:
                    e5:79:51:cd:5c:57:31:e5:de:88:70:34:fe:f4:db:
                    7f:1e:cf:08:94:07:a3:b7:f2:6d:20:4b:b1:2a:04:
                    46:9b:be:b9:73:c8:a6:4a:83:7f:16:3b:c0:ee:cf:
                    dc:d8:3a:ac:1e:1b:6c:16:21:b8:43:61:ab:f6:7a:
                    7d:87:0f:dc:12:2c:60:32:6b:d6:76:da:f2:13:45:
                    49:7e:fc:af:85:c5:6c:39:c2:33:31:ff:34:65:09:
                    92:2b:97:fc:5c:99:90:ca:e8:79:9e:ed:8e:fb:6c:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:E5:A8:03:DB:0C:79:79:90:81:FF:73:84:E9:D0:10:2C:85:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e70d3e86-5a95-3948-a7fb-252e09afe03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:52:19:b3:d7:03:df:7b:b4:9b:e5:80:58:01:16:e7:0c:
         d3:53:84:9b:74:09:6e:87:2c:e5:f4:ff:2c:9f:84:81:65:5a:
         64:c1:fd:80:d7:c5:9c:e1:ea:b0:63:96:df:a6:fc:be:61:ec:
         ac:10:97:1c:10:cd:58:c9:a8:51:ee:61:5d:5d:06:28:a0:94:
         d1:89:91:e9:40:ee:ca:da:8f:59:0d:5b:76:94:2f:ed:d2:93:
         ce:84:e2:01:58:0a:c3:89:58:4d:2d:00:8c:ed:c0:27:3f:fd:
         88:27:a1:9c:2b:17:81:a3:d8:5c:01:97:bd:51:a2:02:80:97:
         7b:9e:f2:d0:88:f5:43:c3:32:8a:0d:57:11:36:dc:5b:62:d6:
         5f:3d:ba:94:a4:3c:0b:d5:93:b8:57:f4:79:7d:fd:50:51:2c:
         54:5e:af:b0:02:18:c7:b2:75:4a:69:ab:bb:d8:ba:23:de:00:
         a5:7d:7e:5b:52:18:ea:a0:a9:30:c1:d5:b1:8d:46:e1:7f:e7:
         24:01:cd:01:40:b7:d2:14:12:77:5e:a3:a3:d3:86:0f:48:f5:
         c4:c6:41:6d:9d:1a:4e:9e:14:5a:71:b7:a9:41:11:c7:6f:55:
         84:65:75:f4:5c:45:e0:47:57:b8:8e:18:a7:b8:52:8b:36:e2:
         49:67:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:31:17 2025 by rpki-client