Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7a9b488-4222-36d6-9f9a-bab7325bea60.roa
File:                     e7a9b488-4222-36d6-9f9a-bab7325bea60.roa (raw, json)
Hash identifier:          c2Kz41wVV80Ann40qCwf9fn7H24m0kpzWBAi2lSTPAM=
Subject key identifier:   D0:86:A9:17:65:8F:55:8E:9D:6B:E6:DA:F9:5F:1F:CA:5F:94:77:5E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797D2C30A2FA6C6C78EED80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7a9b488-4222-36d6-9f9a-bab7325bea60.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.66.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:d2:c3:0a:2f:a6:c6:c7:8e:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=d7f5f67c-db13-4ed9-990a-83d72bef8969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:8d:a1:1c:ea:83:06:b0:ff:d4:79:0f:b5:
                    50:9c:0c:9e:2f:e1:a2:db:a6:0e:af:42:3e:36:63:
                    ff:cb:7c:d0:f5:48:61:dd:4f:d9:26:c3:d6:70:99:
                    3f:30:bb:fe:2b:cd:72:08:0d:64:54:46:69:44:7e:
                    55:69:56:ea:90:ff:5a:18:98:e8:55:48:74:f5:47:
                    e7:09:da:10:f2:38:c8:af:2d:03:48:fa:42:f3:cf:
                    81:38:22:90:04:cd:60:e5:48:83:6b:18:8e:2f:f2:
                    97:2d:50:74:69:08:ef:86:6c:04:d5:cc:46:8b:bc:
                    11:a5:46:93:b3:d5:0b:d9:53:8c:73:7c:a6:28:21:
                    08:6a:c9:c8:52:06:c1:f7:9e:ac:35:18:c4:eb:cc:
                    52:6d:17:c5:1d:c9:22:c7:47:26:d6:2a:cc:bb:66:
                    df:b1:83:4f:0e:16:fb:cf:ba:39:98:24:31:0d:b0:
                    76:79:aa:1e:fe:3d:26:28:5f:b4:64:cd:2c:8b:e5:
                    10:fe:82:3d:ca:dd:fc:6a:b6:bd:a5:18:0b:df:49:
                    bb:1f:25:2d:38:62:d1:76:5d:2c:9f:31:0b:9a:78:
                    5c:81:f0:76:82:1e:31:e7:ec:40:0f:47:7a:42:79:
                    73:87:69:d7:65:f6:ec:be:d9:72:3e:82:4f:5e:a6:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:86:A9:17:65:8F:55:8E:9D:6B:E6:DA:F9:5F:1F:CA:5F:94:77:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7a9b488-4222-36d6-9f9a-bab7325bea60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.66.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:79:33:cd:1e:e3:1e:41:78:18:cf:99:25:66:0a:c4:b0:df:
         9c:00:d2:14:c1:07:5c:4c:17:01:ac:a2:98:5d:89:e1:39:69:
         b4:69:f1:8a:93:e3:d4:26:2d:13:d5:e1:aa:6d:71:df:fe:ba:
         7b:22:26:18:50:75:b3:e8:e2:fd:dd:74:9c:db:68:5a:b9:46:
         bc:aa:54:e1:cd:f5:13:0b:23:0f:57:16:e3:fc:05:b7:1d:2a:
         a1:43:e1:9b:9a:fa:f7:5b:91:ab:b6:42:ce:6f:95:51:2e:83:
         8d:1a:5c:6c:ae:fd:9e:87:51:8d:83:be:4c:cf:94:88:a3:3f:
         2b:3a:02:f2:4f:2a:e5:ce:9f:6e:51:83:ff:48:a4:7e:ff:9c:
         34:98:ce:b0:01:34:1b:07:8f:8a:58:cb:af:b6:6d:e6:cb:97:
         48:ff:ba:1c:40:a0:f6:b4:2a:25:df:9a:b5:3a:2f:03:ca:14:
         a9:ae:2f:04:36:9b:e6:c9:f9:4f:e6:55:5f:a4:fe:e0:78:0e:
         74:eb:5f:cb:bd:fc:06:d2:dd:a8:4e:c4:4c:b0:b1:78:35:e3:
         16:17:79:8d:7a:3a:af:29:3e:24:46:60:dd:2a:c5:dd:16:a1:
         3e:61:e3:ef:b5:0e:a5:c9:58:15:da:37:44:61:42:32:6a:55:
         99:ea:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:51 2025 by rpki-client