Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb7b47af-a660-3a16-b221-4c0a3d7826d2.roa
File:                     fb7b47af-a660-3a16-b221-4c0a3d7826d2.roa (raw, json)
Hash identifier:          UkWO5mfifZ43XBc6H2umiE3UMD3oaVaYEY5ZaFPrCjk=
Subject key identifier:   4C:A6:01:71:7F:BD:61:73:47:E0:CF:ED:9F:3B:EF:E9:EB:DA:44:21
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797DB8EF5EB57B4B5B01B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb7b47af-a660-3a16-b221-4c0a3d7826d2.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.67.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:db:8e:f5:eb:57:b4:b5:b0:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=fd0f2b98-1a73-43c4-8f3b-4b2faf55ec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:64:19:9b:c6:ac:4f:8b:22:1c:1b:13:ab:
                    00:6a:89:35:56:d3:74:e8:6e:04:00:28:a7:d1:31:
                    db:a7:2b:18:a6:d2:88:79:64:d6:d5:73:bf:07:98:
                    9e:87:bd:12:ae:0c:31:11:aa:51:54:4d:78:d2:42:
                    31:85:d4:3d:52:28:14:11:83:4f:ce:b1:a1:ab:41:
                    8f:9d:4e:6b:f5:30:42:f9:91:47:e9:3f:d6:4a:dd:
                    43:1e:ac:98:47:7e:a4:16:26:19:58:dc:42:47:a6:
                    08:21:74:d8:2d:b7:ff:9d:34:1f:a9:b4:43:5f:e4:
                    a2:a5:aa:55:9a:ed:39:52:47:c3:0e:f9:09:99:96:
                    a3:1a:e8:c0:20:4b:76:88:3a:0e:fe:6e:ab:6f:fb:
                    98:02:58:40:8b:1a:09:15:74:d3:de:2a:43:52:07:
                    2a:0a:92:76:1f:42:ec:03:6e:f9:5b:b6:44:78:b4:
                    7e:81:d5:df:46:52:98:0a:fa:d1:92:70:40:b6:32:
                    a3:e8:ef:e4:00:8b:e2:b6:d0:81:46:7a:ef:37:d2:
                    5c:51:fc:ef:bd:3f:36:ee:70:8e:2b:33:18:a1:99:
                    02:6d:d4:76:dc:2c:f3:2d:e8:52:78:19:e5:79:d8:
                    47:5c:e5:9a:1f:19:e2:d3:65:22:c7:c9:38:6f:6a:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A6:01:71:7F:BD:61:73:47:E0:CF:ED:9F:3B:EF:E9:EB:DA:44:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb7b47af-a660-3a16-b221-4c0a3d7826d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.67.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:31:ac:24:66:df:4e:ad:21:83:fc:e2:1d:a1:51:eb:f4:
         46:94:e2:60:27:9f:d5:25:2c:48:47:de:ff:16:12:1c:8a:80:
         0d:97:5e:2c:49:1f:bd:a8:00:67:5c:a8:c4:97:ea:db:fe:c5:
         76:43:b0:3c:0b:ba:5c:65:74:65:59:a2:5b:1d:d8:74:fc:68:
         bb:40:14:fd:f1:64:92:db:f3:dc:f8:34:c4:a7:97:5a:1f:a7:
         74:d6:25:db:61:ba:48:63:a3:c1:f9:a0:3e:95:52:28:a2:67:
         85:18:39:03:fd:16:d5:de:cf:c6:a5:cc:64:3c:53:76:5b:a7:
         a8:a5:14:e7:5e:f0:42:e6:31:e0:40:29:14:92:d6:be:e2:8f:
         da:57:d4:8e:eb:f6:86:b1:ec:d9:0b:04:8c:75:74:2c:03:7a:
         86:4f:0b:33:bd:98:7c:f3:54:cd:f4:04:32:70:49:50:7d:8a:
         d4:35:43:88:d4:73:66:e2:ab:da:44:2e:2c:72:16:fb:5c:fa:
         9c:d4:0f:56:49:d7:ea:05:7d:1b:43:4f:e4:0c:63:69:77:0d:
         93:b9:f8:73:e5:3a:7c:39:01:0b:07:b4:41:96:b1:cb:63:4f:
         bf:cd:89:6d:db:06:a5:08:8b:15:a8:9c:d7:0e:97:0c:2c:9f:
         dd:ce:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:36 2025 by rpki-client