Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b8afce4-9885-3478-ac0b-11673691aae1.roa
File:                     4b8afce4-9885-3478-ac0b-11673691aae1.roa (raw, json)
Hash identifier:          MphVKb+fa+G0s5XitwyVQibbHcoGi4SxwSqHljXqDEs=
Subject key identifier:   5E:50:1F:8A:D4:1B:9E:3A:44:99:78:B9:4C:49:C3:17:25:70:50:38
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584BA7CCF8D03F72934DDB05F180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b8afce4-9885-3478-ac0b-11673691aae1.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     396982
IP address blocks:        34.182.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:f8:d0:3f:72:93:4d:db:05:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=ea690380-7db9-4b73-a1eb-77c3bd2fe2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:15:c2:81:41:5f:05:f9:fc:da:11:c2:0c:
                    0a:60:a1:65:18:4d:25:83:2e:5b:fc:06:2c:71:b6:
                    70:53:41:f3:1e:5f:61:b4:09:4f:9c:2c:bf:ec:4f:
                    4e:07:36:76:c9:e1:46:ec:75:c6:95:58:a8:8f:af:
                    ff:e3:9a:17:6f:78:71:47:2b:ee:87:0f:e0:e6:8b:
                    de:2d:d3:fa:01:92:cd:74:1e:e9:5e:6b:ba:20:19:
                    2c:4b:63:63:86:ff:dc:05:2c:5b:28:7a:10:40:85:
                    ef:8c:99:2a:4a:55:b6:14:d4:0f:b1:11:6c:fa:83:
                    a2:ee:d9:23:62:82:2e:74:45:77:5c:0c:e9:2c:c3:
                    36:72:2a:98:bf:f5:1f:94:a2:19:76:14:4c:86:8b:
                    ca:66:3c:4b:d9:a8:6d:ce:e0:b7:ff:28:7e:c3:a7:
                    ab:56:0f:c3:b5:b7:74:f7:34:60:2e:9a:7f:97:89:
                    5a:a5:34:77:11:39:6b:00:5c:ce:63:67:ff:e1:11:
                    6a:bb:1e:b3:b8:f3:3e:01:25:c1:9e:68:44:bc:70:
                    cf:a7:bd:67:12:d6:ba:65:4f:64:1b:19:38:75:3f:
                    eb:3c:c4:cc:c3:cf:fa:05:e8:93:55:06:39:dc:9e:
                    fc:b0:4c:04:0b:e7:5a:89:d6:ea:3d:83:b0:8a:7d:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:50:1F:8A:D4:1B:9E:3A:44:99:78:B9:4C:49:C3:17:25:70:50:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b8afce4-9885-3478-ac0b-11673691aae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.182.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:98:70:29:19:cb:52:25:10:1c:25:7f:76:e2:5a:ad:ac:b1:
         ab:ed:8e:4a:62:56:d0:31:aa:7d:83:45:0c:cd:52:92:30:16:
         68:92:8e:8c:fc:58:11:3d:26:bc:69:9e:2b:b7:c5:93:9a:9a:
         d9:59:9c:de:87:e0:f9:05:1c:5a:10:a7:ce:e3:df:4d:04:85:
         55:68:a4:03:1c:74:df:8d:58:cb:88:a3:bd:9a:70:a4:ce:9b:
         ed:3d:3e:62:8f:bb:2b:b8:35:a2:df:cb:1f:d0:09:12:3d:43:
         27:a6:e1:4d:dc:6f:b0:a5:f6:bd:a0:b6:61:b6:ea:eb:ed:a4:
         b5:b2:bf:11:d1:c0:8f:12:1b:7e:fa:a3:af:cf:38:90:39:76:
         f7:6e:03:87:3e:ee:c6:c7:2f:75:db:84:b5:e2:e2:31:43:9b:
         cc:ed:2b:93:9f:20:da:97:18:70:a1:7a:9f:20:26:35:32:a1:
         67:af:24:fe:98:12:99:70:93:ca:df:77:23:44:dd:b1:d2:78:
         34:ca:00:c4:d5:84:6c:a9:0e:a0:c1:f7:14:3b:a8:24:8c:2a:
         de:f4:72:81:dd:ef:db:31:a9:49:02:72:53:7a:fe:de:fe:97:
         e3:69:d0:11:4d:4a:21:f3:44:44:6b:7c:eb:1b:eb:80:ce:28:
         da:72:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:30:47 2025 by rpki-client