Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/108b4fd5-f1c8-37f9-a0ee-11821bca461a.roa
File:                     108b4fd5-f1c8-37f9-a0ee-11821bca461a.roa (raw, json)
Hash identifier:          8mWScrUs2tG1Mu6j5Xt9LvMOUS55OZcrwhAqQwxsFTs=
Subject key identifier:   87:F9:43:C7:8A:41:EA:14:8E:8B:5A:D6:1B:5B:62:06:79:1D:F5:AB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA3001247259449FE6F780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/108b4fd5-f1c8-37f9-a0ee-11821bca461a.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.96.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:30:01:24:72:59:44:9f:e6:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=5704a80b-85ee-4ac7-8aa7-d33c433623ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b8:a9:2b:9b:c3:bc:31:f2:38:c4:86:d4:4d:
                    bd:01:b9:59:d1:63:e5:69:18:cb:6e:1a:70:b7:6e:
                    ea:16:28:b3:00:e1:0e:20:86:98:2c:68:75:56:05:
                    dd:0d:f7:0b:df:5e:54:f5:f3:fb:34:5d:10:4a:3f:
                    9f:dd:21:32:2d:35:98:84:b5:b4:48:33:72:cd:90:
                    bd:97:49:8f:b6:04:08:44:2a:92:ff:22:56:65:bb:
                    61:44:06:e7:3c:38:78:bb:6a:97:f3:73:79:69:15:
                    eb:90:84:82:32:07:51:b7:1b:88:d7:bd:ce:69:0a:
                    12:b2:c3:aa:19:87:52:d5:36:ef:08:fa:43:e7:9f:
                    0b:a3:76:75:0a:49:36:fd:c1:65:2f:3e:91:fe:37:
                    2c:58:7c:61:d6:3f:e1:70:9c:76:28:37:f8:7e:a2:
                    79:09:bc:5c:56:40:74:d9:1c:38:04:07:68:bc:e2:
                    d7:0d:71:0c:86:ce:b0:15:58:73:88:88:37:79:a7:
                    c2:1d:7e:26:6e:b7:28:dc:7c:da:e1:bd:70:b2:d8:
                    b9:4d:6e:40:30:d3:00:82:20:dd:83:83:27:76:5b:
                    18:f1:80:7d:b6:70:af:5d:fb:73:79:75:8e:15:53:
                    f6:64:ea:9d:c6:84:75:e2:ea:53:56:63:db:22:16:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:43:C7:8A:41:EA:14:8E:8B:5A:D6:1B:5B:62:06:79:1D:F5:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/108b4fd5-f1c8-37f9-a0ee-11821bca461a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.96.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:75:7f:65:b1:68:0f:d2:0f:e4:46:8e:62:ed:62:e1:ad:
         ee:9c:26:d1:f6:32:4a:aa:2c:dd:ba:5b:33:0f:bc:bc:e3:94:
         01:b2:17:13:ce:fa:fa:d8:81:81:0c:20:3d:b7:92:3e:3e:df:
         c3:fc:1f:ed:08:6c:98:c0:27:20:b4:16:96:39:2b:aa:47:31:
         ab:00:97:4f:69:43:29:d4:80:f4:8b:e7:17:4a:d5:9d:f2:ae:
         cb:e1:1a:be:78:61:2e:6e:7d:c1:62:19:15:77:6b:07:56:5d:
         8c:a8:7c:fb:8f:54:91:f0:70:cc:e5:37:22:68:b7:c7:b2:8c:
         41:05:a2:56:69:a0:dd:53:42:8c:82:17:3c:1a:63:fa:da:9e:
         7c:19:e9:2c:d6:9e:3b:88:be:16:3f:58:ca:f1:54:06:5e:19:
         69:95:b0:b1:6f:91:69:8c:8f:7c:ca:9b:b0:b9:67:9f:cc:42:
         39:73:a7:99:df:ab:8e:38:f6:29:92:5d:e6:8f:6e:e2:61:11:
         46:fa:f3:d8:3d:9d:c8:88:bb:b1:28:e2:0a:84:fb:0f:ed:ed:
         84:86:64:89:2c:a3:29:bd:b0:34:dc:db:36:59:6d:eb:81:88:
         73:e4:51:e6:1a:f6:69:a4:a3:0b:b2:f2:0c:e6:15:fa:36:dc:
         26:72:31:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:50:50 2026 by rpki-client