Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18e9132a-cff7-39aa-b53a-9b8c5d40968e.roa
File:                     18e9132a-cff7-39aa-b53a-9b8c5d40968e.roa (raw, json)
Hash identifier:          UfFVCnINlz8FQF81b0SJMUxfrYysHd+glUEQE8L4HdI=
Subject key identifier:   4F:E6:BC:9D:2E:01:40:7D:0A:2A:B0:50:9C:9F:97:40:91:A8:C4:69
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E0F1EBC2B001B57FCDD960
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18e9132a-cff7-39aa-b53a-9b8c5d40968e.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     19527
IP address blocks:        34.1.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:f1:eb:c2:b0:01:b5:7f:cd:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=24f098d2-18a5-4d6c-9885-1c179e804884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:13:cc:37:66:65:06:96:77:df:e7:e7:f1:
                    5f:b5:82:0b:2b:f5:42:ff:56:45:df:19:0c:e3:a4:
                    b7:b0:1f:12:d4:af:48:01:af:e2:e9:44:cb:11:a6:
                    38:9e:d9:0f:2c:46:41:e4:34:a9:41:3d:bf:14:31:
                    68:dd:9f:a5:f5:fd:68:19:d2:85:af:99:76:3f:90:
                    8f:37:21:d9:8f:50:da:4c:14:eb:0b:cc:4f:3d:92:
                    31:93:3a:f4:50:78:7b:20:03:d9:78:77:d6:8b:f5:
                    c0:20:20:6f:6c:70:f5:43:0c:d4:1a:d7:17:fa:e6:
                    58:56:76:3c:3a:3d:3c:fa:1c:36:fe:be:05:f8:10:
                    e5:6b:02:1c:35:f7:60:76:74:9e:7c:fa:90:1b:64:
                    8e:cf:0a:49:ee:25:cd:ba:58:dd:0a:bb:dc:f0:5b:
                    a8:e3:e3:2f:ef:61:f6:2c:f7:e7:2e:6e:f6:86:be:
                    1f:63:ed:8f:9a:0c:cc:0e:2c:62:bb:eb:d6:5f:0a:
                    1e:1e:0f:e5:55:d0:3f:0d:83:32:ce:f4:26:0d:da:
                    28:d1:cb:d1:c5:d8:6c:6c:6a:2e:5e:7c:cf:55:f2:
                    a0:48:d0:ef:a1:c2:61:a2:20:7f:17:fc:f4:42:c1:
                    d8:e8:70:11:75:38:d4:23:f1:c9:94:25:78:2a:f6:
                    26:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E6:BC:9D:2E:01:40:7D:0A:2A:B0:50:9C:9F:97:40:91:A8:C4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18e9132a-cff7-39aa-b53a-9b8c5d40968e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:62:04:17:57:b9:26:f8:93:a5:a9:b2:3a:59:b3:d9:68:12:
         3f:93:6f:22:a1:e0:e0:fc:b2:ec:de:c2:ec:21:99:1f:e1:ec:
         ac:fc:e8:65:d3:c2:75:37:39:00:09:73:ea:26:eb:84:6e:ef:
         ea:1a:b9:c6:b7:63:f1:0b:d1:9f:ce:e4:28:48:fc:8a:f8:95:
         7b:05:10:59:97:2c:9c:df:a8:4b:73:b4:89:1c:e0:36:db:a8:
         3a:55:e4:d5:0b:a9:4a:2b:6e:35:01:91:66:46:4b:33:c8:53:
         bb:ae:9e:3e:ac:f7:1b:75:41:3e:99:e8:22:ea:26:81:73:26:
         e4:16:a8:f9:5c:0a:9c:dc:25:84:d5:31:47:82:27:d6:17:5b:
         9c:ed:b7:f0:83:51:76:7f:88:54:b8:9f:d0:9c:ad:6d:28:6a:
         0f:07:a3:fd:7b:ea:2f:1e:67:6d:91:8b:44:fd:c7:fc:75:1e:
         8d:4e:7f:e6:af:84:ed:c0:de:1b:d7:b4:b3:a9:2f:b8:67:13:
         41:c5:2a:9f:f3:ca:30:80:05:85:fd:70:00:1e:e2:1a:e7:9f:
         37:c2:74:9b:8d:5f:61:25:c6:62:e8:71:5b:99:cf:bf:7a:3a:
         14:7a:d7:3e:b2:4d:c9:c5:c3:93:2e:6b:0e:32:3a:fa:2a:76:
         e6:5c:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:49:10 2026 by rpki-client