Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2700269a-5d59-3d05-b695-1e16806b3062.roa
File:                     2700269a-5d59-3d05-b695-1e16806b3062.roa (raw, json)
Hash identifier:          qa6pqrv6ShNuEvdNHrGn3TMEQCdZPNhQ15qqTmdEEOk=
Subject key identifier:   AB:50:D8:0E:4C:CB:A5:AF:E1:EB:06:FD:67:52:CA:6D:BD:A3:9C:10
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E0F31F22AE1632BC73B2C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2700269a-5d59-3d05-b695-1e16806b3062.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.121.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:f3:1f:22:ae:16:32:bc:73:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=2fea3957-a16b-434a-97b2-74a060ab1c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:ed:a2:70:74:bd:46:65:d3:4d:28:2c:f1:
                    ba:99:53:da:ba:d2:81:80:21:84:63:de:d9:ef:27:
                    59:51:65:27:bd:67:ea:63:1b:a6:af:16:f9:49:21:
                    d6:8a:e9:e0:71:e6:4f:dd:14:25:d4:74:76:8e:8d:
                    4b:af:ab:18:70:4e:45:a5:5c:74:a9:4c:85:8b:28:
                    1b:c4:fb:73:56:7e:87:bc:ad:9d:3d:34:49:f9:2e:
                    e2:23:f2:e9:90:14:52:66:b6:57:bd:49:8b:e6:27:
                    14:73:2f:05:df:99:59:60:dd:08:f9:c3:09:79:eb:
                    39:0e:f3:bc:2a:bd:4a:63:5d:00:88:ab:47:27:64:
                    3b:0a:99:b5:a1:9d:07:cb:5d:1b:ff:9d:ec:c1:07:
                    d8:b8:51:e4:63:0f:00:8c:cd:51:b8:57:7e:55:4b:
                    26:2b:79:bb:ce:ba:0c:1a:b2:cf:f4:29:fd:6a:e6:
                    e1:94:40:d3:aa:3b:b4:31:ef:5d:5a:62:bd:4b:7a:
                    47:3f:50:d0:f2:15:7f:7d:08:9d:42:96:75:ec:0a:
                    7d:a7:ea:a7:b5:e3:a5:e8:75:87:65:a7:c3:ff:15:
                    9d:f9:b1:49:1f:a8:2b:8f:ec:4e:55:e8:56:9e:af:
                    9c:58:b7:d4:96:50:1d:88:ad:4e:b2:14:12:6d:7d:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:50:D8:0E:4C:CB:A5:AF:E1:EB:06:FD:67:52:CA:6D:BD:A3:9C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2700269a-5d59-3d05-b695-1e16806b3062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.121.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:92:fe:a6:21:09:0d:15:ce:84:85:a5:dd:eb:34:7b:dc:6e:
         a4:64:46:58:52:46:04:71:f0:0d:b2:a8:65:8a:be:eb:c9:6e:
         3d:bf:f1:d7:8e:32:09:bf:eb:fc:e3:df:66:16:13:c7:f0:e2:
         a9:d0:f5:63:ba:dd:33:fe:f8:8a:e5:d9:f8:d4:cd:c0:2b:10:
         b8:54:69:f8:a4:e1:a8:18:73:ea:67:06:3a:90:27:b7:32:d8:
         e1:6d:17:9f:d6:5a:66:f1:97:85:b2:2d:c4:6c:6d:5f:c3:82:
         50:e6:cc:d5:76:78:32:c9:d2:42:2b:9e:6f:e7:de:5d:45:d0:
         5a:49:fc:c1:e1:de:ff:12:98:ef:bd:fe:2b:8e:c8:a6:51:8d:
         5a:cf:b5:7b:89:35:0b:28:38:1f:d2:57:f4:13:42:63:e3:4a:
         9b:9c:38:5a:6b:22:9e:b4:65:16:bf:09:6f:55:6a:e3:c7:09:
         17:c2:f7:6d:a5:9e:4d:f3:da:9d:e2:3c:e0:71:6a:7e:39:63:
         6e:8e:40:59:69:0f:49:c6:53:82:b1:bf:7c:4a:61:d9:53:4a:
         13:a2:52:06:fd:1d:9c:bb:71:c8:23:31:99:54:b5:c4:ea:e8:
         11:ad:6f:25:b3:c6:3f:a9:21:bc:e4:4b:dc:54:fd:b5:59:a7:
         32:cb:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:38 2026 by rpki-client