Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333db147-456f-3917-81c7-5b38038f2cd8.roa
File:                     333db147-456f-3917-81c7-5b38038f2cd8.roa (raw, json)
Hash identifier:          kVbFvG8cFAK4RpHnbZ+Cmy3++6r9BYzkC4XiDRklBfg=
Subject key identifier:   0F:B0:C9:55:1E:9D:10:84:C7:6D:A2:9C:66:BC:C3:C6:7E:71:55:E6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AAB4C5392BE8ABEC6A0C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333db147-456f-3917-81c7-5b38038f2cd8.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.94.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:b4:c5:39:2b:e8:ab:ec:6a:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=1c49d668-d689-4a04-807e-b62a275c9a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:de:15:10:f4:50:e2:7a:3a:60:bf:2c:7a:
                    9e:7e:0d:ac:42:41:61:12:20:98:88:61:b2:18:5d:
                    d6:dc:57:17:71:b6:20:e3:79:6a:4a:22:9d:1e:45:
                    35:65:25:46:27:7b:cc:c7:bf:2c:72:a1:fe:16:41:
                    9e:6a:fb:08:12:be:e2:53:78:a7:fd:f4:79:c8:3c:
                    84:b6:c0:4e:c5:57:cc:a5:7d:a2:05:69:75:bf:c7:
                    58:79:b6:3a:31:86:5e:39:e2:53:aa:3c:a1:ef:32:
                    db:0d:04:36:65:f1:80:f0:1e:b6:24:52:00:04:ed:
                    7e:a6:96:7e:01:cc:bb:49:e0:39:99:0c:cc:71:b7:
                    72:c3:d5:74:8f:e1:b0:a2:0c:2f:e5:2c:67:e0:14:
                    5b:3c:79:fd:bb:1a:f0:9b:40:68:d2:9f:e6:6c:80:
                    de:7c:68:a3:ca:2c:56:ee:3e:fa:e6:61:c3:2b:c9:
                    1b:c5:af:06:19:d9:ca:7c:f9:ba:0f:2a:24:d1:cf:
                    67:78:48:41:c5:8f:3c:36:8a:cd:34:2e:f6:eb:24:
                    91:cf:f4:cb:43:07:97:53:bd:88:a5:10:08:b2:2d:
                    5a:c5:45:a5:5b:99:f8:45:e2:2b:9d:05:d1:14:ad:
                    3f:f9:f6:77:6c:d5:b3:a8:fd:a7:38:a6:e6:0d:d0:
                    6f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B0:C9:55:1E:9D:10:84:C7:6D:A2:9C:66:BC:C3:C6:7E:71:55:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333db147-456f-3917-81c7-5b38038f2cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.94.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:68:32:29:58:9f:d2:8e:52:54:5d:f2:fe:c6:7d:47:bd:97:
         64:91:b5:a6:de:27:ef:50:51:3f:98:6f:57:f1:46:cd:8d:65:
         33:a4:8e:9d:09:96:2d:f5:ef:b3:6a:58:d2:2c:41:21:23:ee:
         18:cc:17:c2:17:a7:40:fe:12:0e:61:19:ff:26:c5:5a:fd:94:
         27:86:25:bc:cb:3e:64:de:a6:2c:49:ac:9d:e6:95:9b:89:38:
         2c:43:44:8f:a4:73:3f:33:86:2e:03:a6:47:b6:f9:5c:83:d4:
         df:a6:54:e8:3f:16:e3:3b:ae:cc:7c:22:59:ea:db:05:e8:04:
         0d:48:e6:c9:88:c5:d6:70:9f:47:8d:c8:63:a9:77:15:9c:f3:
         aa:68:d8:38:2a:26:53:60:52:2e:56:50:ee:80:e5:d7:f7:60:
         be:44:6b:37:bb:91:68:cc:c8:f6:43:98:ea:66:1d:60:38:79:
         da:21:3e:8a:91:f4:ec:63:d3:68:90:71:d2:4e:db:5d:ec:13:
         e1:a5:52:f6:da:7b:54:64:20:12:6b:7e:51:8c:91:1f:50:20:
         01:1e:a2:1f:37:1b:f4:d4:ec:26:fd:e3:2b:c8:7b:06:db:86:
         5d:29:5f:d8:5e:b9:36:85:bf:41:c6:fc:44:3f:93:e3:4f:c1:
         18:59:4c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:45 2026 by rpki-client