Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/478d0129-f622-3220-9a39-fe250ddbcc0f.roa
File:                     478d0129-f622-3220-9a39-fe250ddbcc0f.roa (raw, json)
Hash identifier:          0khaAzpdmUNEuL/fDEee/XUKiOV2kPl2IP44zdwXW5k=
Subject key identifier:   53:8A:97:FE:91:86:81:B1:C8:F7:D6:25:9C:6D:40:B3:7F:D0:FE:EF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA62F5B4D3B5B7523C1100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/478d0129-f622-3220-9a39-fe250ddbcc0f.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.84.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:62:f5:b4:d3:b5:b7:52:3c:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=c2f75b4e-bae5-4a2b-be8e-9e17d56e6ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b2:f1:b3:25:f3:b5:8d:c8:e1:e2:a1:23:bf:
                    e4:e3:6d:b5:f1:af:30:00:3b:da:fd:8a:87:e1:2d:
                    70:10:21:98:4a:a2:61:d1:75:a9:05:00:36:b7:eb:
                    0f:6f:ec:cb:d1:e6:ed:96:8d:62:21:26:47:f6:31:
                    5f:6e:07:91:cd:55:d9:ec:65:c5:d4:14:60:91:c9:
                    c1:7c:92:e3:e8:c7:d1:71:bc:49:df:05:8e:e3:0c:
                    7e:70:2c:bb:b8:ce:d9:7e:58:d3:6c:e0:99:4d:fb:
                    98:c7:70:48:56:aa:c8:32:27:93:9c:2f:81:05:80:
                    d4:e2:6e:fb:08:f9:e1:fd:d4:99:98:d5:1e:b7:a5:
                    68:83:77:da:ce:8a:1f:3d:7c:3f:35:94:ee:11:4f:
                    cc:8e:ea:2e:73:92:b2:c0:3a:45:b8:b9:fc:5f:b3:
                    54:4b:79:98:86:02:af:31:25:8a:68:55:29:32:09:
                    6f:92:5f:02:b3:91:ca:e7:f4:b7:31:31:15:06:66:
                    16:04:54:ba:c0:e7:28:e2:47:c3:aa:a5:ff:46:4e:
                    c3:83:ce:8c:73:0b:4f:f4:23:ba:e1:b1:1a:0b:b4:
                    24:38:65:c0:a0:83:b4:03:71:e3:a7:17:65:ec:b2:
                    11:dd:d9:1f:ce:4f:ad:50:bc:ba:12:80:6b:8e:30:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8A:97:FE:91:86:81:B1:C8:F7:D6:25:9C:6D:40:B3:7F:D0:FE:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/478d0129-f622-3220-9a39-fe250ddbcc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.84.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:70:a2:8c:82:3d:c2:25:b4:4f:0f:51:c6:8b:be:dd:ce:4f:
         d6:e3:b7:bf:1e:a9:4a:f7:c4:b0:10:d5:46:ca:27:d4:31:9d:
         ac:ac:8b:0d:5b:35:39:1b:34:95:e5:34:53:d3:58:b4:03:d5:
         11:90:ba:6d:4b:b7:4e:4d:03:d3:3e:6b:81:29:b0:ee:ef:9e:
         74:60:2f:e8:5a:22:59:20:4c:7c:2c:22:58:08:1a:b1:9a:fe:
         c7:95:a0:c3:6b:8e:d9:1b:fb:cf:71:5b:1b:cf:e3:97:2b:48:
         e0:cf:d3:4e:f2:2c:17:c7:58:60:5e:42:4e:02:f5:69:07:3a:
         dc:96:7d:eb:c2:9f:ca:b6:dd:56:32:ce:71:15:ee:3d:b0:9a:
         ee:70:05:56:6e:a2:4a:9d:c7:4a:40:d2:44:ba:4c:0b:68:b7:
         69:ce:88:9a:df:ed:d7:78:6f:18:66:60:f6:d2:7c:07:91:18:
         1d:9a:13:00:a4:f8:a4:d9:a5:2b:17:90:2b:7c:94:62:a8:01:
         da:e4:a8:c2:44:07:4b:e8:0f:d9:84:2e:1c:70:f9:14:31:f6:
         2f:c6:a7:93:c5:6e:7a:0d:92:cf:2b:e0:c0:02:45:d4:8a:65:
         02:fc:cb:49:4c:08:0d:6f:24:c2:bb:91:ff:e6:62:79:d1:f1:
         dd:f7:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:40 2026 by rpki-client