Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b2ceb2f-db82-36f2-99c9-f53c908bca0b.roa
File:                     4b2ceb2f-db82-36f2-99c9-f53c908bca0b.roa (raw, json)
Hash identifier:          3n63FKWHClhenN9lOufRrd+qsgymDR8LQVHQ801kmGw=
Subject key identifier:   4E:1D:23:7D:A2:64:3E:C5:24:52:FF:A2:B1:F3:E0:4B:DD:67:B0:43
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E0310DC58CCFE9DB27BA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b2ceb2f-db82-36f2-99c9-f53c908bca0b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.118.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:31:0d:c5:8c:cf:e9:db:27:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=14920cc9-f1ea-48e6-90bc-832c3a65c49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5d:29:c1:a2:d6:95:f8:7d:cb:0f:d1:35:a2:
                    44:5e:2c:ef:07:fa:1f:b0:5d:ba:eb:01:5b:4d:d8:
                    c6:b3:48:39:4e:4c:2b:5d:a4:24:25:50:8c:06:2a:
                    5e:73:f4:38:ef:9d:87:85:fe:b1:10:45:af:17:1b:
                    c1:53:a9:ee:6d:18:06:dd:54:ad:71:61:c7:a7:80:
                    7a:28:22:be:8c:e8:16:84:07:c8:5f:1d:c2:d1:b8:
                    0e:50:37:61:96:bf:94:90:62:3e:16:e8:f6:e1:24:
                    81:fc:8c:07:eb:bf:ee:dd:97:b0:aa:30:48:51:d0:
                    79:d0:73:4a:06:56:9f:27:32:ef:99:b7:e2:18:43:
                    99:da:51:2c:bc:5b:40:a6:7a:f0:27:54:a7:7b:11:
                    f5:0c:33:eb:8e:9d:4a:6c:52:34:6a:31:3c:7f:fa:
                    9d:27:4e:b6:48:a8:f1:27:96:39:c4:ed:35:f4:8e:
                    d8:39:b0:e3:46:bb:b4:d8:d2:5d:94:71:84:35:02:
                    7c:1d:bd:38:f6:8a:10:21:a7:f2:ea:c8:53:98:08:
                    72:f1:c4:2b:db:fa:38:55:5a:9b:aa:fe:39:38:bf:
                    25:fc:c9:6a:b0:a1:2e:48:9c:d6:76:e2:f3:fc:a4:
                    5a:fc:76:ea:0e:41:e9:09:57:c0:02:69:b4:85:5a:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1D:23:7D:A2:64:3E:C5:24:52:FF:A2:B1:F3:E0:4B:DD:67:B0:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b2ceb2f-db82-36f2-99c9-f53c908bca0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.118.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:33:9e:75:51:8b:eb:ae:15:01:c0:ea:55:46:75:9b:74:
         dc:38:20:f8:72:8e:ee:bc:43:ab:1c:93:a7:20:70:c2:77:e5:
         ce:ad:d7:f5:28:b3:02:82:56:92:09:7c:cb:cd:20:6a:40:58:
         01:9b:52:46:7d:0e:b5:07:02:27:ca:c6:83:65:75:8a:72:91:
         ee:07:3a:07:26:a5:36:5c:80:94:c7:fa:70:28:36:16:20:c4:
         a8:dc:cf:80:bc:ab:ef:5b:23:2e:ed:21:5c:c6:10:10:bd:6d:
         4a:34:a3:42:69:91:d6:fe:d5:d2:30:26:80:9f:e6:91:33:1f:
         ff:70:77:27:b5:b3:a0:c7:05:ef:0f:5c:01:ee:50:d4:2b:34:
         ed:1f:dc:50:f3:f5:04:6e:db:0d:3a:ab:2f:5b:49:e9:4a:e7:
         a7:fa:db:65:61:7b:f2:12:9b:9f:42:69:7b:2d:33:fd:36:91:
         d1:27:2a:3a:f6:fe:b9:f0:8a:9a:8c:7c:e7:4a:23:38:64:9d:
         52:29:5b:3d:16:66:02:e0:d6:2a:9a:dc:aa:01:18:d3:10:72:
         60:12:18:92:a4:b1:c5:76:cf:94:2e:5a:0f:12:0e:37:3d:ff:
         b8:8c:a2:93:f0:19:a5:f7:50:fe:43:d7:22:ab:93:02:b8:61:
         d2:e0:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:52:50 2026 by rpki-client