Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/687aaa53-946c-3f50-8b6b-76bf8265e275.roa
File:                     687aaa53-946c-3f50-8b6b-76bf8265e275.roa (raw, json)
Hash identifier:          bzXKCff4Yl09c7AlGEkec1grBcTVPZ8YE4P+1IwAMQ8=
Subject key identifier:   AD:22:4C:C6:FB:A9:F2:5A:3B:4B:83:CF:AE:F0:3F:9E:6B:D7:71:31
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D316F7429FD578161CE00A140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/687aaa53-946c-3f50-8b6b-76bf8265e275.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        34.183.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:74:29:fd:57:81:61:ce:00:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=b1d857e3-8f9a-4038-a138-2a950e354f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:76:ee:13:50:00:28:ce:b3:40:58:56:6d:
                    03:a2:8c:5f:b5:b5:11:ff:e0:b0:e8:88:3b:cf:4d:
                    eb:8a:b7:b7:b0:d4:a0:ce:9d:e8:8d:95:9e:0b:6b:
                    5f:17:d1:bf:7b:ce:4f:26:f7:6b:38:53:41:34:d7:
                    2d:aa:18:ec:48:18:0a:54:65:c0:7f:22:7c:ed:49:
                    4f:58:e2:1b:1a:64:2c:d8:6e:d4:9d:54:f6:c2:2b:
                    47:56:27:3d:4c:73:27:07:ff:c6:6b:65:af:f8:30:
                    6c:88:02:6d:18:cf:ca:9d:98:58:04:a6:91:d9:37:
                    ea:5a:e1:70:73:34:66:7e:6e:3b:ae:73:6c:f5:3c:
                    2a:c2:8d:b2:57:db:6c:8b:26:4f:1a:e7:4f:4d:6b:
                    c6:67:41:3e:fc:9e:9c:14:ab:62:a9:17:42:d1:c1:
                    de:c1:34:e2:e9:6e:58:25:50:7c:fd:4a:ff:2c:15:
                    d0:04:5c:16:1b:22:66:7f:dc:19:d3:ef:6c:e6:1d:
                    fa:21:a4:8d:ec:3a:4f:3e:f5:6e:fd:25:b9:b4:f2:
                    0d:d7:b8:d4:fe:77:b1:03:16:c3:f2:30:86:e5:15:
                    24:e2:c3:5f:b8:79:65:0c:84:67:16:5a:49:a7:1d:
                    3b:9e:1c:ac:4c:14:f1:25:2a:4d:32:51:03:69:57:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:4C:C6:FB:A9:F2:5A:3B:4B:83:CF:AE:F0:3F:9E:6B:D7:71:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/687aaa53-946c-3f50-8b6b-76bf8265e275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.183.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:33:e6:69:86:55:24:6b:16:80:c8:cb:6b:c2:68:47:7a:79:
         59:80:56:25:e1:61:52:7f:d1:78:6c:81:67:42:6c:8a:42:86:
         58:d0:a7:43:8e:d1:1c:32:52:5b:63:ba:ee:2f:21:21:cc:fa:
         59:21:66:7a:5b:bd:cd:7b:01:d9:d0:0a:09:c5:e7:17:1d:a5:
         38:29:6b:74:91:b0:62:f1:83:7c:48:eb:4c:08:21:b2:5e:eb:
         48:61:ab:2a:07:e2:c3:91:cd:60:87:29:b4:a8:20:a1:c4:2b:
         20:3b:81:a7:ed:b5:ee:de:de:ff:22:33:77:2a:48:17:29:e5:
         2f:67:e7:1d:80:46:20:dd:21:22:0d:ce:39:30:42:de:b5:ef:
         cb:8e:12:3a:3c:79:bf:f5:0d:3e:3c:2b:bb:c9:8b:6e:71:f5:
         d6:39:35:45:82:7b:8f:c1:7d:9a:30:24:e7:37:99:75:65:61:
         0c:c9:96:1e:64:de:04:28:d2:f3:9c:e9:fc:68:25:79:00:39:
         ee:de:c6:6f:e9:67:b5:7e:74:b8:eb:1f:1c:9f:18:07:51:0a:
         53:9f:6a:e8:bc:0b:c2:40:8b:0d:d1:61:ad:3e:96:8a:eb:d9:
         71:bf:2a:36:9d:28:72:be:b1:8f:da:5a:cb:2a:cc:55:4b:b4:
         7e:27:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:54:26 2026 by rpki-client