Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78453e15-44ca-30e2-8959-f07d2c551b18.roa
File:                     78453e15-44ca-30e2-8959-f07d2c551b18.roa (raw, json)
Hash identifier:          olNpSkJ/MQnnpBJqPMlLps/Hl+JQKoX4rt5/kqWqPHE=
Subject key identifier:   DA:21:2B:84:3A:ED:7A:2E:40:5C:EE:BD:22:E0:D6:B9:C5:B3:48:3F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D2A74DB5047C77F674EA6EAC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78453e15-44ca-30e2-8959-f07d2c551b18.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.3.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:db:50:47:c7:7f:67:4e:a6:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=2d0777f5-ea93-4028-94ac-f9ac192743f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:9e:f4:16:e8:0f:e4:1f:23:56:96:3f:a0:
                    0b:48:9b:58:ce:07:33:ec:7a:a3:c6:fd:9d:95:00:
                    2f:c7:94:41:9b:6d:a2:3a:49:a3:f7:d5:4b:cd:9b:
                    f2:62:0f:5f:7b:6d:e2:49:59:bb:aa:b7:21:3d:19:
                    67:fd:14:c2:ce:18:17:e4:67:28:e2:4c:fb:17:b7:
                    fb:d3:43:d0:e5:d1:08:01:85:58:38:26:53:a3:e2:
                    57:e7:b9:fa:4b:3a:7a:78:0e:14:f0:9e:60:71:a0:
                    20:77:7e:b3:18:f8:0c:f6:12:e7:f7:b1:5e:b2:fe:
                    17:6f:ac:2c:dd:67:1c:4b:0b:3e:ab:00:b0:df:4e:
                    7a:20:65:f3:03:e5:c9:d5:de:97:e2:00:dd:be:18:
                    e2:3a:76:e1:ca:be:54:92:c4:92:35:d5:82:36:ab:
                    9e:51:f9:7b:23:97:7e:ae:5d:31:76:2c:07:84:d2:
                    51:66:77:1b:55:08:9d:35:51:b9:f7:66:9e:89:e2:
                    da:47:f6:55:85:83:c6:02:2a:80:44:75:b1:69:59:
                    24:05:9a:80:2b:52:18:6e:d1:e5:2c:0d:8e:00:fd:
                    c0:8d:98:a2:4b:18:5a:51:f6:33:67:82:81:e3:b7:
                    81:b8:02:bd:41:5f:33:d5:d5:5c:47:06:24:ca:5f:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:21:2B:84:3A:ED:7A:2E:40:5C:EE:BD:22:E0:D6:B9:C5:B3:48:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78453e15-44ca-30e2-8959-f07d2c551b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:7e:f0:7b:93:5f:30:0c:c5:c9:13:aa:90:d8:c3:bd:1f:
         5c:62:a4:3a:2c:bf:b9:59:a9:00:45:64:d7:99:88:0f:52:df:
         c8:ed:a1:af:5a:93:77:ff:53:e7:44:de:0b:f3:08:47:24:ac:
         03:7d:fa:dd:eb:39:c0:79:de:0f:2d:16:47:33:7b:d0:9b:28:
         97:52:cd:f4:8d:bf:86:69:e5:8e:be:22:27:e8:bf:b2:1b:fb:
         d5:8d:86:4f:d5:34:bc:39:c7:c0:61:3e:26:d2:18:13:08:f6:
         62:bf:92:5f:76:2b:5b:21:a9:45:55:6d:40:5b:b8:e3:91:95:
         31:d8:d7:76:b9:e2:19:aa:05:56:9c:8d:c2:84:45:72:f7:60:
         59:92:f5:59:83:a0:96:6b:31:68:3b:42:97:e7:03:8f:9f:4a:
         21:51:35:f5:a2:17:2b:d4:f6:81:ba:77:3c:06:fa:1a:38:43:
         61:2f:42:d7:32:a3:4b:b7:b0:ba:3b:51:4a:1d:70:7b:53:6d:
         b5:fa:81:9d:65:35:02:31:06:0e:44:70:80:1c:02:d8:88:d9:
         9a:48:4f:54:d5:2d:7d:6b:80:a5:fa:49:ad:14:ec:be:4f:8f:
         73:f5:b2:64:38:e6:65:ef:65:67:6d:0f:c6:50:e4:f8:93:7b:
         fe:e3:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:43 2026 by rpki-client