Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89b83122-4b5a-3214-899e-4020b72ab76c.roa
File:                     89b83122-4b5a-3214-899e-4020b72ab76c.roa (raw, json)
Hash identifier:          6Yv+M4JSw01YeRMeW4dQuzv9wifjwKKiPMEK8ToRTdA=
Subject key identifier:   12:B6:FD:04:4D:F2:B6:40:83:83:AA:C7:2A:CB:99:FA:35:53:0E:36
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA3A65BC498DB41AA426A8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89b83122-4b5a-3214-899e-4020b72ab76c.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.88.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:3a:65:bc:49:8d:b4:1a:a4:26:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=27311cd8-29af-4b06-8690-3c62c0528362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9b:e5:50:63:a5:b4:e4:05:e4:2e:b5:62:3c:
                    c7:dd:6e:2c:6a:d2:38:6b:c7:03:43:d5:51:36:e5:
                    57:e3:c1:14:d1:42:3e:b6:a7:a1:6b:15:88:cf:54:
                    9d:6e:ce:32:8c:5d:bb:83:b0:34:90:9c:8a:52:e1:
                    69:36:39:12:2c:47:e0:31:73:72:08:4b:55:8e:54:
                    8e:53:e1:00:05:f1:91:ef:45:58:53:d7:2e:9e:45:
                    ab:c3:ef:7d:27:c0:dc:fc:0f:3e:8e:4a:bb:d7:9d:
                    88:c7:b7:bf:5d:88:ff:67:e9:0f:ac:1c:8a:da:2d:
                    cb:3a:65:20:ca:55:45:71:e6:da:31:a5:91:86:2d:
                    69:58:87:e3:16:66:2c:af:3f:36:78:50:bf:78:88:
                    36:6b:dc:f6:3e:a1:0e:7e:5b:0b:a4:a5:47:00:77:
                    7d:50:2d:5f:9e:31:18:dd:70:17:e2:21:11:39:21:
                    52:b5:7e:ab:9b:40:72:13:cc:df:70:fc:da:4f:13:
                    e0:2b:fe:dd:26:2a:25:99:01:1b:22:5d:e6:7a:61:
                    c5:a2:bd:b9:11:46:5f:bd:a0:c3:14:5f:4f:46:c6:
                    2e:3c:0e:ad:bb:37:f3:6d:f2:d7:5e:c3:6b:bb:c5:
                    61:d1:38:36:a6:57:6e:16:6c:87:e3:6b:1d:9e:68:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B6:FD:04:4D:F2:B6:40:83:83:AA:C7:2A:CB:99:FA:35:53:0E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89b83122-4b5a-3214-899e-4020b72ab76c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.88.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:d8:67:29:4e:5a:ce:ca:a5:b5:89:77:78:f9:43:8b:da:
         e5:d9:18:2d:08:35:76:8b:16:ae:45:41:2e:d8:a7:85:d4:e8:
         89:86:9d:2b:fd:ff:2f:6c:be:8b:b8:43:ed:16:38:e5:4a:de:
         03:a8:b3:94:99:33:6b:c6:d7:d1:03:6b:c5:46:b2:d3:eb:ae:
         95:bb:a9:6d:19:0c:30:12:07:d2:15:ef:4b:a4:a0:65:4b:91:
         d4:c9:d9:f2:59:d4:a5:b3:36:62:a3:43:9a:52:18:02:0c:96:
         e6:0d:62:02:ea:f2:01:73:29:a6:e4:72:a1:e5:8f:30:8b:b2:
         ce:87:d7:b1:07:61:a6:8a:dd:c3:92:c2:88:e5:97:4e:23:88:
         c1:f7:97:62:70:b8:36:49:85:8a:34:9d:fe:3d:c1:1f:2b:3c:
         23:b9:f8:4b:aa:ef:93:28:d0:89:3f:37:14:75:ac:e4:97:ee:
         ea:9a:63:c7:bb:14:22:b3:69:b9:a7:69:f7:2e:ea:a7:28:55:
         0a:df:8a:5a:15:be:a5:8b:d0:1a:25:67:52:67:d6:8b:c2:b9:
         3c:e5:e3:7b:86:20:cf:ad:62:ad:f6:6c:3b:63:ec:16:6f:d9:
         be:8b:96:c1:de:04:9e:7e:94:36:4a:e7:52:ba:54:5f:58:e5:
         8d:12:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 03:12:49 2026 by rpki-client