Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa
File:                     d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa (raw, json)
Hash identifier:          yaVJ+m3hXSc3kxUMQtGIkLO6WTjmQbh4pN+bJOYZZos=
Subject key identifier:   FC:E0:3F:FF:0D:E2:55:83:32:0B:0A:AA:F0:B3:E9:79:EA:17:79:F9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA658F6ACC08BA765AB100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.88.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:65:8f:6a:cc:08:ba:76:5a:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=75a7e405-63ab-42b7-a7dc-c263dae2007e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:2a:65:34:4f:62:0f:17:48:f7:ee:36:56:
                    70:87:ad:50:bc:23:c2:5f:48:92:6b:2e:68:7f:78:
                    5d:08:a0:94:bd:c1:c5:cf:f6:11:fc:b5:79:54:a2:
                    c4:cc:4b:97:98:e7:81:6f:e5:9c:d6:57:d5:a2:8b:
                    da:d5:03:5f:b1:9e:f9:9a:48:9e:6d:ba:c5:73:89:
                    99:7a:a3:21:13:ab:20:00:9f:bf:11:47:83:9d:ef:
                    73:0e:64:86:35:f5:f3:27:f4:46:38:78:e6:16:33:
                    d9:07:17:10:f5:51:a7:a3:0c:e7:08:aa:45:50:a2:
                    a7:79:68:44:17:9f:61:ba:eb:98:a5:81:a3:31:bc:
                    37:1f:78:7c:d1:75:62:b1:2b:bd:fd:89:ef:8b:ca:
                    d0:0b:83:a1:d3:a9:c7:6b:f7:0d:72:9e:1b:8d:ce:
                    40:d0:f9:65:0f:a1:ba:48:6e:fe:f0:b2:ba:14:30:
                    12:56:8a:9a:c9:e0:0d:80:e7:87:b0:13:89:56:3e:
                    c3:88:0e:59:3e:52:cc:68:aa:dd:3d:d7:ad:f9:fc:
                    ca:10:8d:9c:e4:43:89:d0:65:30:c3:a6:b1:e5:a0:
                    c4:82:73:30:b3:86:bf:b8:0f:c1:92:9b:c9:cd:39:
                    74:56:b2:4c:c4:c8:5c:99:64:99:7c:92:c6:3e:35:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E0:3F:FF:0D:E2:55:83:32:0B:0A:AA:F0:B3:E9:79:EA:17:79:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4c1ab4f-6d02-343f-962f-35840bae6d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.88.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:35:e4:91:2c:59:d2:0b:82:09:7b:60:53:24:29:6b:09:fe:
         b2:13:5a:01:51:b6:7f:52:a0:77:7d:f6:b1:f6:f1:db:bc:ce:
         fd:f8:db:25:a1:41:62:37:3f:6c:ed:dc:98:bb:ee:19:19:85:
         5c:0c:28:a2:7e:8f:53:0f:94:64:71:9d:e7:90:1a:84:36:a7:
         cc:4e:73:5a:98:24:a7:b6:44:ce:b1:86:64:d2:86:64:38:49:
         bb:10:51:0c:32:ad:9d:9c:23:c0:49:a3:c0:0c:5b:a3:c4:26:
         69:e9:06:bc:e1:e4:71:61:ee:34:ba:84:24:4d:9c:6f:eb:92:
         7b:a5:11:53:c5:12:9e:d4:f9:fe:f6:64:86:94:9e:2f:3b:73:
         f8:31:db:ec:c0:e9:e5:6e:1d:68:4c:1e:81:3f:c5:31:4d:ed:
         83:db:7f:51:8d:cb:c5:3f:fa:c9:40:16:4e:92:44:ba:52:75:
         04:2d:50:36:3b:05:3e:52:1a:9b:97:b2:86:be:cc:e1:62:63:
         8a:b0:a7:a9:ed:11:2f:0b:c4:b5:91:64:2e:66:d0:15:cd:fc:
         46:f6:fc:25:cf:72:ee:65:90:bc:ba:88:1d:e7:fa:90:f9:50:
         33:3f:34:c6:f3:22:34:81:4b:fb:c5:3c:d9:b1:55:2b:8d:31:
         8c:24:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:48:18 2026 by rpki-client