Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e347a86f-55d8-32f2-9b43-0b2fac4a66f6.roa
File:                     e347a86f-55d8-32f2-9b43-0b2fac4a66f6.roa (raw, json)
Hash identifier:          6rmZ/tbeJcEkkewSm9xpqv79hO+Gw3q5vfF8Q2llJyI=
Subject key identifier:   A6:80:75:B3:F5:40:C8:64:3A:88:28:6E:28:39:47:4D:CA:C2:CC:9F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E02D29587AAFEE5CD6D350
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e347a86f-55d8-32f2-9b43-0b2fac4a66f6.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        34.1.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:2d:29:58:7a:af:ee:5c:d6:d3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=0d6d9f07-f203-4818-a918-ffba06720b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1c:c5:23:07:9c:c6:e1:71:1c:4b:6a:2a:89:
                    0b:37:51:c0:1d:53:05:e3:95:db:91:9d:62:5b:43:
                    50:3d:64:16:03:1a:5f:bd:5d:07:0c:7c:47:67:ee:
                    33:66:0e:e1:0c:6a:77:25:09:4f:23:10:87:c9:09:
                    c2:3c:ce:b2:c7:a7:f6:99:e1:e9:91:33:4f:3c:7a:
                    de:20:d2:c8:f5:09:8f:a9:06:e0:0f:f6:d3:17:75:
                    17:97:21:a3:f6:8f:bb:9b:ed:8a:90:5a:c2:b4:cd:
                    12:77:df:dc:77:19:08:fd:fc:b5:43:42:b5:31:4a:
                    11:35:a3:8b:62:dd:eb:1c:bd:f7:90:fc:cb:62:e5:
                    9d:3a:cf:1a:2f:1b:91:89:86:4c:60:fe:09:a2:9a:
                    e9:23:58:a3:0d:a9:63:8d:9d:0c:2b:1f:3e:30:33:
                    f5:55:d8:3e:f2:78:f2:e0:b1:a4:bb:be:d5:9a:d3:
                    ae:cb:c0:cb:96:93:b4:14:43:a6:13:63:e8:fc:b5:
                    b0:77:e8:2b:e4:5d:24:1c:6e:e4:06:5d:4b:e7:a9:
                    a0:09:31:94:23:2a:9b:d5:4e:7a:62:b4:1d:ae:9c:
                    db:ac:b9:82:9d:6d:0e:84:c7:dd:31:49:6c:af:3b:
                    ab:f3:29:4c:44:aa:89:a9:2c:63:c5:25:0c:d2:f3:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:80:75:B3:F5:40:C8:64:3A:88:28:6E:28:39:47:4D:CA:C2:CC:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e347a86f-55d8-32f2-9b43-0b2fac4a66f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:82:31:fe:8d:fa:f2:1d:4f:ff:b5:00:63:5b:e0:07:9f:
         e3:13:c4:65:7a:f1:3e:68:5b:bd:02:ff:4b:07:83:a7:04:88:
         ef:05:8e:b4:8c:39:c0:19:06:24:c5:21:98:6c:50:fd:20:67:
         3a:3c:8d:7f:e7:d0:35:29:70:0c:1a:54:3f:6b:83:bb:d6:45:
         69:f7:ae:1b:a0:f3:23:54:92:27:18:b5:07:2f:03:1b:a5:3c:
         08:25:3c:8b:4d:b6:cd:e2:48:c5:cc:cb:7f:5f:7b:da:cb:99:
         07:de:ad:fa:48:af:67:e9:6c:0f:9b:6f:35:2e:28:0d:cf:a1:
         06:f1:b3:ca:c8:30:dc:31:ba:3a:58:4b:30:1c:ae:78:3a:14:
         0e:e7:fe:a4:f0:52:a0:1f:93:ff:51:a7:d2:97:00:a2:e5:fd:
         e2:73:28:b8:84:97:a3:c0:d5:d0:4a:8e:64:a0:72:8f:94:b4:
         b7:f5:e4:7a:24:4c:1c:f8:6d:8f:e2:50:32:43:66:57:a2:a0:
         55:88:c0:07:15:00:8e:8e:a8:f6:36:f9:7b:d1:d2:b1:95:9c:
         24:76:a3:62:65:5b:19:64:4f:46:b3:93:6b:57:93:f3:65:b0:
         cf:e1:e0:9f:5d:9e:7d:29:e7:e4:12:8c:cb:aa:cf:f0:31:1f:
         41:07:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:49:22 2026 by rpki-client