Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34807848-f6b6-33a6-b8d6-d1b904bf6295.roa
File:                     34807848-f6b6-33a6-b8d6-d1b904bf6295.roa (raw, json)
Hash identifier:          rBnGWE/ncliNMI0S4HRJP7wnNf1MKvvpB7Zt54QB05I=
Subject key identifier:   1A:F3:A9:78:79:E3:26:49:DB:11:8B:00:FE:33:CE:26:1C:07:6C:E2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4988F4D75BA8E14AF678AA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34807848-f6b6-33a6-b8d6-d1b904bf6295.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     43515
IP address blocks:        34.4.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:f4:d7:5b:a8:e1:4a:f6:78:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cb48d728-adfa-49fd-83b2-7b9c92705672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8b:f7:89:fd:ad:0b:b1:18:37:78:a3:6d:87:
                    6b:83:05:06:53:7a:96:53:e8:c8:32:8b:ed:31:36:
                    37:ac:8a:a5:7b:ed:19:ee:14:2b:46:20:8e:8c:ec:
                    0b:7b:4b:7a:53:2a:3f:75:8c:a3:be:72:85:d6:1d:
                    47:2f:46:a5:2a:5f:01:51:bd:58:d5:d7:c6:f2:04:
                    f8:22:79:1c:71:49:c9:af:4e:fa:a4:c6:0e:0b:3a:
                    6c:17:8f:87:6c:d6:30:85:a4:f1:49:3d:b5:f0:1d:
                    5a:3c:ff:42:4a:ea:b8:2d:20:ec:70:d7:42:9f:b8:
                    0c:30:16:dd:a6:92:6e:3c:d4:d7:8a:30:29:7b:ec:
                    6f:74:03:ea:b1:c8:cb:03:ac:94:75:e3:c0:96:94:
                    2a:8c:d8:0a:b8:16:15:8a:40:82:df:96:51:77:af:
                    b2:9f:a1:29:09:05:8d:1b:4a:7f:87:d6:6a:9c:80:
                    8f:c0:b8:b2:30:bc:3b:ee:36:17:61:c5:46:82:bb:
                    b6:15:ac:76:54:f0:b8:f9:95:95:22:64:bc:79:35:
                    5f:f4:c2:b2:5f:ea:81:4c:20:20:07:bf:37:64:d0:
                    a5:0e:e5:8b:ee:d5:ca:fd:44:cb:50:2c:84:5c:25:
                    69:c1:c2:fa:6c:b3:9b:22:59:4f:91:d2:28:3a:2b:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F3:A9:78:79:E3:26:49:DB:11:8B:00:FE:33:CE:26:1C:07:6C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34807848-f6b6-33a6-b8d6-d1b904bf6295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:71:79:2a:5c:47:1d:73:a0:21:e2:3b:1c:38:b6:e9:b1:34:
         96:27:cb:f2:45:82:2f:91:4b:d2:f1:f4:af:c2:32:7f:11:37:
         6b:39:80:f6:2d:1d:e2:18:47:d3:44:2b:d0:7d:df:6e:2c:47:
         17:c4:d0:9d:93:b9:6c:ae:e5:f4:da:4d:39:d4:af:f1:b6:18:
         47:13:7b:d5:1f:96:d8:d8:6f:0f:1b:28:4b:b2:45:fa:2c:f4:
         30:9c:64:3e:00:9e:b4:ca:db:bb:aa:d7:7b:47:9c:74:3b:21:
         5c:66:4e:a5:62:c5:d2:6a:c1:ef:9f:7a:e5:3a:21:de:34:db:
         e1:dc:38:72:9f:33:df:fd:ec:f0:02:6e:0d:36:e1:22:cb:bf:
         9d:d7:e9:2d:d6:5d:24:39:8e:83:09:e3:16:27:ee:54:fa:d4:
         73:ce:02:0a:6a:16:7d:dc:df:85:d6:12:cb:17:ba:9f:0a:33:
         21:ad:a2:87:7e:a0:3a:c9:15:57:31:0c:ef:e5:8e:ef:87:56:
         fc:d5:b8:a7:eb:5b:ae:49:e0:b2:cb:4d:f6:ba:41:c4:19:d1:
         5a:30:3f:9f:4f:c5:93:fb:3f:4a:34:cf:43:21:34:a6:3b:ea:
         1c:54:a0:47:32:3d:25:2c:c1:ac:b8:6e:ba:d7:0a:c6:7d:ed:
         4a:27:9f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:55:50 2026 by rpki-client