Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa
File:                     52037103-8e6a-31e2-91b6-01a8928ef1da.roa (raw, json)
Hash identifier:          mz+ar4BMync+Mvuz8lb7C72rc163OXpkemLLF9TtzAU=
Subject key identifier:   5B:E3:35:31:40:39:28:AE:A9:12:BE:8B:F5:2C:AD:EB:02:6A:FD:17
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EAA51F761F0990E00E067DB40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        34.123.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:f7:61:f0:99:0e:00:e0:67:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=135e7ebc-a52b-41ef-8638-2ff4a28eec16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:bd:95:e8:92:44:58:ce:72:e4:03:c3:08:
                    0c:58:73:8f:65:1b:4f:34:2d:53:5a:ec:08:a5:e3:
                    90:34:bd:c5:d4:e6:64:07:4d:9a:7f:5f:d5:ab:03:
                    82:06:df:ff:00:00:85:54:90:54:ff:a9:27:87:97:
                    3e:0a:97:6b:13:d4:6e:22:a3:7a:e2:7c:c0:94:4d:
                    9d:fb:a0:b3:24:6f:fb:7e:45:d8:bc:5e:0f:49:8e:
                    8e:0b:d5:98:5f:24:b1:a9:28:f9:f1:83:50:35:09:
                    fe:62:4e:bc:06:94:de:83:f5:85:46:c4:ef:62:35:
                    16:73:b8:6b:73:f3:f0:ac:59:07:25:43:bf:fc:34:
                    03:96:28:8c:3a:ea:d2:08:25:37:72:79:bf:36:eb:
                    6f:52:4f:d1:ca:34:6f:0f:5e:fc:2b:56:aa:b6:b0:
                    37:a3:d0:e8:e0:ec:3d:11:25:b1:83:3b:05:ef:6a:
                    c0:25:1a:5c:dd:f5:c9:c5:75:98:12:41:98:40:a8:
                    8a:d2:7d:d0:82:e1:fb:8e:2e:f6:2f:97:67:43:70:
                    b1:13:70:df:e3:fc:b7:34:60:57:04:f4:03:2a:62:
                    38:a4:e4:4a:61:80:e6:17:f8:15:63:65:bf:bd:bc:
                    fe:3f:c8:67:2f:09:d9:2b:a3:e7:d7:d5:93:c2:1b:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E3:35:31:40:39:28:AE:A9:12:BE:8B:F5:2C:AD:EB:02:6A:FD:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.123.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a6:aa:ff:79:8b:f6:4d:6f:b8:f8:42:a6:e7:8a:57:87:76:
         13:b2:f6:d3:29:d3:c1:68:b5:fb:9a:2c:d4:49:bb:31:a5:4e:
         51:e2:65:fa:71:8d:14:da:dd:30:eb:cc:a2:66:d6:bc:d8:d6:
         66:45:ee:e1:65:d1:4e:8e:8b:e7:58:85:f2:9c:21:95:a6:64:
         d0:da:f8:f7:24:1f:6a:30:f5:e4:e2:fb:05:a1:74:85:41:90:
         74:f9:4a:86:f0:65:c0:cd:1a:8c:7a:4f:84:7f:52:ea:22:d8:
         46:2d:1e:57:8c:c0:8f:72:33:92:c0:29:98:19:f2:83:47:1c:
         a6:ce:31:a7:bb:a5:f2:9f:68:16:ac:a2:2f:ec:a3:f4:5f:67:
         1a:ea:66:ce:dd:45:3f:66:7e:f5:0c:8c:e3:e9:58:a7:d3:c2:
         f8:db:c8:6a:65:56:20:87:2e:c4:a2:1f:3b:ea:a1:2b:8e:45:
         cb:02:3d:9a:58:8c:78:bf:54:34:bb:72:1c:69:aa:d4:ea:b3:
         82:32:d4:3f:c2:3f:a0:3d:f4:c5:83:2f:de:7e:7c:83:68:d8:
         83:80:32:62:75:5c:00:95:b6:0b:83:80:d5:48:75:21:f3:c0:
         b3:df:3e:df:7f:21:d0:55:b9:5a:1e:66:53:44:92:72:0c:6e:
         04:c4:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:52:02 2026 by rpki-client