Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5228171c-d5e8-3783-b72a-c823fbca25f1.roa
File:                     5228171c-d5e8-3783-b72a-c823fbca25f1.roa (raw, json)
Hash identifier:          LAbJZIBiIQ5rhwr24nNIUmK6HyLym5qcwZodQDVCnwk=
Subject key identifier:   06:D0:87:62:76:35:92:47:6B:90:5C:4F:29:4E:85:7B:C5:EC:F4:DD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D91C017F8D821ABA7C998B9C4
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5228171c-d5e8-3783-b72a-c823fbca25f1.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     15169
IP address blocks:        34.0.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:17:f8:d8:21:ab:a7:c9:98:b9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=7eda6dd3-c510-4f2c-b4a8-70ee84e4ef8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:ee:ef:7e:f5:09:fd:0b:32:4a:ac:11:d2:
                    39:aa:89:c3:9b:2f:70:3d:5d:ce:a9:4c:c8:6a:f7:
                    73:8f:ef:08:41:99:ec:b6:ce:eb:33:85:f9:ef:9e:
                    34:bf:2e:4e:9f:ce:22:0e:5c:2b:ca:0f:74:77:84:
                    cc:80:2d:67:14:bd:a7:c2:fe:a4:5c:2e:c0:fd:e3:
                    f6:4c:44:15:97:8c:2a:d0:01:52:f4:a2:7e:85:9c:
                    32:06:b9:f2:46:96:53:88:8b:57:36:93:60:4f:5f:
                    4f:4a:ab:b6:bf:ed:27:a9:1c:92:a6:e5:8a:f3:40:
                    98:96:53:e3:59:a9:2b:a6:a9:3d:01:e3:e8:c4:b5:
                    44:00:8c:49:2e:63:52:ec:9a:36:1f:a2:1b:38:63:
                    5e:1f:4c:ce:72:d3:20:b2:b1:1c:06:24:8e:0c:6f:
                    40:91:d4:4d:3a:47:54:a5:b3:41:08:80:d7:87:63:
                    73:8c:16:ed:95:98:86:2a:f5:c9:59:28:72:19:f7:
                    1c:4f:90:6d:14:4f:86:94:05:6c:bf:e2:33:6d:d4:
                    d9:5a:fc:e0:1f:66:77:49:85:5f:ad:79:3c:54:12:
                    cc:b0:9e:b6:9c:5f:29:b9:ad:77:04:35:82:d9:2e:
                    04:27:cc:cc:25:8f:96:b5:95:7e:c0:bd:77:0a:64:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D0:87:62:76:35:92:47:6B:90:5C:4F:29:4E:85:7B:C5:EC:F4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5228171c-d5e8-3783-b72a-c823fbca25f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:9d:06:bc:ee:00:93:25:6c:ea:36:c9:f4:e5:0b:b3:b0:
         80:63:aa:59:ed:bf:ed:36:b2:82:89:9e:ab:bf:58:7a:71:dc:
         0a:90:cb:21:2a:31:c7:c7:15:eb:ee:4a:ea:7d:52:e4:36:bf:
         3d:36:ce:a4:0b:7f:4a:25:90:a2:82:a7:5b:68:ef:c6:2a:94:
         48:70:5c:9d:a4:e3:b0:ee:cc:85:a5:04:44:ad:83:95:ed:ba:
         17:d0:35:17:6d:6d:d6:1d:16:65:7e:b1:0c:f5:5b:32:9c:6a:
         0e:cc:7d:0a:5d:4f:d9:28:57:9b:6e:05:66:a8:4a:fb:fc:4d:
         e4:ec:fe:09:32:7b:59:c0:d2:a9:37:b3:bc:1c:3a:e6:29:84:
         e2:5c:66:82:58:2b:2e:15:5e:57:83:be:ac:59:a2:c4:e8:fc:
         5d:89:f6:00:5c:64:e0:f3:c6:30:19:f9:ab:55:8e:9c:68:c3:
         28:f6:5b:20:b3:29:bb:cc:9b:4f:e4:74:2e:0c:d9:6d:38:0e:
         18:88:2a:8b:33:9f:f6:43:f5:e4:5c:4a:e8:87:dc:90:7e:c1:
         e6:1f:65:78:9d:ce:28:81:8f:90:1f:6f:25:3a:d4:57:1e:11:
         41:e9:c2:13:3c:46:7d:d6:46:31:2c:f3:4a:3e:3f:0d:38:59:
         01:d6:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 22:43:53 2026 by rpki-client