Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ab74330-7b1b-390a-9880-99517fe2a644.roa
File:                     5ab74330-7b1b-390a-9880-99517fe2a644.roa (raw, json)
Hash identifier:          uialC14io97StZmxJecoRKZCAY31S82iRDuug5sg4nQ=
Subject key identifier:   3C:BD:10:0F:D4:A6:50:A3:AD:F8:7B:7F:19:9E:B4:EA:04:AB:38:5C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D5EFE3DAE0FE5647D12346140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ab74330-7b1b-390a-9880-99517fe2a644.roa
Signing time:             Thu 02 Apr 2026 08:39:49 +0000
ROA not before:           Thu 02 Apr 2026 08:39:49 +0000
ROA not after:            Wed 01 Jul 2026 08:39:49 +0000
asID:                     15169
IP address blocks:        34.4.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:fe:3d:ae:0f:e5:64:7d:12:34:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  2 08:39:49 2026 GMT
            Not After : Jul  1 08:39:49 2026 GMT
        Subject: CN=01e8cb80-6be9-497c-b625-09a2f1e45622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9b:ca:d5:e3:15:d3:e7:62:cd:83:b8:e3:55:
                    79:5a:d4:ec:5f:92:46:42:f8:47:18:b6:b0:10:0b:
                    be:ce:f6:bf:85:e1:82:3d:a9:8e:8d:04:67:e7:a6:
                    6b:ae:bb:83:06:5a:6c:31:ca:fe:3d:2f:11:1d:87:
                    85:d5:8b:b9:63:66:e8:94:c7:85:1a:3c:df:1c:00:
                    40:55:90:09:20:44:d2:8d:fb:53:43:cb:40:bc:ae:
                    ec:a0:f7:bd:28:92:9a:5a:14:5e:7c:2e:88:1a:e1:
                    c8:ba:10:23:19:8c:e7:a9:e1:ad:f9:5f:60:c0:2b:
                    21:64:c8:4b:1e:7b:68:83:03:59:71:d9:5d:21:80:
                    ee:3c:d8:55:e1:9b:e4:8b:c6:32:3e:97:a5:e9:78:
                    19:28:5e:fd:97:75:ea:b7:45:d5:78:f4:df:77:d5:
                    f3:4c:70:8a:48:58:ae:8a:bb:0d:0a:71:12:60:96:
                    c0:d4:f7:58:f0:17:1e:99:2d:e1:40:ad:d2:bf:2d:
                    cd:b0:3c:03:86:46:7c:05:f9:1e:d1:64:a1:3c:bf:
                    f9:17:ba:35:7f:de:b8:83:6e:5d:c7:0b:35:f0:3d:
                    c8:56:17:59:5f:af:41:5c:66:5f:4d:e3:4f:d3:7b:
                    f7:e7:99:64:fc:f4:83:a7:e3:4c:d6:fc:ff:dd:7a:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:10:0F:D4:A6:50:A3:AD:F8:7B:7F:19:9E:B4:EA:04:AB:38:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ab74330-7b1b-390a-9880-99517fe2a644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a0:52:57:f9:fc:0c:76:63:8e:82:bf:03:9a:21:76:33:c1:
         f4:fe:f7:da:51:e6:c9:5b:ce:af:dc:55:50:64:0a:57:e0:2c:
         5c:56:cf:9a:9e:74:cc:09:b0:fe:ca:c9:71:31:ce:f7:13:5d:
         78:7a:35:9b:4d:d7:43:dd:93:64:b4:94:1d:32:fe:81:26:22:
         ff:09:70:9f:55:cc:9c:a3:49:2e:e8:1d:ea:19:a5:fb:25:ce:
         bf:30:91:e8:12:28:df:2d:e1:91:2c:78:a2:c4:ec:f6:ce:ab:
         59:46:ae:e8:5d:bf:c3:f5:80:b8:0f:70:df:76:32:46:b7:c9:
         c5:85:98:51:d0:e9:9c:56:b9:19:e9:83:28:31:86:9d:b5:d3:
         e3:53:fa:11:cb:4a:dd:51:ab:ef:97:26:d7:58:5d:2b:73:94:
         a8:a3:d9:33:06:48:0b:d0:c3:34:03:89:17:9c:07:8c:37:13:
         e2:68:03:27:6e:8f:b6:99:99:d9:04:cc:30:33:56:c9:08:aa:
         9c:fe:a0:d2:69:46:3e:3f:d2:4a:6c:c0:32:42:84:c1:f3:5c:
         85:c5:c0:d9:d7:5c:c7:3b:0e:91:fe:bb:cf:38:5a:34:0d:fa:
         46:57:cd:f8:65:a1:bb:c9:05:34:5c:34:cd:ee:80:b5:72:21:
         06:4b:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 04:35:48 2026 by rpki-client