Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d21f804-98f0-351c-a1e7-001fd47cc9ab.roa
File:                     6d21f804-98f0-351c-a1e7-001fd47cc9ab.roa (raw, json)
Hash identifier:          3QSa5nYd1Zwy22hXeajg4a9QFhu/dtknXR1YDJ0l1ns=
Subject key identifier:   BB:1C:2E:1E:72:B3:CB:1A:5C:3E:1B:DE:E8:C3:CE:90:AF:45:ED:A5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EAA51AB0D66D498C377A17B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d21f804-98f0-351c-a1e7-001fd47cc9ab.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        34.125.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:ab:0d:66:d4:98:c3:77:a1:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=2319fa2f-6d34-4e72-8897-f3a659173e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:ae:24:78:a0:0e:c8:2b:78:2d:6c:0d:59:
                    a3:46:25:37:84:88:5c:2c:c9:43:c9:dd:de:f4:e8:
                    8e:97:aa:64:de:e4:a7:1d:c3:69:73:eb:1b:13:d7:
                    18:ce:6f:a4:18:f5:70:67:19:f3:ca:c8:bd:2a:ae:
                    c0:2a:15:e6:ce:e3:71:22:1d:b7:3d:c7:19:84:8b:
                    5a:af:dd:35:41:3a:e0:cd:a0:76:aa:18:f4:ca:43:
                    00:54:5f:43:17:ff:84:0a:ca:ee:f0:89:7b:d2:70:
                    31:22:8d:2e:03:fb:1b:1a:2d:3e:c8:93:fb:88:9d:
                    2b:24:70:1e:39:11:5c:3c:5b:2d:aa:4f:a9:05:68:
                    c8:36:0e:59:40:35:84:16:61:15:f5:5b:7f:24:df:
                    08:0a:9a:f0:d8:db:9f:54:d5:26:15:b2:24:3a:25:
                    c1:55:63:cd:dd:60:7d:2c:4b:dc:86:f1:ee:34:b1:
                    a2:90:81:d7:14:1b:1d:09:76:34:62:29:1f:5b:8a:
                    35:d2:4b:b7:3d:7f:54:a5:ad:62:c5:ff:ae:74:f0:
                    8e:0c:3f:01:0f:c9:5c:80:f0:86:1b:d5:9c:0d:5c:
                    d3:fe:8f:cc:0e:89:63:c2:bc:17:d5:56:54:37:d9:
                    3b:05:10:59:e1:ec:29:f4:94:ef:f1:6f:cc:e0:55:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1C:2E:1E:72:B3:CB:1A:5C:3E:1B:DE:E8:C3:CE:90:AF:45:ED:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d21f804-98f0-351c-a1e7-001fd47cc9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.125.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e8:35:a6:81:89:ee:e1:24:f3:ff:ed:f7:a9:2a:87:e2:e8:
         03:e1:db:c9:49:e6:ea:13:6a:6e:40:7e:53:e8:da:d3:e1:19:
         74:39:77:ac:6a:71:6e:bc:1b:06:0a:cb:e3:56:cc:01:6c:aa:
         50:74:45:6d:88:8f:cd:0b:ba:5a:38:d5:11:49:d5:f8:c1:61:
         a2:46:03:d8:01:2d:8d:62:6f:4f:16:5d:e2:c1:f1:5c:5d:53:
         f1:17:7f:53:d5:5d:4d:27:dc:f2:e9:84:f3:a3:3c:20:d8:f3:
         4e:eb:cc:ee:8c:35:00:8c:61:4e:10:da:13:ea:d3:a9:0e:17:
         d8:af:6d:89:47:a1:a2:7f:85:d8:4b:cc:1e:05:3d:0a:94:08:
         07:c2:ed:fd:0c:5e:18:d0:b6:71:c1:53:c1:b7:1a:32:53:84:
         6d:72:9f:f1:67:41:be:99:49:a6:7a:4c:88:28:5e:3c:46:77:
         f7:af:a8:7f:4f:51:e7:a5:fc:1a:8b:80:0e:a1:4c:a0:3a:7b:
         b9:a1:8e:6c:90:29:35:55:e6:7c:26:20:af:58:24:37:3b:7e:
         7e:1b:61:74:d1:f0:46:d1:80:97:21:6c:a4:d9:5e:2e:2c:a7:
         0e:b0:28:eb:91:99:d7:ab:1d:17:b4:25:ce:6f:48:3f:de:75:
         de:0a:9e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:54:13 2026 by rpki-client