Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a8d2f73-c305-36db-b2ca-826f441ce589.roa
File:                     7a8d2f73-c305-36db-b2ca-826f441ce589.roa (raw, json)
Hash identifier:          SfAS/vEcOfq2/kYrQBjyTupDuiUQVTPGq89+dNN+DRI=
Subject key identifier:   FB:3F:F2:50:2C:72:8F:39:DD:A4:8E:77:E2:64:AE:1B:6D:1F:01:17
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EB416F4B1362E8F94EDC622E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a8d2f73-c305-36db-b2ca-826f441ce589.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     396982
IP address blocks:        34.170.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:f4:b1:36:2e:8f:94:ed:c6:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=bbcfd85c-d0eb-409b-b476-1f3b1657d4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:d9:bc:9b:c5:a8:0b:92:be:a8:9e:e5:0e:
                    d5:8c:cc:4d:8c:71:af:c8:21:f8:5b:b1:c1:0f:e0:
                    87:b4:dd:81:8c:04:bd:18:d4:18:73:e3:f9:6e:60:
                    40:a7:03:3f:e2:9e:9b:aa:52:db:2d:d7:55:60:7f:
                    58:cb:6a:3f:fa:ec:20:f6:64:9e:4e:4e:a1:f1:4c:
                    69:b7:cc:87:97:e8:15:1c:d3:be:66:d7:cf:aa:8f:
                    54:19:5f:85:df:d1:4a:ca:88:0c:52:8d:ea:7b:54:
                    98:8b:89:c2:a2:bf:36:9c:79:7e:70:17:d8:ec:98:
                    dd:a8:b7:ef:71:1d:bd:55:83:e9:33:03:a9:84:3d:
                    95:c2:1a:a0:a9:c6:39:09:5d:1c:7c:e3:d6:8a:e8:
                    fb:8f:bf:99:68:fd:cd:92:a2:8e:e6:14:81:87:bc:
                    45:3d:d4:7a:73:07:b9:dc:5f:90:55:b9:08:69:46:
                    7d:5c:5c:40:1d:1d:e7:5a:8c:aa:a0:d7:f9:c8:8b:
                    c9:0f:cf:d0:cd:2b:2b:a0:ae:6f:90:dd:76:15:4b:
                    c9:4b:e4:86:83:a0:ac:a6:3a:00:2d:a0:ed:6e:e6:
                    cf:04:49:5c:bb:a8:5a:6c:8e:70:6a:0b:fb:17:51:
                    3d:6a:15:1e:81:1c:26:f1:54:e9:ff:67:57:c2:a3:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3F:F2:50:2C:72:8F:39:DD:A4:8E:77:E2:64:AE:1B:6D:1F:01:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a8d2f73-c305-36db-b2ca-826f441ce589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1b:10:8b:76:60:8d:c9:7c:6a:17:ee:3c:00:11:4b:2f:f5:
         db:e4:81:6b:12:3f:c3:b9:9e:15:83:19:e2:71:2d:07:69:6c:
         36:c0:dc:7d:fc:5f:51:40:0e:fd:3c:5d:84:cd:82:5b:68:13:
         dc:8f:59:7d:0e:c1:c8:a3:19:5b:aa:62:6a:79:78:f2:4f:15:
         e4:f6:b6:c8:c5:39:da:05:92:53:a0:92:c8:2a:5f:5b:07:9d:
         fe:8b:f4:24:f1:c5:09:ea:55:fc:a7:37:93:bf:72:78:40:ab:
         3f:9f:54:6d:f8:e5:58:81:f8:7e:03:b1:00:38:b6:83:7c:6e:
         7f:4e:cf:e6:0e:af:dc:46:a2:84:f5:d7:ae:96:a0:9a:c3:40:
         07:8a:45:3e:7a:15:b5:3f:f7:43:b6:9e:94:84:ec:85:f8:e6:
         c1:f3:18:49:b0:e1:0a:cb:9a:21:a6:5b:f5:4f:95:46:70:03:
         00:bd:d6:e9:00:be:aa:98:67:c7:9b:ed:8e:fa:56:45:1a:e4:
         e8:09:7c:35:b3:9b:f4:b7:60:d7:81:d9:78:ce:ca:fa:76:5e:
         b2:86:fe:c4:4e:79:9e:ec:cf:f8:b1:8d:ac:36:c0:33:8c:8a:
         f0:c5:b8:47:cc:35:2a:e8:e1:aa:97:2a:5c:da:2f:ca:88:db:
         9e:25:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:53:26 2026 by rpki-client