Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91bda03a-2e66-35b5-a06d-68b95c3f3932.roa
File:                     91bda03a-2e66-35b5-a06d-68b95c3f3932.roa (raw, json)
Hash identifier:          n/bgO7s9qDQFM+N3eEiqpTx1g8fkV6/rUQ0l4hqd7kI=
Subject key identifier:   D1:78:6E:11:DD:4F:82:EF:E4:F9:50:E5:83:65:B6:84:0A:C4:AF:74
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EC0A75DE6A3AE932CEB154500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91bda03a-2e66-35b5-a06d-68b95c3f3932.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        34.4.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:5d:e6:a3:ae:93:2c:eb:15:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=c5a89a24-0852-43fe-a68d-37764c0007d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:a0:0b:d0:c4:09:e0:6e:38:cb:60:f8:93:
                    26:f2:02:47:c8:d3:3f:c1:dc:fd:6d:83:72:85:5c:
                    35:cd:08:4e:5c:ae:1f:63:0c:35:36:78:7b:c2:0e:
                    81:4d:fd:a5:ca:a7:c9:64:b1:dc:48:b9:7c:86:b9:
                    ae:7e:90:f9:31:6d:bc:d2:c4:7f:7a:83:23:82:4a:
                    73:c5:3e:b8:be:57:91:3b:97:6f:14:a6:f1:04:b1:
                    d5:07:6e:76:d8:b6:53:04:03:23:2b:37:68:0a:10:
                    51:9f:04:f4:ee:44:bd:45:06:38:4f:2f:67:85:d7:
                    38:53:be:ce:71:8e:92:19:36:6a:e0:2e:79:53:3d:
                    49:cf:c9:c3:eb:93:1b:4d:45:9d:3f:d6:30:ea:50:
                    ad:69:b1:95:78:f0:5f:c8:6e:58:f3:fa:0c:67:c9:
                    1a:71:03:3e:a7:c1:56:f3:2d:46:f1:58:3a:6f:ad:
                    a5:ea:12:49:74:f9:78:32:74:bc:df:42:09:0d:55:
                    a9:b7:50:8f:4e:5b:02:15:c1:d2:8b:f1:7b:73:7d:
                    de:f1:fa:aa:48:40:c8:7c:ed:9f:69:7d:61:f7:34:
                    8c:81:ee:51:58:57:f2:59:a6:d8:d5:9c:e9:16:68:
                    8c:67:f2:db:1e:2d:57:26:0b:09:82:74:1b:3b:18:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:78:6E:11:DD:4F:82:EF:E4:F9:50:E5:83:65:B6:84:0A:C4:AF:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91bda03a-2e66-35b5-a06d-68b95c3f3932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:40:66:21:c8:57:65:f9:37:a5:1c:d6:c1:8c:b4:58:d4:97:
         1b:01:64:25:9f:bc:88:33:12:63:d6:a1:5e:07:e3:7e:8f:d4:
         4e:70:db:54:af:00:60:7f:bb:94:83:2c:1e:a9:7b:d8:c3:f1:
         a1:5f:7a:e6:81:2e:bc:11:75:e4:d6:08:1c:c7:9a:96:40:f0:
         3e:fe:64:25:2e:78:a3:78:89:9e:ba:53:0b:34:25:87:cc:73:
         d2:3a:61:50:f9:c5:d2:ee:50:3c:c8:8f:91:6e:2a:82:e8:8e:
         2a:9c:08:f2:07:66:6f:04:45:22:0f:41:e5:76:95:2b:8b:c6:
         26:e4:11:40:a9:cc:55:73:c8:fc:3e:2d:f6:fb:14:16:24:31:
         79:62:30:9b:87:9d:40:da:c2:e2:3d:49:39:3f:0b:a6:e9:fd:
         7e:5d:93:01:02:d8:7f:b9:8e:c7:fe:af:4a:ec:7f:98:26:aa:
         d3:b8:5b:7f:97:85:c1:9b:01:cd:9a:f7:6a:1b:db:7a:7b:77:
         70:0d:76:42:21:df:72:2d:19:80:2b:1c:9b:a2:e3:a4:2d:6a:
         be:67:12:75:9e:0c:1c:f3:1c:6d:30:c1:a0:b3:cd:f3:c5:6d:
         80:9a:04:04:6b:5f:3e:b6:e2:5e:5c:1b:83:8b:05:44:f7:c1:
         13:9a:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:56:55 2026 by rpki-client