Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/92f973ac-091e-341a-bbe0-dcac58df36ac.roa
File:                     92f973ac-091e-341a-bbe0-dcac58df36ac.roa (raw, json)
Hash identifier:          jWgLZ24RcVkoCRKWF1VuxEFzk9y+OvUCekBFKLAYA9w=
Subject key identifier:   C9:20:33:CA:3B:5F:23:03:96:67:BC:DD:D8:A0:2F:C4:8F:0D:EC:9F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4984493CC07C9946551A8700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/92f973ac-091e-341a-bbe0-dcac58df36ac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19527
IP address blocks:        34.1.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:49:3c:c0:7c:99:46:55:1a:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=95249fb2-0d2b-462e-929a-af682cd95ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e0:1b:d8:f3:d1:56:65:99:ab:33:25:64:da:
                    c9:31:39:0f:bf:6c:b1:cf:48:01:58:ac:8b:4e:1c:
                    10:46:53:8b:ba:33:99:7a:a5:50:35:90:c6:04:3c:
                    c9:e7:fc:bd:92:98:0a:6d:d5:c6:f8:2c:45:56:ce:
                    9c:34:de:1a:69:dd:65:e6:c8:8d:d3:d3:c8:87:d1:
                    b8:1b:93:aa:69:d6:91:0f:94:2f:d7:01:7a:f3:25:
                    1c:99:cc:21:c8:8e:d8:49:55:8a:8e:b8:7e:8d:52:
                    00:e5:a0:24:04:09:8b:ad:76:2e:0f:b3:14:5e:8f:
                    2f:f0:48:4a:d7:51:33:af:08:d0:23:72:ad:03:26:
                    1f:34:b2:fa:36:a4:f7:32:bd:a4:2e:42:3c:e9:69:
                    21:15:47:c2:d2:c7:58:13:13:a1:bd:96:e2:34:bd:
                    aa:39:2a:bf:c3:c5:c2:a2:30:71:0b:d3:91:51:6b:
                    4d:7a:34:e2:45:fe:0c:d6:d6:87:74:6a:fe:0d:e9:
                    a8:f6:f0:4a:cf:a7:76:38:93:85:74:49:9c:29:48:
                    91:71:8e:a9:71:40:83:5d:00:fb:c8:8e:01:39:c1:
                    0a:d4:98:e9:51:da:74:d3:a9:4a:14:cc:a5:57:9c:
                    82:f8:ae:f1:ab:4c:6e:1b:30:cf:da:38:58:af:dd:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:20:33:CA:3B:5F:23:03:96:67:BC:DD:D8:A0:2F:C4:8F:0D:EC:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/92f973ac-091e-341a-bbe0-dcac58df36ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:f3:8e:13:36:2f:88:2b:ac:21:04:08:1e:62:a4:6f:12:
         72:ab:d6:03:05:03:96:04:2d:91:be:9c:ca:08:b9:01:7a:a9:
         f5:cc:24:60:5e:48:65:c7:4e:7b:6d:d4:af:8e:28:88:e5:41:
         5a:a4:16:a3:b3:13:ba:c0:a8:a4:85:19:e5:2f:06:3a:3c:f0:
         51:46:57:bd:dd:7e:b1:fa:97:97:61:c4:31:62:e5:11:2d:ef:
         c2:85:44:b8:cf:bf:aa:0c:bd:04:18:39:0b:4e:b9:69:bc:0e:
         94:27:31:20:8b:c1:69:c0:33:e7:54:d9:05:80:ba:3d:30:7d:
         33:fc:b9:cc:81:fd:ce:94:39:cc:a0:82:23:59:0b:b2:5c:0d:
         19:c0:9b:bf:99:9b:4d:9a:78:2d:02:84:ba:f3:88:34:09:a0:
         95:67:84:be:0a:be:38:27:05:b2:0f:3c:89:f7:a0:c9:28:7b:
         f1:19:19:28:54:b5:d0:ca:2b:ba:39:6b:13:cb:14:10:4b:f4:
         46:c0:76:e3:ee:4c:76:65:14:63:c6:d1:dd:f7:d0:e8:9f:c1:
         5f:f5:eb:4e:0b:58:50:c6:e9:9c:b4:ee:6c:a7:bf:86:0e:0c:
         8d:06:8a:c5:cc:c7:40:38:78:0e:85:d9:1f:7f:f7:2d:ce:c5:
         10:cb:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:28:09 2026 by rpki-client