Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e40d204-6312-38b8-91a3-8c94ba09c930.roa
File:                     9e40d204-6312-38b8-91a3-8c94ba09c930.roa (raw, json)
Hash identifier:          O8QfM3fn+GgDmmzLOnyUdVerl1SoOVy4h/ZY2kddL/Q=
Subject key identifier:   DA:C6:17:C1:6A:6E:26:97:C3:A0:81:65:45:69:7F:E1:5B:0A:06:74
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F49735741E83D59B96E1CF580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e40d204-6312-38b8-91a3-8c94ba09c930.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     43515
IP address blocks:        34.191.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:57:41:e8:3d:59:b9:6e:1c:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7b0a9540-e7d1-44b9-9e2e-bff1ff395701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:6c:a1:3d:87:5d:51:de:d4:3b:41:c2:60:
                    c6:68:4e:13:78:f3:a8:3e:90:5f:6b:b7:6d:d6:6e:
                    b0:b1:58:29:b9:bf:25:39:0a:4d:dd:cf:60:e4:c4:
                    32:64:38:48:0b:9a:e5:78:5c:22:48:53:01:23:31:
                    35:7a:92:bb:b3:16:a6:c9:58:d4:85:87:7c:50:37:
                    76:67:70:bb:a3:6b:92:64:61:10:2b:bb:1a:1b:b3:
                    a2:6d:a9:ce:a5:da:7d:e6:9f:40:77:6e:05:df:57:
                    0f:a8:9f:87:cb:d8:29:55:3a:81:5f:6b:06:6f:fd:
                    95:d4:9e:1b:68:f7:87:9d:c0:17:69:8c:f2:60:ac:
                    9a:d7:8f:54:aa:1a:bb:fa:5f:88:c9:99:ef:a3:ec:
                    b4:21:66:e2:c7:f0:5b:15:cb:31:95:97:f7:79:85:
                    ed:cf:0a:af:53:4d:d5:fd:09:5d:3d:d1:00:3a:01:
                    78:02:5c:e7:55:66:c3:8a:c9:d3:b4:65:cb:ff:cf:
                    a7:41:3c:12:ac:99:eb:78:5a:88:39:76:48:e7:98:
                    da:47:92:05:b7:4d:c8:5a:73:8d:d1:db:6c:af:19:
                    09:42:b0:1a:ac:5f:ca:e9:f0:37:ab:f1:5c:c7:a3:
                    a6:e8:3b:e2:5e:86:16:1f:4c:77:de:f1:c2:b8:cc:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:17:C1:6A:6E:26:97:C3:A0:81:65:45:69:7F:E1:5B:0A:06:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e40d204-6312-38b8-91a3-8c94ba09c930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.191.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:be:7e:ca:f2:61:ca:bd:e6:fa:2d:9e:a8:ec:e5:d6:5a:62:
         6e:ee:e4:52:4a:97:e1:20:0a:48:20:be:61:d1:db:80:03:65:
         3f:e9:67:96:0f:3f:fc:a1:d5:72:12:66:88:05:81:45:62:87:
         e0:87:05:b6:b4:5f:3d:83:c9:6e:e0:37:0e:0e:18:c9:bb:31:
         29:4a:52:10:af:a4:11:59:26:60:d5:ba:41:33:14:a2:5b:1d:
         c0:f5:35:44:0a:cf:70:59:df:79:2a:56:ce:fd:ab:1b:2d:80:
         6a:c7:d3:0a:69:ee:4f:a3:c7:41:da:5f:ba:48:64:21:55:bd:
         0a:58:39:45:e1:f3:93:aa:5c:5a:d9:8e:6a:af:be:35:c4:e5:
         f9:2f:1b:aa:e5:36:f9:c2:71:17:38:a6:7b:b8:66:1e:b1:75:
         ba:84:12:7a:cf:76:62:95:97:9c:94:09:5b:d0:0a:eb:33:96:
         72:57:ea:b4:01:07:b6:e2:fe:22:52:d3:e7:3c:c3:01:81:23:
         96:bb:11:f4:3d:be:36:59:fd:98:4e:dc:1e:eb:56:c1:6a:2c:
         49:ee:75:d5:d4:33:53:da:0d:69:33:b1:e9:1c:90:f3:b2:cf:
         3f:08:72:71:29:a4:3c:c7:a7:24:7c:bb:d4:f2:66:70:6f:2f:
         67:4f:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:26:07 2026 by rpki-client