Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a74925bb-81e0-3a28-99ce-5191d84c428e.roa
File:                     a74925bb-81e0-3a28-99ce-5191d84c428e.roa (raw, json)
Hash identifier:          DMGQDU0BJTYilsPaSxbEprk5Sqfx9nHYkn2oWsUPZr4=
Subject key identifier:   D4:BC:68:73:BD:09:3F:C5:D7:3A:F3:8A:67:0E:63:E4:09:BD:A5:49
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D7C23F2BCE5DB57445720
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a74925bb-81e0-3a28-99ce-5191d84c428e.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.73.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:7c:23:f2:bc:e5:db:57:44:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=2740a188-c621-4c0e-9ac7-1b6cf82be26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:17:26:07:f7:e5:7d:90:1d:28:53:71:8f:e6:
                    31:14:0f:11:c2:37:d2:2f:7b:a2:a4:0e:6c:e7:0c:
                    f9:cc:56:9f:be:d9:15:20:e8:80:2d:d0:31:4e:80:
                    67:93:ae:89:ee:45:d8:30:2a:7d:70:7e:62:04:aa:
                    0e:cc:06:e1:d5:23:3d:c9:33:cb:2e:f4:f2:a5:37:
                    db:41:4e:b2:54:e5:6e:6f:80:3f:58:99:13:5e:5f:
                    e1:70:05:1a:db:db:d0:8b:59:34:68:8a:99:6e:78:
                    d3:b0:9f:00:f8:33:4b:96:2f:b3:07:fc:0b:f1:ac:
                    2d:eb:5f:cd:63:a7:6d:48:0b:06:ec:e2:8c:d9:16:
                    b7:80:14:5d:7e:30:ce:d4:95:a6:07:ef:5f:e1:6d:
                    1d:5a:41:27:31:37:16:49:9b:dc:e0:b9:ad:0a:e6:
                    0f:bc:c1:10:d9:d7:ea:7d:e7:56:37:d4:34:5d:d2:
                    87:cb:cd:f0:f9:7f:3e:f0:d9:ef:5e:d1:8a:c4:7c:
                    ee:70:3f:ba:cc:08:08:fe:9a:8b:e0:58:58:c4:f7:
                    2a:c5:b2:c2:e0:be:34:11:be:d3:be:98:be:3a:5e:
                    b1:02:f4:ca:3d:61:d2:53:65:a6:43:6a:84:0d:75:
                    2c:e0:a4:7f:2c:99:3f:72:12:27:dd:ce:ec:06:8b:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:68:73:BD:09:3F:C5:D7:3A:F3:8A:67:0E:63:E4:09:BD:A5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a74925bb-81e0-3a28-99ce-5191d84c428e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.73.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3e:1c:c3:16:6e:06:9c:96:20:d1:b3:fc:bf:ed:1e:f8:bc:
         40:9a:b6:47:05:c7:1e:45:b2:04:3c:a4:80:17:4c:ff:11:c4:
         8e:55:03:ef:f9:2d:54:a7:cc:e8:28:7e:49:fa:0f:d7:e1:c6:
         c7:8b:ea:a7:7e:86:cc:43:93:14:01:79:84:7c:9c:4f:f7:83:
         8f:b5:32:99:63:b1:6c:03:58:24:d6:44:a4:71:a3:f7:b6:27:
         7a:bd:7d:9e:2d:89:d1:a8:f3:81:18:45:e7:36:e8:52:10:1a:
         c2:bb:a6:46:f8:75:21:ce:79:16:9a:fc:c1:8d:e9:e0:0b:18:
         ab:4c:38:c4:4a:14:31:eb:15:ee:60:f0:2a:29:e9:5a:a0:1b:
         9d:4a:fb:36:75:7d:53:7d:ee:72:1d:df:c1:a4:93:77:80:a8:
         ba:d6:af:87:70:66:9b:56:a4:cf:de:7b:27:8a:b7:d8:07:5c:
         a0:78:62:3b:3d:81:5e:52:d1:65:2c:68:02:1f:42:c5:40:5e:
         0b:b1:f4:01:14:39:3e:df:93:17:73:c4:fc:80:f7:87:f8:4d:
         46:4c:4a:3c:49:3b:c0:6e:cd:e9:09:e5:14:f1:3a:dc:89:06:
         95:47:e5:f8:df:c3:8d:2f:93:a6:77:90:2f:5b:4e:b8:fd:c5:
         0e:2a:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:31:39 2026 by rpki-client