Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3bca2ac-3e51-3fb4-8ca5-4bb2b4aa8e21.roa
File:                     c3bca2ac-3e51-3fb4-8ca5-4bb2b4aa8e21.roa (raw, json)
Hash identifier:          TMKe+13er37PT7+PZXF2SbR5h/VCh5j32k66Ecfo1gM=
Subject key identifier:   92:01:34:13:C0:49:97:40:7C:FA:9E:B7:BA:EB:FB:53:73:14:1A:DD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DB9A7720566272D80CC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3bca2ac-3e51-3fb4-8ca5-4bb2b4aa8e21.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.136.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:b9:a7:72:05:66:27:2d:80:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=05657e56-996d-47f8-a369-7d36f44ea6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:0e:f5:e0:fb:a6:b2:97:35:85:b8:2c:16:
                    f2:ca:5f:f6:64:b2:ad:3a:e9:b8:e8:cd:d2:27:33:
                    68:92:d4:d5:e7:e1:20:21:0b:d4:62:09:d1:7e:23:
                    37:bb:ae:ea:25:53:bb:2b:96:c4:55:da:16:1f:c1:
                    de:8a:83:5d:e4:ce:b1:f5:68:6b:b4:c9:ee:9c:98:
                    12:ef:87:79:26:8f:b6:43:b6:88:cd:fe:37:d6:d9:
                    19:92:9a:fa:cb:38:89:e7:56:c7:62:2a:91:4e:6b:
                    ab:07:33:b7:f7:87:a4:5e:8d:a7:45:50:6c:f0:66:
                    44:f0:d8:da:56:79:84:d6:5e:c5:c9:a1:9e:58:b1:
                    30:ce:9a:d9:ae:6a:c7:5c:b1:38:8c:0b:c1:7c:9b:
                    81:d7:df:5e:39:ff:e0:31:25:93:ba:c2:ae:a2:16:
                    71:42:94:1e:7e:a4:6d:2a:e8:17:7a:1c:90:e6:bd:
                    b3:76:c8:5b:24:ec:f5:46:90:66:26:e5:7f:12:02:
                    60:15:7b:a7:82:0a:ff:e3:31:7d:3d:c1:d0:90:be:
                    68:95:8a:82:de:41:af:47:84:9e:d0:2b:53:81:58:
                    14:ce:57:07:65:90:93:d2:a2:88:32:36:4b:d2:a7:
                    8f:38:e4:db:e5:9f:9b:c2:fa:23:a8:05:4d:0b:c0:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:01:34:13:C0:49:97:40:7C:FA:9E:B7:BA:EB:FB:53:73:14:1A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3bca2ac-3e51-3fb4-8ca5-4bb2b4aa8e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.136.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:5a:44:f5:0c:2e:f7:19:90:8a:55:c0:12:f2:1b:17:96:
         11:6e:d1:b9:35:54:b1:a1:e0:9d:e8:26:b3:73:24:62:7c:de:
         5d:da:8b:46:d7:4f:ea:a9:c3:0c:ba:48:d1:fb:a0:56:34:fb:
         97:68:4b:9f:29:a2:01:55:d8:81:57:5e:2e:ea:9a:96:1b:77:
         5e:a9:45:7e:49:c5:54:9d:ed:2d:6d:75:45:b4:f1:a9:b4:48:
         b2:c6:c6:31:58:1a:5b:ae:b7:85:1b:56:b6:16:95:2c:c9:c5:
         87:d3:0b:8c:49:81:d6:7b:24:af:c6:47:ac:f4:b5:d9:86:c7:
         8a:e7:b1:56:8c:ac:21:74:06:1c:59:61:89:35:b3:99:d0:b4:
         ff:53:d5:c6:c8:01:15:7e:53:4a:3f:d5:0e:52:42:e3:94:2e:
         38:19:eb:ce:1d:7c:2a:11:26:51:f9:76:c1:1a:f0:ea:7b:0f:
         84:ed:f6:a1:dd:5f:12:db:67:87:9c:22:da:72:dc:c0:3e:1a:
         d7:9a:7d:8b:72:bb:6b:03:7f:a8:53:e8:61:e8:16:e9:24:2b:
         af:91:e5:09:87:a5:9a:75:86:a1:c2:3b:3a:00:f5:22:e4:0a:
         82:49:d6:97:d7:a3:78:f9:d0:54:55:25:ea:a5:d9:db:56:ef:
         38:0c:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:18:58 2026 by rpki-client