Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b533510c-3aba-382d-ae0c-5d4015dc2c37.roa
File:                     b533510c-3aba-382d-ae0c-5d4015dc2c37.roa (raw, json)
Hash identifier:          EPdKpprENPhBP2ri/jo+OiGZ/qnlfvEhSX1FAdBWQIA=
Subject key identifier:   E5:1F:2C:B2:3B:F7:A1:9C:EB:AA:3C:FF:FC:73:5E:E1:0F:B6:E9:C6
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF7D4C5DC1B6DEDC9476EC00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b533510c-3aba-382d-ae0c-5d4015dc2c37.roa
Signing time:             Thu 06 Aug 2026 15:00:22 +0000
ROA not before:           Thu 06 Aug 2026 15:00:22 +0000
ROA not after:            Wed 04 Nov 2026 16:00:22 +0000
asID:                     394380
IP address blocks:        174.34.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:7d:4c:5d:c1:b6:de:dc:94:76:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 15:00:22 2026 GMT
            Not After : Nov  4 16:00:22 2026 GMT
        Subject: CN=085dad56-7f0d-4e26-a42d-b290dc4ea2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:ba:a7:6f:15:91:fc:eb:4c:8e:4a:e2:a1:
                    2f:1b:8b:30:92:95:52:a7:da:fb:03:64:c6:12:db:
                    13:5f:50:43:a5:35:7a:6f:f6:98:f8:cd:2c:55:c2:
                    3a:52:a6:e2:ca:6c:0e:eb:b0:2e:9a:f7:fa:b3:f2:
                    bf:07:3a:da:f4:8d:45:d5:47:a2:37:7a:9b:f5:60:
                    aa:ca:ed:d5:bc:40:cd:9e:d3:e9:1e:f6:ae:2f:16:
                    ed:1f:14:6a:b6:a1:2f:20:c7:cd:de:ab:12:66:91:
                    6e:16:21:ff:65:49:88:65:8a:ac:76:f2:f5:d3:69:
                    2f:ec:23:0f:28:c9:ad:d1:8b:4d:4c:8e:ac:4d:87:
                    a8:9f:c0:5f:cd:30:63:57:61:44:cb:a5:d5:f8:22:
                    0f:5f:51:a4:5e:41:15:34:21:da:09:cc:e1:80:60:
                    60:fa:b5:da:9e:67:89:1b:e7:24:43:83:3e:70:4a:
                    b9:d0:8d:34:6e:17:7a:58:94:f1:50:9a:fc:96:63:
                    58:41:c3:f2:e8:19:95:03:1d:22:33:36:18:85:d1:
                    eb:80:4b:9c:72:04:92:d9:6f:2a:b5:c7:03:cd:0e:
                    06:d4:c3:a3:7f:2a:a5:fd:80:b2:50:c0:67:c0:5d:
                    0c:aa:09:e5:96:71:17:b8:eb:0c:93:e8:80:51:f1:
                    2e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1F:2C:B2:3B:F7:A1:9C:EB:AA:3C:FF:FC:73:5E:E1:0F:B6:E9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b533510c-3aba-382d-ae0c-5d4015dc2c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ce:20:ad:ef:df:e6:bb:e6:81:0c:15:f3:15:c3:be:82:55:
         39:82:c2:39:06:7e:5e:b2:28:a6:c2:59:02:7d:62:18:98:6e:
         e4:73:8b:6e:7c:d9:1c:7b:93:be:89:b2:74:e9:08:18:41:b2:
         70:60:34:63:c9:42:27:64:71:8a:de:34:1b:fb:92:e0:20:d5:
         3f:bf:6f:07:4f:86:fd:c7:3d:8f:18:0b:73:0e:f8:f9:72:88:
         21:7f:c2:a7:74:f7:ea:37:ba:89:1c:54:e7:7d:8f:57:ff:34:
         e9:e1:5f:3b:f3:09:1b:73:0f:b8:0e:5b:99:28:be:ae:7b:e8:
         43:9b:7b:44:a3:3f:d1:2a:24:30:60:01:26:dd:50:73:2a:04:
         62:fc:ca:03:6e:be:f9:1f:a2:85:65:eb:8e:1e:c1:78:c3:e0:
         30:13:59:66:06:90:a2:3c:7d:90:4d:69:7c:aa:c1:ac:a7:52:
         05:ea:6b:93:5c:af:0b:e7:5e:57:83:fd:5b:f8:f3:27:6a:2c:
         46:a3:61:18:74:6b:86:68:c3:26:f9:66:14:3e:8a:af:86:db:
         25:4a:dd:71:9e:bc:a5:d1:bf:21:1c:80:b0:7b:aa:6f:e1:ad:
         46:1d:0d:f0:56:c9:f5:8d:ad:86:ed:c7:cf:f2:83:30:75:4a:
         30:e8:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:28 2026 by rpki-client