Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e026570-ada4-38c4-ae4d-9cf982c8e667.roa
File:                     1e026570-ada4-38c4-ae4d-9cf982c8e667.roa (raw, json)
Hash identifier:          8uFXa349ARelhHVw+CRtfoC7lEXXbuBQAO/Tr/37uUs=
Subject key identifier:   86:BE:E2:9F:18:2C:6F:D9:B3:39:8D:1C:76:EA:F0:B8:B9:B9:59:B4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DDE400759B52866926DA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e026570-ada4-38c4-ae4d-9cf982c8e667.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.140.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:de:40:07:59:b5:28:66:92:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=5c441317-cfe0-4036-b288-291caf48d668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:ec:e3:7c:3b:59:af:9c:f3:e2:34:b2:8b:
                    c8:0a:1a:df:43:f0:24:06:62:1b:89:d1:c9:5b:e7:
                    42:17:e4:43:e4:ff:73:0a:b5:8c:2b:19:21:47:c0:
                    54:d9:a6:f1:a2:18:54:a8:1f:07:6f:d1:9e:5f:52:
                    f5:75:73:b3:36:4b:c4:e1:38:01:49:f1:59:9b:83:
                    c7:6e:48:1d:c5:1f:c7:e4:ef:2e:91:67:16:d8:df:
                    70:b0:63:38:7c:e2:c3:de:58:4a:7b:76:44:75:98:
                    36:59:49:08:2d:6e:a8:0e:f8:a2:5e:7d:e3:99:48:
                    66:f6:26:8c:ee:2c:4b:23:af:97:24:da:b8:20:34:
                    07:5f:f8:85:90:aa:19:50:1f:21:27:33:80:f1:fe:
                    53:24:9b:e5:24:1b:aa:9d:cf:23:80:1b:e8:cf:47:
                    70:86:ff:1a:ec:1e:67:bc:b3:26:f6:0c:e6:6d:d9:
                    5b:dc:43:b2:f7:58:76:3a:6e:6a:1c:d0:57:db:28:
                    53:f4:58:9d:c5:4e:be:43:c3:21:cc:03:4b:79:48:
                    36:78:41:8b:af:81:00:58:58:4e:f6:16:df:a8:2c:
                    b3:6a:57:98:e3:02:67:d4:95:89:3c:91:71:84:4a:
                    93:1c:2b:37:d9:dc:49:14:3c:19:dd:93:d4:4c:8f:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BE:E2:9F:18:2C:6F:D9:B3:39:8D:1C:76:EA:F0:B8:B9:B9:59:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e026570-ada4-38c4-ae4d-9cf982c8e667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:4f:d8:b3:21:ac:20:63:f0:40:d7:40:a2:5e:43:0c:c7:
         af:9b:69:40:59:74:4f:76:0e:06:58:4b:ae:67:04:43:a4:03:
         73:fe:ed:ad:01:34:5d:b6:cc:b3:cd:ca:e2:82:7e:4f:7d:ee:
         bb:5f:fb:d4:0e:51:09:f1:dc:97:99:63:d0:ba:ef:8c:83:51:
         5d:9d:b2:9e:e3:d4:37:65:bd:02:23:37:3e:4d:d0:fd:b9:38:
         11:1b:0e:bb:69:a9:52:36:bd:c0:2f:65:9b:5f:59:58:fb:f3:
         d3:89:ac:17:cb:c0:86:e8:12:a1:6c:ad:04:75:2c:d3:e4:91:
         ba:ae:65:76:43:e3:ea:78:b4:5e:d2:21:c5:89:96:7b:0a:9a:
         12:09:e6:0e:31:23:df:bf:45:8a:f6:0e:7f:7e:ed:00:f1:b0:
         8d:ac:3a:54:06:c1:13:73:9d:e9:9e:06:61:5b:f7:5a:34:de:
         74:9e:5e:5d:a3:38:44:5a:d2:40:23:53:14:1d:30:1f:81:20:
         af:7b:87:59:89:30:37:8c:67:65:24:01:20:df:10:21:59:5d:
         44:4c:9f:ad:bf:99:ea:b6:f7:0b:89:22:36:c5:80:c6:84:9b:
         38:48:6c:66:0e:3f:3d:e1:2c:d6:ad:72:53:ca:81:b9:a7:82:
         46:31:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:40:08 2026 by rpki-client