Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f1f07ed-778b-389f-9e8c-914bd1733e28.roa
File:                     4f1f07ed-778b-389f-9e8c-914bd1733e28.roa (raw, json)
Hash identifier:          K73R+5p+dyp3V7oa/A9ndPw076THucdaYXCUkqrlcg8=
Subject key identifier:   32:31:FF:F5:A3:82:96:EA:0E:29:48:06:40:2B:C2:77:44:B3:60:AD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D44FA735CCC0363606A0CF140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f1f07ed-778b-389f-9e8c-914bd1733e28.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     15169
IP address blocks:        34.191.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:73:5c:cc:03:63:60:6a:0c:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=712e7518-8722-492d-9ada-f987c375e57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:f6:ff:f8:ad:0e:61:de:e8:43:62:ce:69:
                    60:b3:85:0f:14:f1:3c:8e:65:f4:20:ca:f6:62:35:
                    ff:64:60:b6:76:9f:bf:78:a8:e9:32:0e:d4:08:0e:
                    3d:e2:dc:fb:5f:d7:45:bf:75:db:bf:2c:50:f8:43:
                    88:e2:0f:95:be:d5:1a:a7:30:0d:ee:73:b5:e8:15:
                    a7:36:ca:cf:da:9f:b7:df:04:3b:a3:b8:be:39:f4:
                    be:0a:ee:77:14:ab:43:58:4f:e9:17:79:3a:56:da:
                    fa:9e:37:b7:17:63:d5:58:60:2a:6b:8d:cf:9d:26:
                    12:a9:3d:d4:bd:19:eb:85:7d:de:8a:7a:60:f5:ab:
                    36:be:d5:fc:fb:6b:5d:be:69:70:ee:dc:03:94:4b:
                    8b:fb:7b:2f:db:26:02:2d:27:bb:18:bd:c4:a3:92:
                    cb:3a:4d:48:45:f6:77:28:7f:47:a0:24:ca:d6:ab:
                    04:46:cd:6d:d1:88:3d:21:b9:4f:df:86:cd:8b:32:
                    6a:5e:61:c0:cc:5f:d8:a7:97:54:7c:29:13:2b:5b:
                    72:ab:ec:05:9c:a2:b4:9a:01:ca:63:0f:51:b0:63:
                    15:36:0e:c9:cb:18:41:4d:04:83:da:ad:21:86:53:
                    ff:48:39:47:7e:8a:dd:37:b9:d1:2c:84:9e:ab:c5:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:31:FF:F5:A3:82:96:EA:0E:29:48:06:40:2B:C2:77:44:B3:60:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f1f07ed-778b-389f-9e8c-914bd1733e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.191.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:3f:a5:21:fc:9c:a7:31:0e:c3:ba:7f:32:b2:5a:94:cf:
         3b:da:d1:b9:83:c9:a9:5e:ad:19:1e:8e:cb:bc:a3:9a:67:c7:
         63:2e:67:cd:99:ea:d9:ea:23:7b:e2:93:b8:97:86:76:13:21:
         15:af:40:ea:d1:cf:05:1f:84:dd:8b:d4:a6:79:b9:a5:1c:49:
         11:ba:9f:88:22:f0:97:ed:4c:a7:9c:58:10:ce:c2:5a:f7:3a:
         12:1b:77:e5:79:09:5d:e9:1f:7c:c6:e7:e6:19:88:3b:8f:ae:
         1b:b2:6d:28:eb:b7:ea:fc:67:e8:bd:65:5d:7a:53:e6:b4:6a:
         db:a0:9a:f2:0b:c0:bb:05:b3:2c:1a:ec:03:c2:9d:28:b7:51:
         d0:73:e1:05:57:01:f9:05:53:87:11:94:4a:9e:e3:87:02:8a:
         f8:bd:dc:c3:da:cd:82:bf:58:44:3d:3b:69:1a:91:98:18:40:
         35:81:21:c3:aa:fc:a7:00:c5:72:a5:33:29:e7:1a:2e:02:9b:
         60:da:b4:70:66:71:5c:9f:fb:3e:0c:59:8e:d1:a4:89:5e:2a:
         bd:9e:4e:5d:1b:5b:ae:e7:e1:ec:30:7a:01:e5:b1:c5:64:5c:
         ed:cc:32:49:6c:aa:69:24:5a:0b:98:d0:5b:62:6c:6e:1d:5a:
         b0:99:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:20 2026 by rpki-client