Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/550671a4-c091-31c2-adb4-f4856e4ca0de.roa
File:                     550671a4-c091-31c2-adb4-f4856e4ca0de.roa (raw, json)
Hash identifier:          rGFOCLatY+1xPahoXKFul3l+aEz8cYDjievSoFBLgUQ=
Subject key identifier:   50:C5:04:27:6F:E5:AE:73:3A:3C:4F:D9:3B:D6:CD:B8:3B:73:0E:5B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AAAA51FF15E2CD53E05180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/550671a4-c091-31c2-adb4-f4856e4ca0de.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.131.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:aa:51:ff:15:e2:cd:53:e0:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=59a3444d-1ddb-4ca9-bba1-c7926c780b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:62:7b:b7:7a:7f:f8:af:87:33:d3:bd:d3:
                    2c:32:42:d5:42:0c:17:7d:d1:fd:fc:61:b6:07:b2:
                    f8:8c:0e:c7:04:99:ea:9c:30:1c:94:66:c3:b7:11:
                    f8:92:1c:51:68:bf:de:a2:60:f9:c3:cc:bc:a1:09:
                    77:33:82:04:2a:c0:4c:f5:d6:60:46:a9:ee:68:f2:
                    fc:7c:52:53:64:3a:b2:5a:be:18:16:e4:87:25:37:
                    1d:63:82:b2:3f:a3:5a:b6:87:48:c7:ae:e9:b6:bf:
                    eb:27:9f:d9:35:81:35:9d:dd:9f:eb:7d:f4:df:53:
                    99:1a:b0:df:36:95:82:a5:5c:26:e5:96:d3:48:68:
                    67:e9:44:95:94:24:dd:86:27:04:ee:72:2d:08:3d:
                    39:14:eb:d5:47:bd:c9:d9:ac:ab:b2:3a:12:04:b7:
                    9f:7f:48:65:ac:cd:89:6a:fd:8a:31:f7:e2:fe:94:
                    f8:fe:6f:da:44:54:27:04:98:b0:c8:a0:92:3e:7a:
                    dc:27:c9:ec:ab:24:84:ef:26:5d:54:17:8b:7f:ac:
                    66:eb:40:06:22:a2:e8:65:96:8d:4e:e5:f7:46:8c:
                    e6:5b:d5:e9:86:f6:fe:46:3c:1b:77:b1:97:93:6e:
                    eb:6a:98:c0:d5:8f:4f:2e:7b:d9:f1:db:32:0a:a7:
                    fe:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C5:04:27:6F:E5:AE:73:3A:3C:4F:D9:3B:D6:CD:B8:3B:73:0E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/550671a4-c091-31c2-adb4-f4856e4ca0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.131.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:96:5e:03:07:ff:b4:05:af:7e:50:fe:08:4a:39:8a:47:
         ac:77:dc:9b:f9:c0:1c:2d:3d:b7:f6:b1:15:83:de:b4:4c:4e:
         f8:a8:19:db:71:3b:16:e2:7b:ce:16:ea:ec:a9:78:6a:36:dd:
         bb:dd:ab:49:4e:a4:de:07:7a:e3:18:d2:58:8c:72:4e:c0:29:
         27:0f:33:44:e0:42:33:06:f6:81:19:5a:0a:6c:e8:2a:c1:3f:
         2a:29:23:e3:7a:3b:0e:34:18:6d:7e:c8:76:55:d1:ea:1f:af:
         c2:ae:b5:e1:e0:fa:ec:03:91:dd:6e:46:1d:57:47:c1:99:da:
         d8:12:9f:fc:80:f8:11:2a:2b:02:3a:50:22:99:58:23:33:65:
         cd:01:3c:4d:5a:18:6f:43:7b:41:cd:f8:77:2b:10:78:16:c8:
         21:18:24:d2:74:2a:35:8b:6f:42:84:5e:c5:43:ee:51:b3:a2:
         e1:a9:1d:54:d4:88:da:a2:d8:24:ae:19:51:82:3d:1f:cc:ab:
         0f:25:71:05:67:05:55:ca:9c:0a:fd:35:d3:00:99:73:45:48:
         b5:cc:64:d5:dd:56:13:fa:e0:19:29:fb:bc:ec:2a:1e:c4:cf:
         6f:1c:d7:78:05:78:7b:18:6c:62:02:14:ed:95:ac:e0:35:0e:
         7d:49:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:53 2026 by rpki-client