Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa
File:                     60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa (raw, json)
Hash identifier:          4TEiJENisZ1GwdPmb3Zm2PrVIpcXBOCPbqOlK00FlE0=
Subject key identifier:   19:86:0B:D2:97:51:84:4A:1D:3C:BD:67:2C:CC:2B:96:A5:2E:58:63
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF5D614733CE3CBDEAC98680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa
Signing time:             Tue 12 May 2026 14:42:03 +0000
ROA not before:           Tue 12 May 2026 14:42:03 +0000
ROA not after:            Mon 10 Aug 2026 14:42:03 +0000
asID:                     43515
IP address blocks:        34.191.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:5d:61:47:33:ce:3c:bd:ea:c9:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:42:03 2026 GMT
            Not After : Aug 10 14:42:03 2026 GMT
        Subject: CN=f8cd630b-fc46-47f6-8f91-e0e3ec8d0359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:80:73:d0:80:86:22:0d:6a:ab:84:d4:f3:1b:
                    c9:64:85:e4:1e:57:b6:9c:91:78:1e:02:eb:0b:00:
                    9d:1c:ed:f9:81:a3:e2:77:6d:c8:8f:94:28:79:4f:
                    4c:93:ec:95:59:bd:fd:e5:b6:e9:ed:15:a7:5d:26:
                    64:88:e0:bb:8a:d2:10:ef:8b:b5:98:0d:da:a2:51:
                    cf:2e:ef:89:f2:4a:98:0d:05:b6:ee:a1:3d:68:13:
                    7d:db:4e:b4:3b:cf:7d:df:ef:58:e8:6e:f9:b8:7d:
                    33:54:aa:53:3c:02:e7:59:20:38:f2:11:e7:c3:6e:
                    e0:0a:7d:35:6a:59:f5:2e:b7:d7:1d:58:3f:12:f6:
                    06:ef:84:9b:25:38:1f:55:29:3a:63:cb:a2:eb:0f:
                    fa:14:b6:24:76:77:c8:95:f0:94:08:5b:36:97:26:
                    5c:14:32:6f:c8:43:79:36:bd:2c:95:8b:39:af:05:
                    aa:9a:ed:f7:45:f1:08:19:a9:08:29:97:59:13:83:
                    4c:6c:20:11:50:04:d5:c3:c7:b0:c7:14:96:31:86:
                    6f:8b:92:4f:af:c4:e5:30:a4:e1:96:10:95:73:6c:
                    e2:15:3b:58:fa:6c:87:c5:4b:20:c1:ee:5d:54:c9:
                    58:95:6f:e3:11:4f:1e:5e:6d:d9:7f:e4:c3:89:a5:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:86:0B:D2:97:51:84:4A:1D:3C:BD:67:2C:CC:2B:96:A5:2E:58:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.191.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:0c:b7:12:0b:d1:75:ad:84:d1:80:1d:08:bf:8c:ad:54:
         ce:96:8d:9c:85:5b:3a:51:fe:3c:0c:74:c9:59:dd:15:3c:9c:
         72:b8:f6:4e:26:9d:11:10:51:81:23:b3:eb:24:38:63:cf:6d:
         13:69:57:bd:8b:4a:d0:36:c0:01:43:e8:a0:8e:bf:be:97:a6:
         d8:71:98:e1:c4:3a:65:b0:3f:91:5a:79:32:ef:e7:b9:be:81:
         8a:7e:d1:49:4f:66:00:bc:6f:22:e7:ac:47:29:4c:06:71:e6:
         59:7e:ce:4e:68:50:b5:b0:d7:cc:21:e4:f9:da:0d:bd:24:a6:
         73:a4:db:6e:b6:f2:3f:13:5f:c0:94:4e:8a:e6:10:3b:c9:82:
         55:c4:76:fd:6b:c7:ad:92:7e:7d:42:11:0c:b7:61:ad:5b:9c:
         b9:53:fd:fa:c9:2d:9a:27:0f:a9:ce:91:47:28:32:f3:7c:fa:
         ea:a8:45:de:c5:82:63:88:c1:c0:29:85:94:10:58:d3:fe:5b:
         42:a4:2e:d1:73:45:b9:c2:59:8d:24:57:36:0a:7c:35:a2:f1:
         82:55:95:ea:a0:d4:20:b7:af:da:48:9e:dc:69:33:35:0b:a5:
         61:a3:94:82:a5:35:df:0a:22:78:20:4c:d0:c3:ba:d9:d9:a3:
         1a:5d:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:00 2026 by rpki-client