Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d061b44-40ee-33c3-9e91-63ea26e9c0f1.roa
File:                     7d061b44-40ee-33c3-9e91-63ea26e9c0f1.roa (raw, json)
Hash identifier:          UTfikRVlLZyGWQJNaMYv5hRGDVHNiyveHKAZzd2/wY8=
Subject key identifier:   F7:49:56:4C:05:97:CB:DF:22:75:36:F9:8E:F4:4D:64:D0:BB:C8:82
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F497D1192027F1B1884188E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d061b44-40ee-33c3-9e91-63ea26e9c0f1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19527
IP address blocks:        34.0.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:11:92:02:7f:1b:18:84:18:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae376a16-ed2c-4536-aac5-387e44edbb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:69:40:fa:f2:ee:b1:f9:63:8a:8b:5a:2d:
                    8d:c7:2c:c1:7c:a7:e1:bb:86:6f:cd:4e:99:24:f2:
                    3d:cd:fe:32:37:2c:85:c6:91:7c:ad:d6:16:d5:2a:
                    b2:5f:d9:62:50:0e:17:ae:52:e6:8c:2a:7d:ec:46:
                    9f:d8:e3:40:3d:45:ae:b5:f5:cf:24:f7:98:1f:82:
                    dc:6c:59:17:30:f3:f0:69:af:87:f2:23:37:20:c2:
                    fa:1a:e7:c4:55:28:4a:9b:e6:39:f9:a7:7d:9b:51:
                    3e:ab:94:fb:ee:c1:1f:0b:e0:e8:7f:72:0a:56:7c:
                    80:e0:d9:a6:97:53:c1:4f:84:0b:2e:0e:a7:b7:0b:
                    69:30:cc:04:0f:6f:06:cb:d0:3c:c7:07:c1:cf:c6:
                    bb:72:ee:f7:a4:a3:69:18:06:f2:c0:9f:c2:8d:6d:
                    03:19:aa:f2:5e:ac:e8:29:87:f8:43:80:b0:57:21:
                    4f:3a:f8:e8:72:b4:ab:77:8c:ef:c1:31:02:58:b5:
                    30:01:76:15:0b:88:b9:af:1c:ff:60:2a:43:13:ee:
                    c4:b9:89:ff:a2:29:e3:c5:0c:64:af:a4:e1:63:27:
                    a6:61:19:2a:c2:8c:65:dc:bc:c7:5d:13:5c:d9:71:
                    8d:c7:54:1c:f1:d1:1a:28:c7:c5:b1:9e:8b:cd:69:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:49:56:4C:05:97:CB:DF:22:75:36:F9:8E:F4:4D:64:D0:BB:C8:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d061b44-40ee-33c3-9e91-63ea26e9c0f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:38:03:76:b3:df:e5:85:e8:11:a5:83:0e:d9:13:51:46:77:
         2b:f1:6a:a5:75:98:cd:d6:e2:ff:8e:49:e7:f7:10:70:c8:a3:
         1d:03:aa:ca:27:36:f2:6a:14:d5:0a:73:c8:76:37:85:6c:13:
         01:25:e8:2b:2a:b5:8c:40:77:4c:18:8f:1a:43:33:8d:54:2f:
         a9:47:ac:f8:af:0b:43:9b:49:90:12:46:06:2e:04:5b:89:bd:
         4c:43:35:87:b6:45:a7:ec:bf:62:11:bc:fd:89:60:f3:d6:e9:
         20:ce:29:fc:76:0d:2e:0f:30:1e:d6:8a:4c:5d:84:76:8e:d1:
         9e:1c:82:af:61:42:b2:63:d9:5b:1b:ab:1e:05:c5:74:30:75:
         03:b6:07:cc:90:3c:e6:85:88:57:68:ae:5a:70:f6:8a:67:7e:
         cc:dd:58:6a:3b:9d:87:e0:68:ea:00:b1:30:68:cd:23:8d:08:
         8f:5c:28:3b:69:99:eb:ec:f1:32:d4:ba:11:d3:b2:c5:ad:a2:
         f0:68:f5:97:84:35:79:8d:83:bf:e7:a3:10:f9:c3:e1:32:5d:
         1f:cc:6a:ca:bf:0f:1a:bc:09:a5:f0:9c:66:20:49:80:d1:f6:
         33:3d:69:db:35:82:2f:e8:b8:96:a8:32:86:96:6e:9f:1b:17:
         74:9a:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:15:25 2026 by rpki-client