Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83aff4fc-9f6f-3eec-b755-c551df0912f2.roa
File:                     83aff4fc-9f6f-3eec-b755-c551df0912f2.roa (raw, json)
Hash identifier:          oJPPsz0Yhab+f0stBWng/7JGsf3NEee1sigIF8oC/yo=
Subject key identifier:   77:05:72:7A:1B:AE:C1:3E:D2:10:C1:29:E6:32:8B:45:AB:61:2F:79
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4973771A9A5AFE2BC1BEEE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83aff4fc-9f6f-3eec-b755-c551df0912f2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19527
IP address blocks:        34.3.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:77:1a:9a:5a:fe:2b:c1:be:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dcc6a6f6-a2aa-4b44-b4f1-30d6f89da8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:d9:5c:65:c6:04:51:00:64:98:e4:12:7f:
                    3c:bd:a6:50:4f:83:ab:b6:26:60:2f:d2:aa:11:5d:
                    20:5e:e5:2d:e9:dc:27:7e:61:a1:00:9f:b8:f4:36:
                    18:55:69:78:bf:6c:5f:34:74:8a:60:5f:a1:1c:d2:
                    0e:10:4c:f7:4f:46:50:1d:ab:ab:2e:a0:f8:9d:df:
                    f3:03:85:d1:42:1e:58:a9:54:37:55:60:7c:e2:6d:
                    da:45:71:23:c5:1d:18:3c:40:b1:c2:b0:a6:76:f3:
                    6b:9c:e2:5d:f3:d3:d7:15:75:22:6b:19:11:6c:6c:
                    12:4b:cf:76:e0:e5:8a:5b:33:ef:45:84:0b:d5:b8:
                    42:95:35:7e:04:3c:c4:c7:7e:f1:ac:f7:08:56:75:
                    ec:a3:29:fe:1d:95:77:41:19:f7:24:0b:d7:9a:bf:
                    71:64:b0:39:13:f6:32:27:39:cb:36:d5:e5:4c:18:
                    c4:a5:05:8a:6d:4f:34:0e:b8:ab:4e:fb:6a:9c:80:
                    45:ed:38:c7:54:07:5b:46:73:fe:2d:60:e0:98:54:
                    ff:aa:a0:74:8e:c8:45:4b:99:1d:94:f1:4a:55:a9:
                    88:87:f2:eb:ef:4f:a1:0a:7b:7e:8c:a0:05:0f:cf:
                    28:dd:33:1d:7e:f9:56:d4:e4:c2:16:8d:89:33:d1:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:05:72:7A:1B:AE:C1:3E:D2:10:C1:29:E6:32:8B:45:AB:61:2F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/83aff4fc-9f6f-3eec-b755-c551df0912f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:af:d9:1e:56:ad:66:22:27:41:dc:cb:c4:c2:40:ef:c4:0a:
         9b:69:74:c3:ec:30:d1:e0:0c:30:4f:df:2d:78:03:ea:71:35:
         29:35:1a:df:92:0b:8c:4a:d0:27:c2:a2:39:3c:90:84:04:26:
         8a:da:1f:d1:31:11:12:20:94:19:47:68:1a:c0:bb:64:d4:47:
         36:5c:d6:e9:87:c3:11:5a:e8:45:4c:ff:ed:6c:d8:d9:b5:c9:
         79:58:42:19:58:27:c6:63:88:41:38:70:16:df:aa:ed:aa:99:
         91:55:63:f9:00:c0:80:4e:6c:52:23:03:63:b0:9d:01:f9:a1:
         d7:45:cf:99:96:43:3a:03:73:0c:48:93:4e:1f:87:4f:a6:79:
         0c:13:ca:8a:99:1d:97:ee:b6:d9:c5:04:5d:6c:88:c6:42:02:
         70:74:dd:13:0f:be:8c:31:81:fb:bf:14:d4:13:c7:56:63:00:
         04:4e:37:c4:8e:c9:38:6d:f7:b0:be:ed:c5:c4:b8:ce:7a:19:
         61:2d:cf:cf:f1:db:fe:7e:46:09:c6:e5:50:ba:52:da:b9:13:
         dd:4d:ec:56:77:bc:17:23:6f:31:4e:13:b0:cf:7b:cb:4e:d5:
         69:b5:67:72:c3:92:23:62:98:bd:09:83:f4:0b:e1:f3:f2:79:
         6a:d6:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:40:53 2026 by rpki-client