Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8de65b5b-e20d-32d8-8a3e-c8dd5a40fbcd.roa
File:                     8de65b5b-e20d-32d8-8a3e-c8dd5a40fbcd.roa (raw, json)
Hash identifier:          aqwxZc4enVp5ylTF5OMXY9c6w5GLgiBME9N4n6I2Rwc=
Subject key identifier:   72:BB:1C:F6:B9:8D:76:9B:BC:08:E4:BA:7F:B7:51:93:26:74:4F:CF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF5D86BE05DD38782E3CF600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8de65b5b-e20d-32d8-8a3e-c8dd5a40fbcd.roa
Signing time:             Tue 12 May 2026 14:42:21 +0000
ROA not before:           Tue 12 May 2026 14:42:21 +0000
ROA not after:            Mon 10 Aug 2026 14:42:21 +0000
asID:                     43515
IP address blocks:        34.1.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:5d:86:be:05:dd:38:78:2e:3c:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:42:21 2026 GMT
            Not After : Aug 10 14:42:21 2026 GMT
        Subject: CN=83e8faa1-424e-4aa7-98f8-8270a6044320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:2b:4f:a9:c1:37:b5:54:2e:b3:cc:01:20:
                    52:5b:f6:f3:2d:34:d7:57:0c:4d:89:3c:45:9a:9d:
                    1a:25:61:54:56:8f:01:0a:dd:6f:9e:72:a8:4d:cd:
                    19:23:89:ff:50:e6:d1:61:6b:f8:fa:18:ac:95:42:
                    cd:be:63:f1:e2:33:56:13:0d:c8:a5:7d:95:f1:d0:
                    e4:df:cc:74:37:2f:4f:83:6f:a6:dd:29:25:c8:63:
                    0a:f1:49:62:2d:6e:b2:00:47:25:bf:47:a3:d4:c2:
                    0d:ef:5a:ed:d8:59:02:7b:c8:51:16:9c:bf:07:7a:
                    38:30:92:e7:16:a3:7e:33:67:08:24:db:70:cd:2d:
                    27:11:e5:e4:bb:60:91:89:c0:65:0b:be:1b:17:92:
                    1e:d1:f0:7f:9e:0f:d2:66:3d:31:62:e9:13:fc:07:
                    97:c7:83:ba:91:38:e4:46:31:09:0e:30:31:71:c8:
                    a5:ef:d8:ac:d3:95:20:1e:4f:07:04:2d:2f:9b:bd:
                    9b:46:1c:83:00:64:93:7a:96:47:95:05:ca:c9:1d:
                    8e:77:3c:35:7f:dd:73:69:1b:57:4d:c5:70:36:eb:
                    32:80:bf:c6:4a:07:39:cb:da:69:89:27:74:a6:a8:
                    dc:c9:86:4e:4d:93:a3:cf:84:01:92:d4:cd:98:86:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BB:1C:F6:B9:8D:76:9B:BC:08:E4:BA:7F:B7:51:93:26:74:4F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8de65b5b-e20d-32d8-8a3e-c8dd5a40fbcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:c4:ba:8c:e7:fc:1e:9e:9e:a0:3f:cf:17:a2:be:82:a0:
         1f:f1:3a:68:67:2e:1c:46:08:48:54:3d:7f:b4:d7:4c:50:c8:
         8b:4c:3e:5e:d0:7b:5b:34:b0:34:6a:82:d9:b4:e8:24:6e:fa:
         a6:31:57:60:96:ca:e6:49:38:59:a5:20:86:80:26:fa:fe:5a:
         45:e1:84:28:ce:6d:7e:74:e7:41:82:c5:cc:c3:73:a5:01:c9:
         73:e7:f3:27:f3:70:22:76:80:40:fa:e4:29:51:a9:58:45:b6:
         e4:ae:4d:b4:6b:09:60:0f:7b:bb:7d:0d:41:84:00:57:db:f1:
         cd:8f:4e:6f:60:65:94:69:0d:31:fc:79:4f:73:c7:5c:9e:85:
         62:e2:ed:1d:24:08:20:b1:84:8f:51:a2:ea:5f:91:31:04:1d:
         ab:25:2f:7c:6e:ee:ab:c6:26:5a:29:06:58:98:91:d5:80:04:
         f4:04:02:d8:c0:1d:b1:6b:46:fe:1c:1f:db:65:4d:b5:cf:cc:
         2f:47:3f:8d:fd:dc:27:58:23:b4:53:4b:7d:b1:1d:7e:2c:3d:
         f5:a6:3d:88:fe:c5:89:13:4f:fe:9c:be:38:ac:b5:47:57:7f:
         cf:1d:49:33:0d:a6:86:bd:da:74:a2:07:0d:cc:7f:39:f6:ce:
         21:59:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:48 2026 by rpki-client