Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91724a97-c972-3d04-9128-cf6b6b1669f0.roa
File:                     91724a97-c972-3d04-9128-cf6b6b1669f0.roa (raw, json)
Hash identifier:          cvJPLWfu01Ng+gUe+pXGCL8DsYlvkNufeJghFDTQYBY=
Subject key identifier:   3E:CD:FB:A5:D1:A1:67:65:AC:70:2A:06:B4:1D:E2:94:17:3A:0E:B1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F498447CD31125062193A6000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91724a97-c972-3d04-9128-cf6b6b1669f0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19527
IP address blocks:        34.1.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:47:cd:31:12:50:62:19:3a:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=96594ed7-d5c5-40ce-9a41-8c98fcecb707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0f:d9:2b:de:66:f7:56:bb:2d:87:44:5c:13:
                    fc:37:d2:50:5b:8c:71:df:63:c9:7a:55:41:ca:f0:
                    be:ee:ea:0f:0a:0f:11:e5:93:29:4e:be:e7:a5:7c:
                    82:5c:7a:af:56:58:7f:99:43:db:f2:e5:73:ff:4c:
                    f4:b9:5f:b7:62:c1:f5:03:a1:1a:b0:6b:cf:05:f2:
                    3a:40:ac:1c:61:17:35:60:eb:3f:ae:8b:b8:b5:df:
                    ec:12:7d:46:1e:c9:8d:fa:a6:f6:1b:91:f2:a2:d6:
                    e6:db:0e:27:49:e9:60:27:e1:14:a2:b4:5b:82:f3:
                    e0:d3:37:57:47:be:63:1e:c5:f3:88:59:0d:06:7d:
                    af:a4:8c:df:ee:ca:53:22:5b:1b:15:03:6c:64:8b:
                    10:61:e2:60:51:a8:85:d9:b9:14:d1:c0:3c:bb:50:
                    81:65:6b:d6:e0:27:b8:2b:3b:2a:a8:a3:f0:38:17:
                    c9:dd:a1:65:07:25:5d:5c:58:c9:13:99:e0:e8:73:
                    1e:8b:64:2f:85:d4:67:86:2a:68:48:c1:a0:ff:7b:
                    0c:de:3c:28:44:8b:79:96:92:65:ec:f3:f0:5a:43:
                    d1:e0:ec:63:6c:68:ac:a7:52:b0:a1:85:68:09:a1:
                    d4:70:71:6a:d8:a3:1e:98:66:5d:87:e4:03:e2:f2:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CD:FB:A5:D1:A1:67:65:AC:70:2A:06:B4:1D:E2:94:17:3A:0E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91724a97-c972-3d04-9128-cf6b6b1669f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:bb:c1:70:13:9c:4a:34:7b:36:75:85:80:14:9a:8d:0e:8a:
         b6:2c:18:57:ad:c0:48:a9:f7:01:c6:34:f8:75:f8:d8:e6:92:
         a4:21:27:c3:a3:1e:b7:a2:3b:49:e9:25:ca:4b:f0:cf:ee:f0:
         5d:8f:f5:a4:8e:f6:f9:a6:b0:c1:d7:f7:fc:f7:e0:8a:7d:02:
         f2:d8:04:e2:a2:59:03:9e:50:44:6a:f2:04:f6:73:f5:f6:a8:
         c5:ec:e4:d5:e4:bb:be:e9:b5:51:c3:11:4d:83:53:ec:1d:5b:
         01:bc:38:35:08:a2:c9:eb:70:12:9c:61:6a:cd:9e:3e:4d:6b:
         c3:de:85:f7:b6:2c:b4:3c:d2:44:8e:db:d8:f5:f9:c1:ce:76:
         8d:0a:07:57:d0:3c:7a:8e:b4:89:2d:63:79:50:f5:83:64:46:
         0f:8c:25:4d:17:39:55:eb:1c:18:7f:2c:eb:ce:94:14:79:a0:
         17:fd:15:e0:cd:a0:09:5f:e3:b7:22:54:76:5a:0d:69:ba:3e:
         e0:a0:c4:6d:78:fe:52:4c:5f:71:e8:46:78:75:36:0b:99:62:
         76:7f:4b:63:d4:da:e2:60:a5:f5:a1:db:36:97:54:08:4b:5f:
         a4:e8:1e:73:9d:35:ec:53:ff:63:ec:f9:c5:ac:38:4a:7e:21:
         9b:f8:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:30:33 2026 by rpki-client