Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91bda03a-2e66-35b5-a06d-68b95c3f3932.roa
File:                     91bda03a-2e66-35b5-a06d-68b95c3f3932.roa (raw, json)
Hash identifier:          2wBygfwlriYLixF3zMfCNrPeXpj3dwzv46pcZYn1Vqw=
Subject key identifier:   32:1B:D9:70:03:3B:B5:99:53:54:01:09:4B:A6:C5:40:A4:11:62:B8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D3E0014AE05C0217004AB6D60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91bda03a-2e66-35b5-a06d-68b95c3f3932.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     15169
IP address blocks:        34.4.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:14:ae:05:c0:21:70:04:ab:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=52dfcab0-6a0a-442a-8d1d-b61c88286145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:50:71:bb:2f:b5:89:87:06:3c:ef:ca:2a:
                    02:f8:43:23:91:29:43:7e:d5:e7:49:0e:f4:d4:23:
                    2a:9b:e9:e1:2c:85:9b:14:63:8c:72:7d:fd:fb:3e:
                    2e:e2:90:70:fd:86:d3:a9:a7:55:43:fc:f9:8c:23:
                    b0:83:d6:21:bd:bc:36:f7:66:55:d3:76:8d:18:61:
                    67:97:c5:a3:5b:08:f2:0b:76:4f:95:ee:c9:65:ae:
                    c5:91:48:5f:ee:d0:41:6a:c8:ce:90:37:00:75:68:
                    2b:c8:15:e6:1c:d3:93:e7:8b:ee:50:71:b1:b0:0c:
                    b2:e9:19:1c:85:93:c4:c3:50:a6:bd:41:1f:98:d1:
                    e0:46:c9:26:55:5d:f0:f7:fc:c9:f1:fd:d6:74:f0:
                    0c:36:be:7a:87:bf:15:bf:0c:af:cb:88:f2:a8:bc:
                    28:e1:57:5c:bc:8b:5a:a0:e0:96:58:75:4e:88:e1:
                    aa:ff:02:6a:2c:42:e3:8b:b5:cf:be:72:b6:64:d7:
                    bb:6d:7c:b8:1b:69:5d:a3:43:03:68:09:0f:f6:17:
                    c4:da:43:fa:f5:f5:bc:d7:af:0a:7b:96:55:9b:1f:
                    17:7b:ee:5c:96:50:29:2f:66:cf:db:cf:03:97:85:
                    bb:10:15:a9:e8:e7:a4:4e:ff:ef:2b:3a:23:15:13:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1B:D9:70:03:3B:B5:99:53:54:01:09:4B:A6:C5:40:A4:11:62:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91bda03a-2e66-35b5-a06d-68b95c3f3932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:05:85:7b:46:8b:bb:10:02:f4:dd:23:11:7c:b3:2c:d8:a3:
         6d:94:fe:f0:44:c5:4b:46:7e:1d:84:c5:b3:3c:13:1e:ff:c6:
         a1:e9:ab:98:d0:4c:89:8e:17:3d:3d:ca:75:84:1a:56:85:7d:
         fc:09:81:de:4b:6a:c7:5d:4c:1a:ad:4d:25:d2:29:7c:da:6d:
         8d:c3:bd:30:dc:21:86:b5:f9:11:e4:49:09:93:0c:33:c1:42:
         f3:ba:25:ec:4d:d7:23:96:f5:81:96:60:af:1c:f7:6d:e4:79:
         8f:ac:dc:b0:5c:5c:11:2d:5b:5b:65:97:1a:24:e7:41:c5:ca:
         df:82:69:7b:f3:a1:f6:32:3b:44:67:d2:db:aa:ed:10:23:9d:
         84:3e:68:0b:b4:28:df:ba:4b:58:63:52:f3:0c:bc:f0:8f:64:
         47:16:60:78:29:43:2b:a9:c6:94:9c:30:d9:b0:dd:ab:1a:5d:
         00:36:25:a5:8e:8f:c4:fa:fc:9a:f9:2c:0c:11:e4:65:3e:67:
         80:e9:18:fc:1d:61:03:0a:bd:61:38:ef:11:06:23:f1:3a:f5:
         d4:a5:71:ce:0e:28:0c:4c:ba:ab:85:a8:d9:0c:35:c9:e9:a3:
         ff:b6:d4:05:70:9d:96:20:d2:81:54:47:9c:36:73:0a:f5:12:
         ef:39:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:43:53 2026 by rpki-client