Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa
File:                     b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa (raw, json)
Hash identifier:          0ubbo2cciisJskxo+VXLRe1lWeXJZlNARmWsoo9M4tA=
Subject key identifier:   05:3E:62:C3:C4:BF:79:78:57:83:5D:C5:6C:ED:12:7D:87:53:2E:5B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E03D2383E0AAD1EEA56E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.106.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:3d:23:83:e0:aa:d1:ee:a5:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a9cc10df-5c43-4a21-af30-64425cad486a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:4d:3e:e1:df:bc:16:95:bd:f1:86:61:09:42:
                    d3:1c:78:ea:7d:9f:6f:dc:fb:83:8d:38:a9:2e:c7:
                    3b:15:82:b4:f6:c4:ef:d5:7a:51:04:32:b0:ca:e4:
                    6b:28:d0:ad:14:93:61:c3:ef:0e:da:43:bf:00:ac:
                    e8:5e:3c:0b:38:b6:d5:bb:c0:9b:fe:c0:0b:34:b2:
                    df:7c:1b:d3:b9:28:89:e6:0a:09:46:9f:d2:73:db:
                    cf:05:d3:a2:c1:2f:66:27:29:47:c3:d2:04:f3:d0:
                    44:9a:7f:e0:ae:f0:6a:5a:c0:e1:92:9e:26:1f:6d:
                    f7:31:45:53:1e:c7:a0:c8:e7:c1:8a:47:9b:6a:82:
                    72:5e:7e:de:ae:ee:77:99:7b:fb:a7:0d:6e:91:1f:
                    c9:f5:a6:58:64:b8:04:f2:3f:34:c6:f1:3d:5e:b4:
                    74:99:a1:f0:05:f5:de:95:23:fc:fa:bb:9f:bb:f6:
                    3b:5a:00:67:e0:f7:a7:d9:81:3b:89:10:2b:62:86:
                    ca:16:07:22:f4:0f:29:ce:aa:84:08:d4:5b:9d:4c:
                    56:74:d6:61:61:97:c6:1e:72:15:5d:c5:da:53:4a:
                    8d:55:cc:6e:59:2e:2d:c4:df:7e:51:bc:0f:db:a6:
                    4b:bd:fb:d3:d6:b1:94:7e:ef:25:6f:8a:23:97:75:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:62:C3:C4:BF:79:78:57:83:5D:C5:6C:ED:12:7D:87:53:2E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.106.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:9b:c4:25:98:f3:11:c5:c2:26:d5:06:fe:f2:b3:72:bd:
         3a:24:4c:58:ae:ba:11:b7:3d:be:a0:c5:f8:c4:b8:13:a2:15:
         ab:1a:05:80:5d:80:63:c9:b1:c6:28:9e:0c:d4:34:67:5e:da:
         4c:34:55:76:47:14:b6:5f:cc:d6:5e:25:23:29:0b:da:f2:58:
         a8:14:0f:6a:ff:b0:5f:24:2c:12:97:5a:b6:19:71:09:86:5a:
         a1:de:d7:31:98:64:a9:73:10:47:2d:25:70:ad:c0:bf:56:24:
         84:58:9c:46:69:49:2a:4c:ff:73:06:bf:8a:71:ee:77:a8:db:
         02:45:53:8a:6e:07:69:31:34:93:68:c6:43:7b:dc:58:a7:88:
         21:39:f3:fb:a7:b2:61:b2:9c:2a:c0:bf:ff:72:13:8d:7b:bb:
         38:39:7d:68:bd:6e:e0:ea:1a:b5:e9:8e:26:4b:1b:90:1c:e2:
         17:1d:89:2d:7d:df:bb:7d:da:68:1c:57:c4:2b:43:4e:74:c1:
         82:99:f0:36:6a:cd:75:e1:d1:88:2b:62:fd:46:4f:dd:63:56:
         17:d9:11:ba:af:75:3e:07:f5:d3:97:56:46:7a:24:7e:45:c4:
         48:c3:1c:64:2a:b6:3d:22:71:4f:10:6e:94:2c:b0:fe:a9:ee:
         2a:c9:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:35:33 2026 by rpki-client