Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d69a65c2-a018-3c55-8c86-3d35104c9507.roa
File:                     d69a65c2-a018-3c55-8c86-3d35104c9507.roa (raw, json)
Hash identifier:          uI5r3X7OgNF4NdeUF01Rd4CmFjE47TwkM+HG1ff5Qhc=
Subject key identifier:   BA:B7:9F:C5:8D:01:F6:99:7C:CB:18:94:EF:51:D7:50:F8:39:50:58
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F497481352EEABB68C8F09400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d69a65c2-a018-3c55-8c86-3d35104c9507.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        34.191.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:81:35:2e:ea:bb:68:c8:f0:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b61d8f75-51d9-4ea5-ba8d-3e9eb17b12df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:be:65:37:7a:7d:33:8c:1f:d3:40:c9:99:
                    3a:99:cb:15:50:e6:33:67:ab:18:e1:b9:96:9a:38:
                    f4:38:c1:f8:21:40:4d:63:85:5b:5b:34:7a:82:5e:
                    d4:20:35:bb:cd:b9:e4:1e:6b:49:83:3b:d3:7b:e1:
                    90:75:59:ec:d8:40:c7:09:a0:ff:d9:aa:de:9a:07:
                    1e:ff:63:e3:ea:ff:b9:8e:ee:9f:fd:e6:a4:09:3a:
                    e7:df:e7:ec:b2:54:02:74:1a:8b:c5:4c:ce:cd:51:
                    49:da:1b:6a:09:fe:08:a0:f4:9d:f8:1c:e6:b7:39:
                    9a:ef:e3:7f:b3:82:73:82:25:0f:77:e5:59:f3:e7:
                    85:40:8a:d7:da:31:64:30:16:da:28:63:05:68:fd:
                    ab:79:68:22:72:8c:32:53:09:08:dc:2c:64:13:3a:
                    8b:f8:9d:66:f4:d2:ab:06:af:70:7e:a9:d2:bc:6a:
                    e3:14:52:68:b7:53:1b:6d:71:a9:96:b5:25:92:fd:
                    8d:7e:7a:45:35:ef:5f:fa:fa:b3:7f:dc:b4:71:64:
                    f1:53:22:b5:16:9c:de:e6:b8:22:cc:d2:e4:4a:54:
                    92:6b:a3:19:4d:ec:f1:ac:b7:fa:56:a9:f5:46:e0:
                    a6:4b:36:96:bc:06:a2:de:40:dd:43:a7:7d:66:a9:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B7:9F:C5:8D:01:F6:99:7C:CB:18:94:EF:51:D7:50:F8:39:50:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d69a65c2-a018-3c55-8c86-3d35104c9507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.191.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f6:e6:71:2e:4e:be:4e:bf:f5:df:5d:57:8f:c0:f4:89:05:
         b9:94:29:92:5b:30:e7:cd:13:98:ae:3b:36:07:ba:76:65:57:
         36:86:16:73:90:9c:28:ec:c3:6b:07:b8:e0:aa:98:43:58:97:
         79:07:44:0c:a5:2b:ab:92:6e:d4:3f:9d:3f:95:3f:31:65:2e:
         16:74:6b:b7:74:63:2b:18:40:84:00:37:8e:54:b1:2e:bf:16:
         1b:14:0c:b3:84:22:e0:f5:75:8a:80:5c:9a:9f:42:63:f9:5d:
         a2:c2:17:b7:1b:f6:fe:3f:68:f8:5f:06:33:8c:f1:29:17:07:
         14:6a:63:b6:ae:25:90:51:cf:99:a1:d3:80:8f:99:a4:e3:6e:
         ab:ef:c9:a0:47:1c:ff:70:06:77:f4:15:24:6f:65:4d:fa:7a:
         94:fd:ee:fc:a4:c6:94:c7:2d:ed:74:f8:44:0d:df:52:6f:7d:
         ba:f7:c3:87:4a:16:ab:33:42:e4:6f:7a:d7:eb:d0:e4:a4:07:
         d8:f7:7f:53:1b:e4:3f:ba:7e:bd:34:9c:e4:f8:dd:fb:60:e7:
         2c:14:cc:e7:4c:8a:16:95:56:d5:46:41:72:99:2a:04:12:a0:
         f3:5b:02:4b:0a:a6:3d:e0:fe:1a:53:70:e6:be:6b:7c:6d:20:
         7b:d3:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:20:41 2026 by rpki-client