Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
File:                     e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa (raw, json)
Hash identifier:          BfdIzDtgfi/qE9Ojb4fB6LnJXlEp27tMo0WwvVWgh7E=
Subject key identifier:   9C:8D:BA:19:CF:A6:8B:B1:61:57:19:2C:78:28:F6:4F:6D:E7:BD:6A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCAFAEBF5ADC850831F764B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     19527
IP address blocks:        34.2.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:eb:f5:ad:c8:50:83:1f:76:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=da5fc1dc-8a4d-4cd5-aad8-9e1163e3d129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:95:39:b6:39:90:29:62:ff:b8:c1:46:8a:
                    ac:ed:e3:ed:3c:d0:2f:c0:4a:73:cc:d7:d7:45:b6:
                    84:81:f3:2a:5b:c4:8e:22:29:5c:8b:e1:f9:6b:d3:
                    a5:6f:1e:c7:5d:07:83:dd:05:9c:1a:61:99:78:60:
                    61:0e:67:59:e9:12:a8:49:83:46:46:0b:ae:63:68:
                    69:ea:7c:fe:30:70:2c:8e:31:20:75:0b:ef:03:40:
                    87:61:c0:27:87:db:f3:af:b0:24:72:36:f0:42:63:
                    cf:5b:0e:08:7a:b4:d5:c0:e7:50:b7:a1:ec:5c:74:
                    6f:c8:a1:40:4b:14:3c:33:68:97:3c:71:16:57:a4:
                    2c:26:ad:b2:f6:94:bc:1f:bf:26:65:15:d2:4b:8a:
                    83:76:03:8f:8c:51:d8:0b:1c:f8:4f:14:1b:e0:b8:
                    fd:c9:84:f0:55:70:89:ff:ab:09:0f:34:dd:45:0c:
                    43:3b:ae:2f:ad:cc:17:16:5f:e1:86:d7:08:54:37:
                    be:1c:d5:1c:1e:3c:c4:19:da:50:cd:3f:44:61:a2:
                    72:88:23:a7:63:28:51:11:0d:5e:99:9b:4a:b4:ca:
                    57:c0:8e:26:e6:6a:99:59:5f:30:23:69:77:c3:bd:
                    d8:dd:99:a2:0b:b3:dd:d7:cc:05:1c:1d:46:7f:f4:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:BA:19:CF:A6:8B:B1:61:57:19:2C:78:28:F6:4F:6D:E7:BD:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:42:9e:e0:1d:61:58:f7:be:69:13:06:88:45:66:26:be:3f:
         df:69:e1:6f:9f:e0:ac:b8:3d:1a:d5:8d:4a:56:56:f9:81:75:
         3d:dc:21:c6:2b:9e:79:a9:53:52:13:5d:f5:a9:45:6e:33:26:
         6d:b4:ba:92:47:8e:44:25:7b:a8:dd:bd:d1:55:b6:2b:dd:82:
         64:b3:85:e6:1b:fd:e8:e4:9c:20:be:9f:76:bf:e9:b0:95:1f:
         5c:3d:12:73:78:49:36:09:50:e1:9f:62:56:eb:ff:5c:96:df:
         f3:38:0c:10:f8:6c:34:c0:4a:f8:27:7d:88:ea:82:17:86:38:
         bc:76:ae:69:9f:dd:2a:7d:b1:1b:0c:3f:bb:be:ea:82:85:eb:
         43:06:0b:8f:d8:aa:2a:12:f5:49:87:d1:60:ef:a5:54:0c:d3:
         e6:f8:6d:b9:b7:11:7c:06:2e:f2:21:ee:ca:c9:ab:25:bd:a4:
         99:45:92:bc:44:69:0c:7d:08:3d:42:42:c1:76:e3:19:62:56:
         9b:3b:cc:a0:f0:a6:c3:f8:49:47:fb:3e:89:ea:a6:1c:1d:9c:
         4b:91:1f:48:9d:38:9a:47:d8:74:2f:fc:5b:33:cb:e9:3b:67:
         be:5f:99:50:47:2c:22:ec:32:6a:96:30:77:6c:45:36:81:43:
         72:77:ae:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:13 2026 by rpki-client