Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4ec8fc9-df90-3b40-ad06-14b72e5a3321.roa
File:                     f4ec8fc9-df90-3b40-ad06-14b72e5a3321.roa (raw, json)
Hash identifier:          aHdlSxOTdgyODvedemwgkyUX/bsLPMe9lUQWZzBAngk=
Subject key identifier:   AA:0F:4F:0C:C0:98:66:F1:3B:5D:A2:9F:71:C1:3E:2A:F7:A8:B8:2C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF62FF6E08917BA811F0A0C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4ec8fc9-df90-3b40-ad06-14b72e5a3321.roa
Signing time:             Tue 12 May 2026 14:53:22 +0000
ROA not before:           Tue 12 May 2026 14:53:22 +0000
ROA not after:            Mon 10 Aug 2026 14:53:22 +0000
asID:                     396982
IP address blocks:        34.3.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:62:ff:6e:08:91:7b:a8:11:f0:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:53:22 2026 GMT
            Not After : Aug 10 14:53:22 2026 GMT
        Subject: CN=cfa9f821-2187-464e-aed4-5ad94352f575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a3:94:28:eb:b5:13:b5:4b:f0:0e:63:a1:f8:
                    b1:7d:3d:ca:aa:83:4a:c8:25:20:54:11:30:f6:97:
                    a2:90:5b:2f:db:09:0c:9b:d4:98:0e:be:38:7c:7b:
                    27:15:5f:ec:9d:8e:43:cd:6e:17:57:8e:f3:d8:22:
                    26:ab:d4:ff:1b:d4:0d:c7:8f:de:1d:53:6b:11:a0:
                    01:4d:46:82:ae:c5:b0:4c:32:86:27:3f:55:2c:24:
                    15:ca:65:52:84:22:47:b2:60:99:17:fb:51:b7:c3:
                    f1:6a:59:db:96:94:52:fb:73:e3:e3:32:e4:bb:80:
                    f2:ed:8f:e0:57:18:23:19:8d:96:cb:6d:b4:0e:2c:
                    10:3d:d4:69:a5:b3:40:bb:b7:d1:32:83:83:e4:a8:
                    06:b6:1c:c7:81:ac:1c:45:57:7f:e4:8c:aa:a5:9f:
                    6f:67:6f:dd:80:74:bd:19:33:c0:0e:d3:6a:0c:59:
                    1a:7c:90:ac:fa:34:49:44:ad:85:33:c5:6a:48:8c:
                    c3:cb:2c:50:9e:5c:8d:0f:28:40:b5:a7:2a:af:20:
                    c4:5d:4a:71:a8:6f:1e:09:61:0f:17:05:4f:c2:b9:
                    dc:ea:58:4c:14:bc:16:1d:f5:71:6e:13:92:3a:3a:
                    81:7a:81:74:67:43:34:4f:fa:9d:26:af:e8:57:a4:
                    37:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:4F:0C:C0:98:66:F1:3B:5D:A2:9F:71:C1:3E:2A:F7:A8:B8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4ec8fc9-df90-3b40-ad06-14b72e5a3321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:35:59:ad:b5:c2:d0:57:e9:dc:08:b2:fc:a3:a9:39:c6:06:
         19:3f:6c:a2:84:8d:87:39:81:68:22:2a:c5:ed:2f:b0:5f:30:
         fe:13:88:09:12:2e:74:6a:71:91:b8:7b:d7:2b:10:1b:95:51:
         54:38:8f:55:ff:6b:90:ad:6e:e8:73:c0:0a:23:fd:8c:5c:35:
         45:1b:09:76:62:3a:be:09:2b:40:2a:61:32:96:20:b9:fb:68:
         84:89:a6:1b:1a:1f:3a:3d:a8:70:d4:b7:59:d1:3f:d3:c4:c3:
         e2:4c:ff:d7:f9:16:ba:58:35:ff:2c:65:f8:cf:43:76:1c:cb:
         d4:c0:bb:b4:b5:9a:e7:56:77:f0:ee:00:6a:63:f9:e3:d4:b1:
         46:69:da:17:e7:8b:b5:2c:9c:67:c1:29:1b:62:f9:dc:aa:f3:
         a7:dc:b3:80:14:d9:9d:32:64:75:48:85:2a:5c:54:e0:88:37:
         62:d5:06:c4:9b:08:4d:99:73:2c:d1:90:f9:47:5f:5e:de:84:
         85:0d:8e:f2:4d:16:56:0c:ac:e1:ef:91:43:0c:63:1e:57:25:
         a5:12:ab:98:94:d0:94:93:20:fb:1e:66:35:9f:67:9e:cd:00:
         14:05:d8:fc:4e:2e:1b:68:d7:b0:69:7a:e1:29:96:bb:0a:42:
         a1:20:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:56 2026 by rpki-client