Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa70fa60-9712-3cfd-9f47-dc68ec6c4e0a.roa
File:                     fa70fa60-9712-3cfd-9f47-dc68ec6c4e0a.roa (raw, json)
Hash identifier:          a9AxVszmeQjCYhi2NLNwGOq19JPYQU9t8NRW//Jchc8=
Subject key identifier:   00:42:45:1E:73:6D:BC:2B:18:52:49:6C:6E:B2:3B:34:3C:1D:22:7F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF5F314FFB1B5829310D3880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa70fa60-9712-3cfd-9f47-dc68ec6c4e0a.roa
Signing time:             Tue 12 May 2026 14:45:42 +0000
ROA not before:           Tue 12 May 2026 14:45:42 +0000
ROA not after:            Mon 10 Aug 2026 14:45:42 +0000
asID:                     396982
IP address blocks:        34.1.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:5f:31:4f:fb:1b:58:29:31:0d:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:45:42 2026 GMT
            Not After : Aug 10 14:45:42 2026 GMT
        Subject: CN=c3aa4a5a-eaf0-48b1-b10a-765ecd157fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:78:85:a7:4a:10:47:ee:42:09:09:e7:21:3d:
                    70:b4:6d:5b:e9:b0:f9:c1:c2:ff:50:0f:93:c3:b3:
                    3b:f2:bf:96:0b:b5:23:e8:b8:02:ab:c7:34:ec:9d:
                    99:2e:15:64:10:69:eb:79:32:7e:59:16:f1:3d:9d:
                    f1:ef:a1:6d:e8:b2:8b:75:ad:6e:81:9c:2d:ff:97:
                    6e:7b:a0:6a:c0:0a:84:d9:c6:5e:88:65:ee:4d:3e:
                    b0:5c:68:c0:17:a6:f8:88:92:83:31:78:2c:52:68:
                    3c:9d:c7:cb:5a:55:91:d2:7d:c0:a0:d1:fb:66:c1:
                    c2:75:40:3c:14:e3:ea:ae:2f:80:f1:ac:b2:a3:c4:
                    18:6f:eb:dd:cb:2d:99:ee:b8:1a:8b:cd:e2:45:20:
                    74:4c:78:33:3c:8e:5b:b6:17:b4:42:8b:4a:80:f6:
                    6c:d9:3c:d9:d1:64:53:c0:74:e6:c9:b5:f7:ab:b8:
                    52:f0:da:ba:5c:2a:10:dd:25:90:80:4b:50:a4:13:
                    1e:0f:cc:26:8f:7d:5d:de:62:76:21:f1:db:99:3e:
                    78:03:70:6c:0c:77:92:d2:7e:99:62:a5:09:11:96:
                    5a:4a:76:51:5e:e1:a6:f9:0b:db:01:2f:de:3e:0f:
                    c6:24:cf:6c:6b:81:d4:17:b9:53:5a:61:b5:c9:c1:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:42:45:1E:73:6D:BC:2B:18:52:49:6C:6E:B2:3B:34:3C:1D:22:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa70fa60-9712-3cfd-9f47-dc68ec6c4e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0d:64:b5:bd:8c:4a:a5:9d:c4:e8:c9:3b:4c:bf:24:65:3a:
         4b:85:d7:ff:cf:56:0c:db:bf:bf:7b:55:c8:6e:77:b7:59:7c:
         05:ac:c1:0b:fd:b4:b9:e5:13:eb:9e:e5:1f:8c:59:b3:14:2d:
         dc:a8:04:67:3e:ed:4e:72:73:6e:42:13:8b:26:6c:d1:ad:a1:
         30:d3:9c:2b:f1:21:84:25:7d:bb:ba:5a:cc:ad:b7:c9:8d:48:
         6a:42:41:51:f0:42:e3:12:e5:8c:05:99:98:34:dd:0c:c0:dd:
         48:f4:65:a1:9a:64:c4:62:09:44:35:90:8f:a1:ab:02:65:53:
         13:ca:dc:4e:e5:36:bc:cf:4c:7f:07:ce:36:f5:b5:7c:72:1d:
         e0:4f:b2:c3:3e:d9:ce:2b:d3:98:85:73:25:bf:20:79:d3:bb:
         9d:4a:5e:2d:9b:0f:2a:8d:1d:93:73:6d:23:3b:a0:0f:63:4e:
         c3:ff:b8:d8:f2:43:76:90:15:c9:44:e3:21:68:59:0a:1c:a9:
         22:6c:87:28:24:d6:a1:cc:d9:39:77:17:11:f6:90:94:87:ac:
         97:d7:c8:9f:c2:0e:ac:01:ea:49:6a:e2:50:70:62:ce:87:8b:
         5d:1e:5d:3e:5e:17:24:fb:37:7d:90:89:dc:1d:05:27:9f:e5:
         02:ce:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:19 2026 by rpki-client