Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa
File:                     34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa (raw, json)
Hash identifier:          UL1NiIf0N19b36azLt1q4dHsXvgQGpD/qQBaNAEN8rY=
Subject key identifier:   1C:A8:AF:3E:7D:92:E1:A8:C4:FE:51:18:52:99:3B:A2:94:A5:EA:B0
Certificate issuer:       /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial:       010D0C9F4328584EE38C945C0E733CFF3B045380
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     21766
IP address blocks:        69.8.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:94:5c:0e:73:3c:ff:3b:04:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=9e165a31-fee0-41fe-8bd4-bbe2ad1516e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d2:41:49:48:e3:8a:d8:b1:21:48:8c:ca:02:
                    6b:86:c3:dc:90:0d:a7:ea:bc:a1:0c:26:6c:40:b4:
                    47:94:30:4c:0a:69:10:d9:ad:a8:f0:2e:96:0d:2b:
                    09:63:60:fe:ea:d5:7e:2d:25:f2:78:c1:44:22:14:
                    37:75:b5:1c:f8:10:fb:51:1d:61:7f:59:5e:47:7c:
                    61:23:14:f0:d8:24:2a:97:89:c2:e8:9d:89:2a:f5:
                    97:de:63:f5:8b:0c:52:16:e0:7f:e4:bc:7f:2b:ad:
                    aa:9e:04:02:8c:09:3a:f8:3a:e9:81:86:28:09:a7:
                    c2:b2:13:1a:48:5a:41:78:80:12:2f:1a:0d:3a:11:
                    c3:92:9e:c3:1a:49:de:99:2c:99:c7:dd:15:cb:0c:
                    03:b6:ec:33:43:ed:92:15:c9:7f:cd:22:d5:2b:bb:
                    ad:0e:38:54:9b:0d:44:12:38:1b:36:d0:46:fd:22:
                    ba:f6:20:41:b7:d7:13:bf:8c:c9:18:16:59:e3:2a:
                    f3:aa:de:b2:e3:32:9d:c6:0e:94:8e:67:2d:b3:a6:
                    3e:67:5a:1e:52:1b:3a:dd:5a:9e:c4:b3:40:d9:67:
                    d1:b8:48:97:f7:6c:5e:72:5b:53:2f:a7:43:28:a6:
                    a6:55:ee:22:1c:ec:c5:4d:cc:44:0d:89:fc:1d:38:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A8:AF:3E:7D:92:E1:A8:C4:FE:51:18:52:99:3B:A2:94:A5:EA:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.8.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:58:d1:cb:b9:90:e0:fd:f4:f1:21:84:42:2c:5b:f0:67:9d:
         03:8d:68:32:68:d3:70:e3:83:a3:c0:4c:a5:9e:93:1f:96:be:
         1a:f0:df:08:c2:cd:64:d8:ae:90:2e:f5:47:5e:e1:c8:85:90:
         b6:a2:76:30:ef:dd:84:44:68:90:87:2f:4b:66:16:94:59:65:
         7d:0f:4f:ba:fc:8d:44:3e:cf:0c:79:81:12:71:79:00:c5:c9:
         59:d5:9d:04:54:8d:67:69:e7:a7:5b:b8:e4:24:09:e9:2c:46:
         c2:41:13:45:f4:9e:8e:a1:ba:6b:fc:d7:1b:84:0f:fa:fd:0b:
         1f:cc:67:e2:23:ac:33:3d:87:63:27:a9:5e:c8:c3:7e:a0:ce:
         ff:bb:75:2b:26:8f:92:f6:bf:9f:08:2d:c2:81:d7:39:0d:13:
         f5:8c:23:57:ea:53:ec:61:9e:0d:8d:8b:70:4d:67:3f:15:df:
         92:2a:d0:01:06:8f:34:7b:17:0c:9d:8b:a9:29:4a:09:0f:58:
         3d:bb:c7:99:66:c1:e4:ee:05:6d:73:ab:27:b4:79:97:8a:eb:
         54:d0:52:ac:5c:b8:78:b1:9e:99:a7:67:e1:97:4a:06:85:87:
         44:ce:39:d4:e9:dc:81:dd:1b:2e:b2:f0:4f:17:e1:1c:95:02:
         63:13:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:28:48 2026 by rpki-client