Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01aa2b6d-dc08-3885-b671-bb279554db24.roa
File:                     01aa2b6d-dc08-3885-b671-bb279554db24.roa (raw, json)
Hash identifier:          4tQ8zBZ88YP15LXyTvaelU207KnJaBaqLRZ7/EQg0v4=
Subject key identifier:   27:0E:E5:4D:04:57:6A:0C:D2:B8:E1:E6:94:E7:EF:FA:17:BF:2E:13
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E086636C71506CB19192D13C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01aa2b6d-dc08-3885-b671-bb279554db24.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     19527
IP address blocks:        34.2.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:36:c7:15:06:cb:19:19:2d:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=9d3df608-e559-448d-a505-d0e77332c3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:15:5e:85:5a:58:2b:f4:e5:c2:69:63:15:ce:
                    b7:e1:43:8e:e1:9e:01:80:ae:b7:3d:d2:d9:4f:d1:
                    70:b5:6a:a5:d9:46:a8:ec:98:07:cf:80:85:15:0c:
                    56:ea:8b:d6:18:cd:e2:0d:3b:9b:b7:12:d3:32:88:
                    52:99:ed:73:f1:c7:fc:7c:2d:d8:a3:80:98:ac:8b:
                    7f:04:fb:9c:56:bc:74:92:88:6d:0e:9c:6f:3c:af:
                    23:e1:d1:c0:1c:92:b0:b6:9c:ee:e7:ff:f1:59:4c:
                    9c:9d:6e:2a:73:92:e8:35:1c:cf:66:b2:22:7e:b2:
                    fa:f1:1a:db:e4:5f:8f:cf:00:e2:bb:b4:09:aa:e7:
                    d6:87:aa:be:29:2d:74:25:4f:18:ef:49:8c:ee:0d:
                    ec:4e:7a:60:3c:6d:f5:03:7d:b4:6b:5a:ac:f3:92:
                    16:8f:9e:dc:68:07:dd:6c:c9:13:41:34:50:51:91:
                    ad:fb:be:36:b1:bb:22:e5:84:16:73:91:b9:44:fb:
                    9d:e2:31:24:76:7a:f7:13:db:64:af:a9:71:95:44:
                    f6:8e:0b:07:74:89:06:1c:59:92:51:a8:56:5a:f7:
                    7d:ea:9b:9c:9f:a4:5c:6d:6b:5c:26:27:08:87:38:
                    96:08:78:6a:cd:5f:f9:61:98:e2:2f:c4:f9:b8:e5:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:E5:4D:04:57:6A:0C:D2:B8:E1:E6:94:E7:EF:FA:17:BF:2E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01aa2b6d-dc08-3885-b671-bb279554db24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:f8:0f:20:2f:e8:b9:bf:16:57:34:a6:1c:6f:ab:0f:a7:
         c3:d1:d0:77:b0:02:e5:d3:27:40:29:be:93:29:b0:10:4f:20:
         c7:47:c3:c8:33:4d:31:5f:be:e0:d8:53:38:f0:eb:a1:06:4d:
         a1:d4:bf:8a:32:1b:10:40:ca:66:d3:8a:61:68:37:b6:73:6a:
         32:57:d7:60:fe:20:d2:20:33:21:5a:41:31:44:55:a7:5c:c1:
         32:7f:53:04:29:2e:d4:22:b0:a5:62:38:7c:96:5c:92:5b:ca:
         4b:b6:5a:74:6b:77:98:69:1d:11:c7:a5:c3:37:6d:1c:f6:ea:
         a5:d0:46:b9:57:42:b1:45:df:b1:bd:d4:29:95:a6:71:e2:84:
         91:2b:96:62:29:d1:2f:99:5d:fc:09:37:71:e9:3e:7c:fb:c4:
         58:9a:b9:7b:a5:b4:9f:60:67:b9:28:53:45:72:1a:5d:99:f4:
         e2:0b:fd:e1:73:12:fb:98:b6:6e:cb:0d:85:6e:a6:2d:7b:8c:
         df:f5:bc:23:9c:88:6d:f4:bb:f7:13:97:47:7a:b1:f6:3f:4c:
         1b:28:ab:86:c4:ee:e3:3b:ca:f3:7e:0f:fe:d0:b0:45:b4:c7:
         e5:be:01:54:77:9a:f8:7c:4e:71:5d:2e:f4:d5:19:3b:a8:8a:
         f5:1a:a8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:02:19 2026 by rpki-client