Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eb9f6f7-9b8a-3cfc-b9b6-96eb028bda9a.roa
File:                     0eb9f6f7-9b8a-3cfc-b9b6-96eb028bda9a.roa (raw, json)
Hash identifier:          don9nlvFGxAbuqRx2ohbYhuivGBw7G+v7BFRFtd9Y+E=
Subject key identifier:   3A:7B:31:DC:1D:56:FB:49:9D:3A:9C:9B:0F:B1:7E:64:04:BF:25:AF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4972CA9376375F34BDBA9D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eb9f6f7-9b8a-3cfc-b9b6-96eb028bda9a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     43515
IP address blocks:        34.1.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ca:93:76:37:5f:34:bd:ba:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=01571c6e-c002-4825-8a49-5babe72860bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:66:89:7a:d0:13:17:82:cb:8e:f7:1b:84:
                    ce:71:2c:ee:ec:5b:59:67:cb:08:ed:56:db:93:85:
                    a6:cc:2c:8a:f0:1a:45:99:ad:db:44:e5:5b:39:4a:
                    14:ea:32:9b:fa:03:23:11:1d:11:54:22:76:6c:81:
                    e4:cf:08:24:90:66:ff:a7:25:91:59:03:b9:a1:8f:
                    53:dd:07:6b:49:0e:ca:c1:5b:e9:4a:fd:f3:e1:eb:
                    dc:8f:b2:a2:cb:e1:5d:8a:5e:4b:aa:02:ba:2a:6c:
                    dd:e4:7c:fe:86:74:0e:61:e2:db:3a:74:db:09:97:
                    64:ea:92:39:c1:ff:0f:a5:79:1d:75:30:11:ed:b9:
                    8f:c4:58:b6:b6:d4:2f:4f:1e:64:a1:88:27:cf:f9:
                    8b:f9:1a:d0:d7:b2:30:4b:57:ff:2f:4f:49:2f:22:
                    bb:51:63:ce:37:51:22:5c:0a:bb:12:e6:43:64:52:
                    5e:b8:d9:7b:d7:fa:b6:f4:90:95:55:4c:fc:38:9c:
                    84:81:b9:37:a6:fe:44:3f:31:3b:11:a2:0a:d8:9a:
                    c1:d1:8d:ad:d7:a6:07:b4:83:6c:69:51:c5:85:f9:
                    26:d2:db:52:b2:38:1e:57:05:46:3a:31:3f:ed:5a:
                    e3:37:fc:5f:28:fa:82:80:3b:a4:ac:d2:f5:e8:93:
                    a7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7B:31:DC:1D:56:FB:49:9D:3A:9C:9B:0F:B1:7E:64:04:BF:25:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eb9f6f7-9b8a-3cfc-b9b6-96eb028bda9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0a:cc:47:a1:dd:71:61:26:b5:da:f0:fa:7f:27:13:f2:7c:
         c7:27:bb:7f:76:fd:a8:8b:08:24:ee:fa:78:e3:dd:fb:85:0b:
         3b:cf:ec:bd:20:6d:be:99:c1:66:d9:81:1a:7a:66:36:80:c9:
         7b:57:07:99:25:f7:85:d4:cc:c9:fe:17:40:4d:87:84:ab:3d:
         85:0e:27:18:68:8c:6d:78:72:02:1e:8e:22:fe:74:1e:07:6f:
         78:21:da:bd:09:e6:72:9c:ed:0c:1d:b9:79:8c:f0:3f:57:a8:
         05:14:1c:4a:04:f8:04:6c:e8:39:d3:15:8f:d1:63:84:d5:a9:
         34:a9:fa:98:e8:a6:ca:f6:43:9c:15:3b:d5:d8:2a:ac:c9:80:
         e1:39:93:40:fa:5e:7b:3f:bc:94:5a:f3:e4:d2:26:20:c0:a0:
         c9:03:90:bf:2e:38:90:23:50:19:17:8a:6b:e7:61:a2:48:eb:
         e1:05:11:07:73:be:13:95:83:ee:98:80:70:4c:2e:1d:d0:41:
         64:05:34:7f:87:66:56:19:1a:99:1f:21:22:f8:60:c5:41:0c:
         94:23:7e:ed:ff:d6:dc:44:85:81:b9:39:7b:3f:52:dd:57:d9:
         3c:8d:52:5a:c2:c4:b0:ec:67:d7:8f:e5:65:0d:78:93:4c:b2:
         c3:c3:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:41:25 2026 by rpki-client