Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b416fda-2746-3c3f-a23e-8b6a139fee4f.roa
File:                     2b416fda-2746-3c3f-a23e-8b6a139fee4f.roa (raw, json)
Hash identifier:          2nzUFOFZ6zqMHHPmp6AKu4eqqjEbTIBtBW5StJgqwQE=
Subject key identifier:   66:D1:53:4F:69:C8:F5:03:51:BA:4A:F9:73:49:26:87:F4:54:28:40
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F698D6D818191359438F33A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b416fda-2746-3c3f-a23e-8b6a139fee4f.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     15169
IP address blocks:        34.190.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:6d:81:81:91:35:94:38:f3:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=1dcfbd64-817a-420f-ae7a-466c508e1de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:cb:37:3e:1e:cc:76:72:d7:db:15:f4:e6:
                    a9:b9:85:9a:8c:8d:52:9b:a8:d5:96:e2:70:42:0d:
                    3a:64:1d:ec:16:18:d0:30:d9:2e:09:c0:fe:68:c5:
                    b8:f6:b5:75:f0:ac:7f:6d:5c:1a:c4:a9:ca:fd:42:
                    a3:ac:61:c9:72:57:41:64:75:e2:db:18:8d:4a:c3:
                    c9:67:52:71:15:de:1f:30:f6:a5:8b:bb:b4:70:5f:
                    b6:0f:37:98:69:3c:ba:75:f6:98:08:6e:d8:4f:99:
                    85:5f:a3:0b:ea:26:d1:31:1c:5e:2e:c5:a7:65:b2:
                    4c:29:76:23:6e:cd:25:03:d0:90:31:e9:75:df:5e:
                    e4:f0:50:33:68:60:40:2b:c8:71:1c:66:ec:dc:7a:
                    fc:55:fe:05:5b:80:2c:e8:40:d5:84:5e:0d:24:07:
                    12:c7:7c:6a:6f:9e:a8:c9:42:b1:b6:0d:77:d9:7e:
                    f8:59:d3:61:1b:eb:2c:ef:04:8e:bf:a1:a9:26:cd:
                    2e:2b:60:bd:92:b1:1f:a5:14:e1:66:86:26:3b:3b:
                    db:88:48:d5:34:b5:ca:ce:ac:e1:a7:63:ee:e1:f2:
                    15:11:8a:99:8d:34:72:b2:7b:59:0f:5b:cd:fd:64:
                    f3:79:c9:43:8e:17:03:e9:18:b7:c0:08:6c:85:fe:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D1:53:4F:69:C8:F5:03:51:BA:4A:F9:73:49:26:87:F4:54:28:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b416fda-2746-3c3f-a23e-8b6a139fee4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:06:39:3b:df:0a:09:d2:82:95:c3:e2:dc:65:cc:9b:a5:e3:
         e4:0c:1d:6d:7b:79:71:a8:6b:d9:e9:2d:91:32:f6:52:17:e8:
         29:75:3c:57:a5:85:cd:b0:08:2f:c5:e9:af:b8:63:9b:bf:fd:
         4e:3a:14:e6:81:47:e0:54:0b:3f:4b:9a:61:92:4d:0a:19:4f:
         57:bf:b4:7a:33:ae:6b:8e:10:fb:fb:15:32:ac:84:f3:f1:6c:
         b5:a7:31:6f:96:d2:bf:5a:2e:3c:b7:36:92:ee:8e:cd:40:5e:
         b5:37:14:97:a8:5c:02:6e:41:f3:ab:d2:c1:9b:5e:ca:96:9f:
         de:79:cd:35:9c:43:68:41:9f:e4:59:78:35:e3:f0:99:1a:89:
         ba:ed:63:a0:dc:bc:7f:dc:00:5f:d1:c9:ce:8a:51:cb:2c:8a:
         fe:06:76:e5:6c:39:e7:ee:4a:a3:20:3c:42:a7:db:91:a9:a7:
         e7:0d:dd:d6:5f:6a:c3:a1:5d:9e:66:08:fc:d0:e8:b7:c7:5d:
         88:e1:2e:6b:47:63:68:53:4a:51:8e:d1:f1:8e:e7:71:4d:c8:
         dc:64:6e:97:36:f0:71:44:61:e4:da:c8:2f:4c:5a:af:4c:4f:
         70:64:0f:cd:fb:44:a6:67:ca:07:ac:5f:a9:12:2f:57:21:d2:
         9c:9f:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:33:14 2026 by rpki-client