Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d2cf97c-be54-3e0b-ac48-08ca29bed847.roa
File:                     2d2cf97c-be54-3e0b-ac48-08ca29bed847.roa (raw, json)
Hash identifier:          yTQj0lSlyhjxOPJRx0pGDBxvv7mgS0qBh3RhUZ0nQ+A=
Subject key identifier:   E0:8E:92:D1:B6:D4:61:8D:E1:BB:3A:02:62:EB:16:39:4B:C3:EF:65
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E11B42DDEE26D8E245AEA3740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d2cf97c-be54-3e0b-ac48-08ca29bed847.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     396982
IP address blocks:        34.162.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:2d:de:e2:6d:8e:24:5a:ea:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=04ed1f34-b644-4d9d-b224-a9a540993950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:85:94:23:27:de:0e:64:9a:48:c5:2d:d5:
                    70:08:ea:df:8e:9e:eb:9d:bb:83:bc:6a:25:9a:0f:
                    2b:ad:0e:60:8a:5f:7b:6f:3e:a6:63:ff:cb:49:3c:
                    f7:36:43:1e:c9:37:c7:48:1c:aa:2d:ac:4d:33:70:
                    28:cb:17:9d:22:90:af:48:77:06:37:6c:01:ec:6e:
                    ad:8c:d4:6a:48:80:8c:8c:c7:67:50:0a:c3:bd:3f:
                    bb:6d:b3:1b:0c:11:dc:73:bf:44:b8:f1:94:00:23:
                    23:c8:c0:e3:a1:16:58:89:42:dd:6d:fd:88:c5:30:
                    70:7c:65:1a:29:6b:b7:e5:50:0c:c0:02:4e:fd:30:
                    24:79:4c:94:27:28:18:72:f3:2f:bb:32:0e:bb:91:
                    0d:83:b7:2e:28:48:8a:52:df:98:28:12:15:61:00:
                    6c:99:ac:8b:38:6e:5d:06:25:df:cb:d2:27:f9:c1:
                    08:c0:04:67:5b:28:7b:d7:ea:fb:ea:00:39:b7:fa:
                    2a:31:30:76:f6:f0:16:56:a7:df:5f:60:cd:70:43:
                    69:c8:6c:35:fa:22:3c:e5:49:db:49:ec:1a:26:ba:
                    c8:89:c6:cb:37:84:16:43:d3:de:0d:bc:2f:d1:a8:
                    d5:9a:d8:c3:f0:fc:b0:99:30:45:2c:6e:9f:63:2a:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8E:92:D1:B6:D4:61:8D:E1:BB:3A:02:62:EB:16:39:4B:C3:EF:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d2cf97c-be54-3e0b-ac48-08ca29bed847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:11:7c:b9:85:57:a9:ef:29:f5:93:46:88:18:77:48:e6:5e:
         65:b8:e5:70:a8:e4:2b:9d:80:70:99:fa:4b:e6:bd:db:59:cb:
         db:b8:f6:f0:34:e7:27:c4:4b:9d:8e:cb:b3:36:3c:68:07:6c:
         87:60:10:0f:1b:9e:68:e9:60:03:d6:a9:fa:1d:e4:75:bc:40:
         48:f8:a0:57:4d:28:df:9b:94:91:0e:51:1c:20:1a:36:8d:45:
         2e:51:fd:4f:89:b3:3a:de:af:bf:a7:72:f2:2c:7f:ef:2d:31:
         27:b6:be:fe:08:cb:46:fc:5e:ac:00:50:7b:f4:f5:72:ab:ca:
         fd:b9:46:06:fc:5a:45:81:4e:8a:29:12:d6:e4:f3:83:2b:2e:
         67:a7:98:ee:16:33:c3:0b:a1:d4:5d:2d:ef:01:0a:b5:73:30:
         f3:ca:93:12:1e:2c:3c:19:98:03:c0:ee:c4:4b:7e:15:17:2e:
         4c:f2:c5:e6:05:21:c6:a9:a6:20:22:8a:3a:7e:b8:cd:ac:29:
         ef:1d:2d:4f:c4:fd:f2:f5:2f:ab:b5:6f:fe:12:b7:b0:72:9c:
         8d:f0:33:e1:4b:80:b9:fa:8f:40:68:b2:80:1e:99:53:54:dd:
         5e:c6:f3:69:36:2a:62:9b:9e:77:32:ce:5f:7b:9c:bd:ab:e6:
         44:fd:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:49:23 2026 by rpki-client