Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/387d30a3-4dd2-329e-a92f-df9f5e522244.roa
File:                     387d30a3-4dd2-329e-a92f-df9f5e522244.roa (raw, json)
Hash identifier:          gByKe3MYZgFUwLYNFztBZoukS52YwVbPBUhx02uKmSU=
Subject key identifier:   B7:9A:2B:F4:09:28:75:0E:DB:7B:67:10:16:87:48:92:E8:DA:A4:AE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA7A05BDF1F69567B5C613D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/387d30a3-4dd2-329e-a92f-df9f5e522244.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        34.104.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:5b:df:1f:69:56:7b:5c:61:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9b05e29e-9064-4bdb-9c13-b6f197775960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:dd:c9:e0:0f:49:d7:c0:38:4b:b6:99:de:
                    32:ef:80:91:04:1c:ae:34:ca:85:5d:6a:63:65:e0:
                    f7:2d:a0:c4:63:b9:ad:1b:f0:6e:61:f1:da:63:66:
                    ef:31:62:47:e0:8e:09:00:65:f3:fd:26:38:3d:47:
                    d3:4d:60:a5:d3:e5:59:d1:05:5f:82:6c:05:24:b5:
                    70:1c:77:69:6d:a0:0a:26:5f:10:7d:4c:69:2d:2e:
                    55:5b:ee:23:41:ec:4f:4b:35:7a:52:32:50:33:18:
                    62:16:6e:86:2c:e2:a8:d7:19:d8:df:ab:26:31:b0:
                    9c:c9:9d:10:59:e8:5c:18:0d:21:28:0f:25:d1:a2:
                    f6:c4:bd:2d:69:66:32:92:76:dd:a3:11:e3:02:c1:
                    3e:aa:03:fc:62:9a:fe:15:f2:22:28:01:c8:85:31:
                    d0:bf:52:25:ad:38:a5:42:7a:98:9f:bd:f7:85:0f:
                    54:27:bb:2e:98:9c:dd:49:c1:08:af:f0:23:6c:c6:
                    90:bd:ca:9f:62:f4:45:19:e6:bd:3d:71:50:7b:dc:
                    7c:ab:fe:a2:be:0b:04:85:41:27:95:64:6f:15:9f:
                    0f:9a:3d:6e:72:01:06:f1:56:c0:cb:45:ac:37:5e:
                    d8:6a:b3:a6:96:81:f3:cd:34:b7:0a:bd:a4:e8:34:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9A:2B:F4:09:28:75:0E:DB:7B:67:10:16:87:48:92:E8:DA:A4:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/387d30a3-4dd2-329e-a92f-df9f5e522244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:df:bc:f8:ab:9f:67:a2:74:ac:58:72:72:09:ae:ac:34:da:
         41:46:ea:f9:80:5e:a0:76:93:ef:1b:be:cc:6f:a8:02:44:bb:
         28:a5:95:01:5f:5f:86:84:a8:0b:cc:d9:1e:fb:00:df:51:b6:
         5b:ef:2d:6d:95:0b:31:35:3e:f9:87:13:75:ea:66:45:4c:e4:
         c9:d2:b1:ab:74:53:fb:de:c5:33:4a:6a:c8:d1:86:a0:78:a7:
         93:8f:4f:32:c0:27:bf:6a:4a:bb:28:af:c5:a9:c4:e5:86:b2:
         5a:91:7c:e8:1d:73:c5:37:7b:ae:75:07:b9:29:73:aa:2a:77:
         01:5f:dc:4d:d8:6e:0c:df:6f:26:84:47:7f:dc:c8:96:07:ae:
         2d:6c:43:70:fb:0b:fe:ba:7d:df:01:ad:4b:43:73:1c:e8:a5:
         ed:a5:e5:6c:18:5b:85:1c:4b:9a:a7:43:28:dc:1c:52:35:f7:
         79:7c:6f:30:26:7d:7c:3d:17:16:fb:e8:9f:ba:72:a3:da:92:
         d1:ef:28:75:d4:54:d2:b3:c2:57:28:f4:af:00:d6:82:50:43:
         3f:b9:22:be:d7:ad:f6:10:d8:7a:dd:e5:ff:8f:2c:81:e2:3b:
         bf:9d:07:91:7d:6d:be:2c:ce:20:82:3d:1a:7d:10:ed:5e:68:
         d4:88:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:35:17 2026 by rpki-client