Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d4c4c64-022e-3e37-bb9a-81e4b109c052.roa
File:                     3d4c4c64-022e-3e37-bb9a-81e4b109c052.roa (raw, json)
Hash identifier:          J5WzwTSZ/18kjqCrQst5krUCJ7Rh4cgHkVGpDdJvPSA=
Subject key identifier:   C8:41:61:1E:2E:75:52:D8:1B:34:6F:6C:77:A6:8F:09:30:3A:1C:F3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E086618202C06303A9751E340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d4c4c64-022e-3e37-bb9a-81e4b109c052.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.166.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:18:20:2c:06:30:3a:97:51:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=ff51f29b-d217-4cbc-81c4-de5e783a7f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:34:c4:1b:63:9a:f6:79:84:72:44:04:67:
                    b8:93:b0:b9:2e:1e:b8:95:0a:bb:fe:cd:dd:d8:e1:
                    d1:b4:c2:a0:50:d6:19:29:e3:0b:c4:89:f8:c3:d2:
                    88:a0:57:74:2a:b7:41:9f:77:40:db:ed:13:b8:9e:
                    53:72:99:ce:9c:ad:c6:a8:89:32:c0:a1:df:19:02:
                    82:17:33:2c:bc:a3:d0:97:69:8c:01:6a:44:a1:de:
                    6c:40:b3:b1:82:2a:cf:08:56:0f:65:05:c1:69:44:
                    9b:e4:57:5d:79:32:29:a6:67:b2:56:b7:1c:f1:34:
                    3c:92:2f:dd:cb:f9:ea:91:d9:b1:57:28:40:93:8c:
                    12:2f:d2:a2:45:e9:14:9c:a2:15:c4:97:09:3f:6d:
                    0d:5b:31:21:d9:e0:75:99:4e:23:00:44:e5:68:f0:
                    24:f2:ea:aa:0d:b5:07:76:2e:c8:c3:cb:5f:0f:e3:
                    de:95:a1:f7:a6:73:b2:1d:37:ea:e6:96:e3:63:b5:
                    37:9d:67:0f:a9:72:6a:6b:b6:e6:09:e6:18:0c:55:
                    19:c4:7c:c5:1c:fb:8f:67:b5:6f:2e:cb:c2:cd:40:
                    83:5f:b0:84:72:78:fa:4a:2e:bf:89:1d:6d:e4:fc:
                    0c:47:9f:b0:d1:63:eb:94:ed:b3:4c:f5:cd:81:92:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:61:1E:2E:75:52:D8:1B:34:6F:6C:77:A6:8F:09:30:3A:1C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d4c4c64-022e-3e37-bb9a-81e4b109c052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.166.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:77:30:2c:be:8e:7a:f6:a1:4d:51:1b:e4:1d:f3:11:ac:27:
         bf:3b:3e:83:72:4d:d1:87:ac:c3:40:c7:6a:29:3b:a0:67:79:
         6e:19:95:d2:8b:f3:ae:2a:9c:b5:a1:9d:bc:2b:71:9d:38:84:
         19:7b:5f:17:34:71:3b:3a:24:f3:c0:bb:dc:34:b3:2b:e0:c2:
         7d:aa:3e:60:4e:19:d6:4a:8d:8d:8d:a4:32:da:87:f9:de:8f:
         e5:4e:b0:52:98:a8:83:32:18:81:9d:0f:0d:e5:fe:61:60:98:
         0d:73:ab:96:65:ab:f3:ba:94:d1:1a:f6:f0:73:d0:eb:7b:ae:
         89:c7:e9:6f:99:a9:cc:e0:37:fd:4b:4b:c2:de:c2:26:7e:b2:
         5a:86:9e:af:ae:cf:d9:b3:0c:ad:4f:69:db:19:76:e2:4f:ce:
         ad:d4:34:01:05:97:c1:a3:1a:4b:f2:e0:f1:87:1c:f9:41:b4:
         f7:59:66:3e:90:86:4c:db:91:73:bd:16:95:1b:1b:09:1f:e9:
         43:87:b1:82:fc:02:b0:ae:98:ac:cf:66:84:9a:ae:5f:89:aa:
         45:78:f3:5e:6c:08:1e:32:f9:96:72:4f:3d:ec:e5:5d:18:a8:
         9b:fa:ed:11:78:fa:10:b9:6e:aa:ff:7f:dd:04:6a:6b:85:1c:
         81:ac:cd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:08 2026 by rpki-client