Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa
File:                     4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa (raw, json)
Hash identifier:          zfzkEhX2EtrvfmAfKZpF0dHdl13Oy5a/plXbxB5MR24=
Subject key identifier:   88:06:E1:40:4B:9A:07:E7:67:28:C0:F8:8F:57:DB:65:D4:F2:2A:5C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CEA5D039C602182E1B7AC8680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        34.2.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:03:9c:60:21:82:e1:b7:ac:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=ae607f31-f951-4938-8eac-a0ce5b70c6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:bc:08:b6:f9:4e:23:6c:45:40:20:82:08:
                    ff:f4:8d:98:4a:52:05:af:c9:e6:ec:9b:d3:c1:f6:
                    9a:7f:50:f2:12:8d:fa:65:a9:49:b9:b8:56:4a:a8:
                    69:66:9a:56:e1:38:53:52:2b:f6:30:cb:5b:32:cd:
                    24:9c:00:47:0e:80:1a:95:53:d2:bf:da:d3:34:63:
                    18:f1:37:e1:d4:a6:fe:53:2a:09:ad:ab:89:c6:a3:
                    8c:c5:ff:dc:6b:ff:bb:8d:51:40:81:21:fa:96:9c:
                    b1:78:2a:ef:3d:68:d6:c9:08:1b:af:5f:49:c8:97:
                    f5:c6:dd:0a:ae:bf:37:fe:84:74:aa:47:61:57:04:
                    51:98:f1:92:cf:fd:12:50:26:b5:11:32:72:9a:57:
                    d0:f8:ce:4d:c5:5b:90:04:98:b7:e5:80:4b:16:19:
                    63:5e:23:71:f4:75:36:50:d4:7f:26:c0:9a:df:0a:
                    e8:4d:a2:72:d2:b1:a4:e6:40:d8:42:b7:78:0b:cc:
                    c9:5d:77:a9:7e:cb:48:b5:c2:f9:b9:5d:4a:3d:92:
                    d4:4a:bb:e1:14:96:98:e0:03:7e:e0:9d:23:df:d6:
                    20:26:17:ea:36:a6:85:17:dd:7d:d3:94:9a:53:7b:
                    bb:17:6f:c5:16:ac:82:d1:9b:35:cb:c4:52:b4:7f:
                    53:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:06:E1:40:4B:9A:07:E7:67:28:C0:F8:8F:57:DB:65:D4:F2:2A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eacd1d6-1b0b-3aa8-888f-aa80d53fadca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b6:87:bf:1b:30:f2:d5:7d:ab:19:d0:b6:09:e0:57:05:66:
         da:a8:8a:c8:f8:a2:86:b1:41:25:ea:a0:18:c3:ec:32:15:f1:
         62:b1:50:4d:54:52:13:59:24:fd:c0:21:05:84:6f:6e:0a:6c:
         89:99:22:10:cb:09:f7:06:0c:46:1b:7d:ec:6b:da:b3:88:94:
         96:e8:e6:3c:75:98:34:2c:22:a9:20:f6:c9:25:31:46:a1:67:
         4d:26:a0:2c:9e:c8:d1:06:c9:37:4e:bc:19:ef:c2:7b:26:47:
         90:f2:3e:90:8e:97:1c:89:ad:e4:25:6e:68:29:ba:9d:41:56:
         f6:fd:19:b5:9a:9f:af:7d:42:a1:04:91:7d:dc:c3:c1:74:51:
         9e:ea:83:82:7a:95:f7:ae:fa:1b:2d:7a:b2:76:3e:c5:f6:de:
         53:b7:cf:53:a1:1d:12:63:d9:8e:97:04:b6:c2:8d:49:03:90:
         60:db:77:33:7b:9f:d9:84:0a:34:78:da:f4:b5:5b:71:83:d4:
         f3:75:8b:df:34:9f:ed:ae:ec:e9:01:02:55:80:62:0d:ba:e4:
         fc:d7:71:70:60:20:9f:de:12:9d:58:b3:74:fa:f1:18:d6:5a:
         78:8a:70:25:ba:2f:a6:14:cf:46:17:a9:32:c1:23:32:61:c3:
         32:df:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:07 2026 by rpki-client