Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b154f13-23ec-3ef8-8e48-5df2deeccffe.roa
File:                     5b154f13-23ec-3ef8-8e48-5df2deeccffe.roa (raw, json)
Hash identifier:          PKLM34X6uBgO+6VS4e18PVZC+Xf/bFfQRhK+EhPIs0M=
Subject key identifier:   3E:FA:2E:C0:D0:A1:FC:D0:FB:ED:F8:59:77:6C:B3:05:4F:6F:8B:24
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E08665100714916722B1B959C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b154f13-23ec-3ef8-8e48-5df2deeccffe.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.160.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:51:00:71:49:16:72:2b:1b:95:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=abfaf4fd-eda9-4054-b026-a041a68197d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c4:f6:96:7f:74:a6:d4:91:41:27:1d:a1:71:
                    5e:76:15:e5:60:49:42:6c:a3:9e:91:09:3e:9e:14:
                    e7:a7:a2:a3:e4:73:0a:45:82:ef:fd:9f:37:23:b8:
                    87:45:07:9c:90:f3:31:d2:dc:b2:5a:78:20:44:19:
                    67:83:9c:ec:77:a1:96:2f:7c:54:01:fd:ee:10:eb:
                    ef:92:b9:b8:46:d8:b0:8f:e4:c1:a8:5f:07:0e:20:
                    ca:15:15:7a:eb:8c:cf:bd:77:ba:53:01:c8:54:6d:
                    5c:fe:ed:99:b9:67:69:e3:98:97:9e:68:09:f6:61:
                    fd:94:ce:5b:f0:c3:8d:47:9c:fc:b9:d1:03:3d:db:
                    99:b1:e0:eb:0f:11:89:73:7a:c4:f0:17:1d:f7:0e:
                    f5:26:95:43:3d:30:dd:a3:f2:71:9b:fd:85:08:de:
                    aa:f2:b0:09:fc:ed:8c:15:fa:b4:a4:b2:bd:de:61:
                    b5:bc:56:cb:8b:60:b6:d6:3c:61:48:8d:37:45:94:
                    3e:c4:9a:5b:97:ec:4d:bc:b9:ce:c4:d3:50:61:4d:
                    57:c3:47:9c:f6:49:7f:93:b9:27:8b:ac:2a:ae:08:
                    d2:aa:1c:c2:15:77:52:fe:32:49:ba:a3:a8:e2:f4:
                    63:83:fc:18:95:06:4d:3b:42:20:c1:78:ba:d4:47:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FA:2E:C0:D0:A1:FC:D0:FB:ED:F8:59:77:6C:B3:05:4F:6F:8B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b154f13-23ec-3ef8-8e48-5df2deeccffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:ca:6f:7b:b9:db:af:7c:af:0c:23:a1:ba:4e:39:c7:67:
         f9:94:b6:11:b2:8e:95:03:0d:67:2d:5d:68:c5:4a:26:2d:c2:
         7e:b0:93:d4:0b:e4:70:63:a3:28:90:68:a6:25:ae:d9:94:f9:
         32:e3:4f:e2:4e:fe:0c:46:d0:5a:b3:ec:05:21:40:66:b4:ec:
         b9:88:63:f4:3a:17:74:72:c8:e5:54:95:f5:34:bb:08:4b:4b:
         e4:89:a2:13:e7:d2:95:63:1d:ff:53:a8:a2:e9:3e:79:d7:2c:
         d5:ce:33:56:40:8f:73:e7:39:f4:11:10:62:a0:bc:d2:d5:23:
         ca:b4:41:bb:f0:64:cb:7e:5f:c8:af:e8:33:5c:6f:94:de:59:
         45:96:97:c2:b8:96:a5:60:59:75:47:15:71:9f:ec:65:79:ce:
         94:e8:12:83:3e:76:bf:f3:6f:6a:17:fe:ec:56:51:bc:60:5b:
         51:d3:14:eb:3f:aa:1f:7c:f4:5d:2e:5c:7a:6f:52:91:2c:83:
         84:ae:26:03:71:bf:dc:81:48:f5:a8:a9:f4:fb:7a:83:3b:f4:
         17:66:a9:dd:87:f8:bb:d7:80:e7:fc:92:09:45:e8:5a:aa:e4:
         ca:fe:9c:12:c2:f1:19:2a:03:fd:b4:dd:c0:db:0f:37:5e:76:
         48:a1:cc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:59 2026 by rpki-client