Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa
File:                     60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa (raw, json)
Hash identifier:          qDKLfBQR07ftELGvSvUUpNj+qAkvnZD8+S5BP6KuXsQ=
Subject key identifier:   57:32:D4:E3:C0:29:8E:B3:C3:94:FE:EC:9C:65:6F:B2:82:AF:70:8D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA787B03D4A1428D83E34E780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     43515
IP address blocks:        34.191.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:b0:3d:4a:14:28:d8:3e:34:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1c8aa748-f081-4d2a-b5ac-a331a4f34186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:95:40:f3:fb:e8:aa:99:c2:c9:5d:0b:0f:
                    1c:9c:74:81:94:a6:3a:ce:cd:ea:5b:c8:00:13:2f:
                    22:9d:82:c6:9f:6f:04:1b:44:5c:05:3f:bc:36:4e:
                    6a:0e:cd:22:dc:7d:93:83:33:33:94:ef:32:22:c7:
                    29:1c:1f:60:c9:ad:2b:29:58:b2:78:62:98:4d:5f:
                    7b:52:c2:b3:da:3d:3e:09:4a:10:31:f1:3b:ea:9d:
                    65:5a:52:2e:54:e1:53:97:56:62:ad:71:81:7b:94:
                    d6:82:f8:4d:76:3c:5b:b5:fc:9c:25:de:0f:c8:c7:
                    69:78:04:fb:2a:ca:e2:a7:7a:db:21:dd:2b:86:6f:
                    e1:42:57:57:71:fb:2e:ee:07:73:3c:f8:09:89:a8:
                    7b:62:93:5e:2d:26:d1:57:54:5b:ec:c5:48:e0:65:
                    7b:a9:3b:32:c6:8b:d3:3b:5f:ea:f0:70:5d:51:64:
                    73:04:f0:25:2f:e7:a8:06:1c:6f:d8:3b:9b:0f:3e:
                    e7:63:94:e2:68:34:81:e2:72:cb:08:7f:ab:4d:44:
                    1c:b2:a1:c1:57:76:e6:a5:c1:de:4f:70:96:2e:74:
                    5f:df:b5:fd:a3:e7:0a:7d:b3:3f:38:1a:87:76:89:
                    0d:69:42:0f:74:44:a1:f4:48:57:a1:6e:b7:6c:ff:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:32:D4:E3:C0:29:8E:B3:C3:94:FE:EC:9C:65:6F:B2:82:AF:70:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60db7a40-c5c9-3024-963e-ac5d64ea4eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.191.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:3a:a8:f3:4e:44:9a:65:9c:db:fd:7b:bf:4e:52:27:e9:
         f6:16:32:13:6d:e6:da:a4:81:46:c4:1d:24:b6:4e:d5:97:0c:
         ca:3f:c3:bb:1e:6d:8a:ad:93:74:c8:13:e9:7a:91:f8:b0:23:
         68:ae:a6:fa:c5:7b:87:6c:82:9f:0a:0d:29:a7:57:ec:60:f8:
         d6:7d:e1:bb:ad:11:4d:5b:16:2d:10:2a:11:50:a8:be:58:7a:
         40:59:54:05:fb:1e:4f:65:37:2e:c6:5f:24:95:ac:70:ff:c5:
         f3:af:91:3b:14:89:4f:d6:3c:26:45:00:fb:80:01:98:d2:55:
         8a:af:a3:c0:63:66:ca:c3:6d:e4:fa:72:c6:9f:df:1d:cf:63:
         a1:eb:90:d7:2c:e4:90:ca:d4:b5:45:ef:f6:e7:0e:eb:eb:22:
         b9:23:0d:de:a4:60:cf:55:32:9d:5d:1a:d8:e4:53:a8:cd:55:
         98:75:4f:d8:4c:cb:7c:91:87:6f:42:6f:a0:01:0c:a1:db:e5:
         8a:c7:26:e3:11:be:5f:5d:b7:95:f9:62:82:7a:fb:e8:08:e6:
         6c:85:5c:8c:1e:b8:4f:06:66:61:a0:cd:5a:85:be:26:92:6a:
         b8:e1:4c:59:ca:5f:a8:07:61:fd:2a:19:5c:95:48:2c:5a:eb:
         9a:42:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:54:49 2026 by rpki-client