Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6440560b-becb-34b1-8b01-354f47dcc917.roa
File:                     6440560b-becb-34b1-8b01-354f47dcc917.roa (raw, json)
Hash identifier:          43MGoRip2SheOf0ygV//K8wxzi0GEp9oE6Mi79E3l/o=
Subject key identifier:   25:01:7B:8E:E0:E4:30:CE:F2:C9:1D:D4:E2:B8:A6:7C:08:C2:B5:18
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA7872870D7F9218910B2AA30
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6440560b-becb-34b1-8b01-354f47dcc917.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19527
IP address blocks:        34.3.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:28:70:d7:f9:21:89:10:b2:aa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b5c25449-8f94-45d3-a067-fc5bfbd2af8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:64:36:5a:aa:f8:a7:d5:d0:1e:2d:df:de:
                    5e:81:d4:29:eb:14:66:c7:15:8e:46:ec:87:ef:a8:
                    ab:ab:87:e6:c0:7f:c9:6a:3b:da:a6:78:02:8a:0f:
                    ce:15:fa:8b:c8:fe:e0:75:8b:16:aa:b0:96:c0:5f:
                    c1:85:9b:87:19:c3:64:56:ec:4f:60:d3:10:7b:b4:
                    24:15:75:48:4a:36:ae:74:5a:ef:02:97:0a:e1:46:
                    69:a6:ea:b3:b5:54:16:eb:61:56:b3:fd:7d:50:6c:
                    5d:90:d8:df:44:8d:a9:c8:dc:82:98:e1:ee:a2:ce:
                    95:83:0e:5b:cd:2c:b7:d5:9e:b6:89:05:91:22:3c:
                    4b:a0:ff:5c:68:f3:e9:bf:43:28:67:3e:c9:9c:e9:
                    1b:de:04:8a:71:20:fd:70:a8:87:ed:5a:c1:ee:7a:
                    6c:4e:2d:d8:8c:e9:d1:58:e7:6d:20:fd:88:21:cc:
                    ba:5a:7d:10:86:90:57:01:6a:4d:9e:64:fa:a0:9e:
                    3d:d8:4d:bf:5d:da:b4:f8:21:d2:fe:69:6d:e3:9c:
                    d7:70:d1:3c:84:dd:0d:9f:77:9a:32:2c:e9:9d:cb:
                    96:42:84:e9:a5:64:60:49:38:45:f4:51:dc:77:69:
                    d4:ff:30:34:2d:ad:f4:65:19:0d:c9:c0:2a:2c:6d:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:01:7B:8E:E0:E4:30:CE:F2:C9:1D:D4:E2:B8:A6:7C:08:C2:B5:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6440560b-becb-34b1-8b01-354f47dcc917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:40:3e:d1:88:b4:09:b9:2c:4b:b8:42:92:75:be:17:d2:c1:
         bb:58:07:23:5c:88:4a:63:05:1f:aa:15:e8:23:89:71:cb:76:
         ef:a6:f1:12:13:02:b3:ac:f0:8c:78:94:96:39:c0:c4:75:63:
         f3:e0:bc:ac:f1:1a:ad:3a:44:b3:1a:f3:6a:54:f5:55:c1:f6:
         02:92:06:e0:a9:75:60:3f:3d:d2:19:55:b8:03:d3:32:ed:3c:
         ad:b2:41:2a:ab:90:03:91:9e:56:f4:a7:a0:14:6b:87:49:be:
         b5:75:70:b1:2c:7c:cf:72:57:69:2d:35:e8:18:bb:17:39:21:
         95:ce:c6:1d:a7:2a:a3:b3:72:2c:8c:9a:e4:59:65:ff:df:e4:
         c5:38:39:71:2f:f3:d5:d4:28:28:25:c1:05:1f:5f:44:2d:c1:
         42:43:99:48:ac:f8:fe:92:46:8d:f6:12:c7:d0:6f:a3:54:ac:
         35:44:e3:9a:1c:d5:05:08:05:49:9f:8d:52:36:17:c1:90:f7:
         60:aa:9d:de:39:de:f3:fe:eb:da:ef:d0:ed:cc:4c:fe:9f:22:
         cb:70:15:fd:3c:6c:a0:5e:39:60:e3:ac:9a:ff:aa:49:06:85:
         f5:0e:17:da:ac:53:2b:aa:a8:5c:46:e7:3c:0e:12:6c:4c:d4:
         02:04:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:26:49 2026 by rpki-client