Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69a9dd20-3f71-3de9-9723-7f330c58715d.roa
File:                     69a9dd20-3f71-3de9-9723-7f330c58715d.roa (raw, json)
Hash identifier:          8SYQkq8hDPtt9dKBWS/MUFxLQysProeEuC8yFxhMkVI=
Subject key identifier:   B4:F3:03:4D:37:98:35:5F:1E:34:30:09:2D:6D:65:79:D8:7C:B1:F0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CEA5D05A326D326C4DF0A2F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69a9dd20-3f71-3de9-9723-7f330c58715d.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        34.2.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:05:a3:26:d3:26:c4:df:0a:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=dc512d8b-e006-4a9f-8307-057f7bd5f148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f5:94:a0:cf:ba:c3:6f:0e:96:80:d6:e3:14:
                    8a:5a:8b:49:24:d5:35:6a:93:eb:ca:37:77:74:cf:
                    6b:e9:59:f3:27:50:f6:9e:60:4b:54:f8:c6:b6:82:
                    30:d4:ac:8c:2b:4d:b4:6e:d3:43:5e:17:18:c8:8d:
                    9e:b7:b7:c7:08:d5:42:8d:68:ee:4e:1e:32:68:f3:
                    5d:1f:2e:4b:7e:ac:91:74:09:14:a9:73:f3:7a:85:
                    b4:1d:e3:0e:80:23:ab:b7:b4:b9:05:82:25:01:88:
                    1b:0e:08:64:33:17:c8:0d:78:f2:04:92:fc:39:34:
                    05:c2:cc:5c:83:aa:1f:b2:5c:a6:3c:2d:88:55:fa:
                    b5:de:e8:3f:51:a2:6c:ef:47:86:b2:c5:59:8f:15:
                    3f:2a:0d:e9:33:dd:06:7c:07:66:37:6a:e3:96:23:
                    fe:ea:e5:c5:8e:7e:6c:cd:b5:57:f7:a3:2f:7f:78:
                    56:64:99:c6:ea:8c:61:b2:76:ba:1b:f8:86:13:f8:
                    ae:40:03:41:a3:ea:dc:62:d6:4c:62:a4:29:d3:22:
                    0a:a5:2f:20:99:4a:2a:34:b2:d3:f6:9b:b3:10:b3:
                    8a:c6:3e:93:5c:14:8e:18:af:0c:97:b4:ef:06:80:
                    9d:9f:19:d4:83:bc:a1:95:e2:d6:a7:91:41:10:02:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:03:4D:37:98:35:5F:1E:34:30:09:2D:6D:65:79:D8:7C:B1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69a9dd20-3f71-3de9-9723-7f330c58715d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:71:b6:29:2b:62:30:a4:26:01:76:57:94:5c:b8:93:5b:04:
         82:68:0a:7c:aa:e1:e4:ce:0e:27:38:46:7b:82:73:2d:1e:5e:
         fa:53:8c:92:8c:0a:5c:47:d1:19:0f:ab:55:6f:2c:c5:ba:06:
         52:6d:69:dd:d5:44:26:97:90:64:dd:9b:9d:6e:c3:3c:85:c8:
         d8:68:8c:a7:60:4f:ca:d1:d1:e4:ca:4d:26:3a:bb:4b:da:a0:
         bf:70:13:f4:b7:a1:da:20:f2:77:0e:6c:13:32:7a:06:a9:97:
         35:d1:03:32:98:39:7b:c5:06:d2:cb:df:97:8c:42:b2:86:60:
         2a:9f:a6:38:8c:f8:db:73:32:5c:ba:b1:a6:51:52:48:72:22:
         26:b4:07:34:5a:11:1a:74:a2:76:f4:75:30:b7:d9:31:62:22:
         3c:be:3f:5a:83:05:01:68:0e:25:1f:3c:a6:04:6f:03:cb:d6:
         fb:73:a7:ff:e2:c8:5e:80:7e:3e:90:ef:5d:45:c5:cf:b0:64:
         27:3e:a2:95:d9:57:ae:86:de:7a:56:e4:a4:58:a4:ee:4d:b9:
         97:a0:ce:9c:57:68:50:58:7f:64:86:7c:01:28:0c:f2:cd:79:
         14:85:ac:80:22:82:94:52:ee:a8:22:9c:e5:c3:d8:1f:95:af:
         14:7a:bd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:45 2026 by rpki-client