Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc69068-9ae1-3ae8-8da4-cda31bf4deaa.roa
File:                     6dc69068-9ae1-3ae8-8da4-cda31bf4deaa.roa (raw, json)
Hash identifier:          uG3cRnPWLxGkiu+388ncE9fOIJKexLE86oHsOnOugP0=
Subject key identifier:   71:E4:D3:2B:D8:75:78:0D:71:20:F3:4C:31:E5:1A:CA:E0:6E:3F:2A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E059C40C8D10550F2BF270F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc69068-9ae1-3ae8-8da4-cda31bf4deaa.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.122.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:40:c8:d1:05:50:f2:bf:27:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=375d1bd0-607b-4da4-a646-73775e053197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7b:75:d6:9b:34:a1:ca:2f:2d:73:1a:20:56:
                    12:58:ae:cd:24:69:84:92:8b:50:4e:d3:eb:06:77:
                    92:ed:97:f4:57:be:66:c4:12:4c:30:d2:55:04:8d:
                    2d:95:b7:bc:07:5d:d9:2b:0f:3b:30:58:14:de:6a:
                    6f:46:0f:89:2c:05:d6:4a:9b:1f:7c:58:b5:2d:7f:
                    9d:cf:45:da:57:41:28:a4:8d:02:5d:32:9b:b6:3e:
                    8f:e8:a3:9d:6c:9b:04:1e:4d:e5:55:53:ed:81:cc:
                    f9:24:e3:4c:1f:5d:5f:52:5e:5e:9b:8b:21:3d:7d:
                    20:25:de:35:39:b2:87:c7:bc:17:f9:bf:3e:28:d7:
                    e8:b1:75:2c:69:ad:dd:a9:50:d7:d2:3f:0b:7e:54:
                    30:b0:3f:98:72:1d:6a:58:94:e4:5c:28:ed:12:6c:
                    d9:57:93:70:2a:2e:4e:32:04:57:f2:52:c4:16:ea:
                    f0:6c:8e:e8:eb:c3:ed:0b:68:0c:57:2b:23:86:fd:
                    c6:75:0f:16:fd:26:36:c0:4f:f2:a8:60:1b:38:66:
                    42:0c:fa:e6:88:c6:6f:5e:b5:13:25:9e:66:fd:d7:
                    b9:15:20:62:c5:d5:d3:c8:dc:e5:d5:fd:6b:20:18:
                    1b:3f:29:63:cd:3c:17:c0:f8:8d:3d:9a:67:55:d8:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:D3:2B:D8:75:78:0D:71:20:F3:4C:31:E5:1A:CA:E0:6E:3F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc69068-9ae1-3ae8-8da4-cda31bf4deaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.122.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a8:31:bf:2e:f0:04:8c:e4:3d:71:c4:86:3c:6e:7a:52:77:
         77:28:e1:98:dc:00:cc:c0:50:cf:d4:5d:88:37:0a:89:7b:90:
         90:a5:c3:4e:39:e8:59:17:3a:70:00:3e:e7:b0:be:7a:28:21:
         dc:55:d2:33:e8:54:30:16:e2:dd:36:7a:eb:03:b9:5b:d4:d9:
         ff:05:5c:c9:1f:e4:d0:99:0e:68:f2:ee:fe:cb:c8:e7:82:52:
         ad:98:ec:38:70:37:73:28:73:40:b8:9b:a2:c7:1f:53:c0:67:
         06:09:49:61:c6:9f:46:4e:f0:d6:a6:e0:f8:49:ee:08:6f:4a:
         27:45:55:23:fa:97:62:33:98:c8:5c:b9:12:ce:a1:5c:17:6f:
         56:8b:9e:2c:8a:ac:d3:ec:05:94:db:6d:24:c0:6b:3c:1d:42:
         e0:1e:db:0c:33:5e:f4:18:7d:70:6e:c4:d2:17:52:da:b6:b5:
         91:9e:78:ec:6b:b7:8b:51:7d:30:2d:9f:ec:96:33:17:7c:7d:
         d3:dd:cb:05:be:fd:e6:f0:ab:f3:ff:00:68:bc:08:ec:45:6c:
         36:56:d4:12:13:b9:66:47:9e:ad:24:38:29:5f:e7:eb:71:09:
         46:c1:00:3a:eb:a6:13:bd:17:91:b9:87:f1:8c:58:7d:ec:d8:
         18:0e:6b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:00:28 2026 by rpki-client