Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b362b56-7b6c-39cb-b8b9-49eaf192b3b1.roa
File:                     7b362b56-7b6c-39cb-b8b9-49eaf192b3b1.roa (raw, json)
Hash identifier:          uBC1LB1C6K+gnikLdsB6thvOE8XT4CNL9Mb8zVVSAcs=
Subject key identifier:   38:BF:4F:1D:6B:26:93:E8:99:32:3B:96:8E:92:F8:95:04:6B:B2:85
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DD6A6FF681D836317A780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b362b56-7b6c-39cb-b8b9-49eaf192b3b1.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     15169
IP address blocks:        34.98.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:d6:a6:ff:68:1d:83:63:17:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=f0987168-8335-4c7d-afc6-1bd86e1b44aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:93:86:81:5b:c7:00:16:7b:7f:d2:bd:d5:b6:
                    ef:72:01:61:39:7c:7c:f0:25:2d:1e:47:18:19:97:
                    10:b1:b7:57:71:ae:a2:d5:51:52:42:53:1d:47:65:
                    8d:cc:26:36:2e:6e:55:92:a5:70:46:f4:06:7f:de:
                    55:46:ec:d8:fa:47:18:ad:71:53:a1:f5:f2:cb:b0:
                    80:d1:74:ea:43:92:39:60:54:2f:95:1a:3d:11:f3:
                    e8:69:54:63:a2:1c:c1:7d:8b:3f:85:b0:1d:dc:37:
                    24:70:12:ab:7c:f6:f1:a5:43:13:c4:f3:41:1b:f6:
                    db:fd:1d:2d:ed:fa:95:25:da:b5:00:aa:bf:8a:3d:
                    94:d8:b1:c0:90:bd:0e:e6:54:4e:ca:80:16:b2:92:
                    04:1f:bc:29:92:18:00:d1:02:8f:94:6f:a7:3d:5f:
                    01:94:d2:71:ea:82:a8:a0:9a:8b:df:1d:8d:36:2b:
                    08:05:87:46:67:29:28:0f:fd:d0:e9:f4:91:3d:25:
                    e8:41:d3:1b:5a:76:41:93:25:8d:68:8a:b4:fa:7d:
                    f5:9b:20:e3:6e:ee:ef:2a:4b:0a:3b:38:63:9a:87:
                    0d:6d:6c:66:da:ec:35:89:96:f6:5e:77:5f:78:b1:
                    3d:66:89:1e:46:f5:6e:84:d7:c0:e5:ac:82:12:dc:
                    45:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BF:4F:1D:6B:26:93:E8:99:32:3B:96:8E:92:F8:95:04:6B:B2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b362b56-7b6c-39cb-b8b9-49eaf192b3b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:96:0c:40:20:e0:75:4e:c5:03:be:c6:d9:76:56:19:fe:b4:
         7b:a4:59:80:56:95:44:5b:78:ec:b6:bf:fd:a0:f8:ba:16:e8:
         19:32:2d:7d:2c:df:9c:c5:96:62:8c:00:c1:e8:c4:a0:e9:31:
         99:8e:a6:79:85:da:22:55:c8:57:b2:1c:31:3c:94:f2:3c:03:
         c9:0a:68:a5:c7:82:1b:91:2a:ef:4c:23:07:fb:86:56:eb:84:
         bb:77:fa:56:53:02:5a:a8:b6:9e:0c:02:e2:f9:47:88:e2:62:
         0a:e9:91:d1:ac:da:30:8a:34:76:65:f1:cc:1a:a6:34:77:e2:
         83:66:78:e9:01:53:0a:4c:e1:b1:2a:52:47:d7:9a:a7:82:12:
         42:84:de:c9:03:20:ba:bc:48:62:e7:b6:a7:a1:b8:5b:21:df:
         ec:af:6f:69:20:7d:d5:e3:4e:fe:e3:a8:20:0b:c3:df:5c:bd:
         53:0c:f8:ad:e6:22:a2:bf:75:a5:9d:1c:e6:41:ca:b8:d1:91:
         83:44:1d:50:f2:c6:3d:09:34:12:15:67:c0:52:00:e2:88:ff:
         ab:0e:f8:41:ee:93:a0:75:27:fc:c7:bb:bb:9b:1e:4c:d2:6f:
         86:c4:e1:32:84:23:79:fd:05:c0:5d:27:e9:c0:90:ff:60:d5:
         15:c4:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:25:15 2026 by rpki-client