Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa
File:                     7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa (raw, json)
Hash identifier:          UcKUlNQjrGrWBIYAgTj2jTltug35ZXKHNJHS+Lyywqw=
Subject key identifier:   75:65:7C:2F:3A:FA:A4:9C:D8:94:3A:32:73:DB:22:26:5D:B5:C0:53
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E08663BB972CA611C308CC900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.129.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:3b:b9:72:ca:61:1c:30:8c:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=859de352-946c-42bd-b503-ca18bb1ad5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:84:70:c5:12:3f:07:44:5b:c9:e3:54:c7:
                    d2:ca:d3:7f:09:18:c8:74:72:1d:2e:5b:c3:b6:86:
                    14:a0:9e:b0:9b:89:0c:9d:f6:66:c7:59:4c:6c:9b:
                    d4:a0:eb:6f:3f:fd:a8:6b:d1:87:8e:d6:35:57:99:
                    11:4d:f8:50:6c:e4:1e:63:29:0f:f8:b9:5c:8a:72:
                    ff:a1:8d:73:b9:b1:f8:b7:ac:9a:d8:bb:f1:20:c5:
                    3d:1a:99:b6:1c:65:5c:47:97:c4:46:17:4a:dc:53:
                    33:92:c1:6e:93:30:b5:2b:cd:fa:97:0d:b7:be:62:
                    d8:10:31:7b:49:51:42:6e:f4:77:45:6b:f6:ed:e4:
                    c8:65:c1:62:e5:7f:7b:41:ae:a8:f8:2e:24:01:a4:
                    c1:ae:d6:05:af:a7:18:17:43:3c:26:d1:81:77:c2:
                    ca:80:21:61:01:79:a1:cd:fd:f2:0a:a5:15:f1:7b:
                    53:31:0d:c3:9a:6e:d9:a9:03:e1:05:fc:d2:93:40:
                    e5:77:e2:38:70:55:d7:10:cf:46:90:4b:55:46:78:
                    84:c3:68:28:61:58:ab:03:b3:c6:65:ce:88:46:12:
                    d8:b1:e9:f4:2f:68:97:83:73:b6:90:83:0a:3e:0a:
                    59:16:a5:ee:7f:a4:ba:05:ba:19:81:3a:ce:74:89:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:65:7C:2F:3A:FA:A4:9C:D8:94:3A:32:73:DB:22:26:5D:B5:C0:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f2:4d:b0:e5:76:78:21:a0:64:10:33:8b:c7:8e:d3:f6:f9:
         4b:bb:24:f9:60:f2:32:78:33:0a:db:66:92:d6:48:79:2b:a0:
         eb:0b:a7:23:98:da:6d:8c:85:8c:56:01:6d:06:86:a8:52:ff:
         78:6b:53:64:90:e9:f2:59:bc:56:b9:56:03:b0:57:51:1c:67:
         f8:8b:b2:ae:32:ee:78:25:6b:eb:7d:c3:db:72:bf:81:8a:38:
         43:a7:16:21:ae:40:3e:ee:9b:03:74:4a:55:b6:7a:dc:4f:bc:
         e4:98:61:1f:b0:6a:85:2a:bb:1b:0c:2f:3d:0d:86:9c:c3:7b:
         c3:b4:f5:50:af:6a:c0:16:2c:56:be:4c:73:0c:59:dc:09:3d:
         1b:fb:48:f1:63:2b:70:fb:cd:a3:c3:97:a9:45:06:bc:b5:e0:
         e3:03:ad:4f:69:0c:32:26:32:89:22:a8:4a:c1:a9:6f:f6:f7:
         6f:12:2b:6e:1f:e2:ab:1e:d1:10:54:96:73:5b:35:00:b2:51:
         cf:56:7b:4b:09:0f:bf:08:76:1a:e5:df:7b:74:02:3c:e7:54:
         87:65:5a:f2:a7:d7:3f:ec:77:88:df:58:07:a9:91:a1:0e:e3:
         33:01:00:30:d3:46:40:d7:31:90:4d:76:4b:5d:9e:e8:bc:2f:
         da:36:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:39:37 2026 by rpki-client