Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
File:                     aa7a7287-b1dc-3e23-925f-c1a9de542259.roa (raw, json)
Hash identifier:          0SgANErVoDBWTBwvZk9K2rJsgpk1byKbrNiXMyu0l9w=
Subject key identifier:   14:98:2E:39:0D:4B:9E:D7:DD:D4:2D:FF:07:FE:E0:18:25:E7:34:C4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA79ED77C5938134FA586A980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11344
IP address blocks:        34.104.39.208/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:d7:7c:59:38:13:4f:a5:86:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8d6b8c0c-d794-430f-8a86-7ac8dfa3b3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:06:a5:48:73:ba:9a:2f:7b:db:21:8c:a7:
                    ab:de:57:63:0c:1d:5d:47:99:56:67:f4:e1:15:1f:
                    4c:83:c9:d9:8b:20:d0:05:6e:cf:13:2b:ec:91:8d:
                    e7:fd:b0:58:30:f0:e6:e5:44:4e:b6:36:3c:04:2f:
                    9c:e2:18:d6:57:a6:3c:75:ab:7b:6d:51:8c:29:9b:
                    95:a4:86:5d:05:d5:34:fc:af:6d:ce:c9:64:20:d5:
                    4c:b7:77:26:4e:e0:14:54:35:68:5e:88:1c:fd:2d:
                    4c:13:3d:40:bd:16:2b:7c:84:b0:11:cf:c8:4c:d1:
                    24:84:db:68:f1:3d:e8:cc:c3:57:38:2b:ef:ee:fd:
                    95:ed:db:fb:b2:b5:ff:d8:04:cb:30:dc:cd:50:5a:
                    e9:bd:d7:cf:03:52:50:b6:e6:17:0e:96:a1:f5:a7:
                    56:97:ee:c5:50:a7:e7:0c:88:c3:1f:68:27:60:15:
                    58:9e:21:29:62:7c:e6:e4:81:62:60:a2:6b:c9:cd:
                    51:2f:9e:e1:75:3a:b2:dd:db:9b:37:6b:6b:0e:d6:
                    f1:57:2f:ee:91:f6:f7:ea:b7:2a:64:4c:5d:3e:4f:
                    3f:1d:86:4b:1d:94:93:7b:3e:4c:29:fc:c0:40:af:
                    ac:6c:50:f1:60:6f:75:ae:80:c9:02:f0:e9:25:34:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:98:2E:39:0D:4B:9E:D7:DD:D4:2D:FF:07:FE:E0:18:25:E7:34:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.39.208/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:51:36:f8:48:c9:87:cd:a3:2f:74:5f:59:5c:aa:b8:f9:
         60:da:3b:64:7c:68:50:b3:8f:97:19:6e:1d:34:8c:a4:4f:9c:
         7b:d7:de:49:21:de:f9:b1:51:3f:4f:af:63:93:ec:3a:a1:05:
         a3:f6:5b:48:3f:8e:54:a5:f5:ca:2b:c9:e2:25:94:68:9c:cf:
         0b:c5:6b:63:e6:82:99:dd:99:a0:70:8a:34:54:a8:df:5b:a0:
         22:e1:9e:69:8a:3c:49:91:57:83:b5:da:9f:08:74:44:d3:51:
         37:c0:3b:64:d8:91:3d:cc:29:87:e4:e0:eb:fa:15:da:34:27:
         2d:da:96:c5:04:17:ec:83:83:90:92:7f:31:32:b9:6d:a7:0a:
         81:16:62:18:66:38:68:12:50:61:23:a5:ef:1d:1d:1a:a9:1d:
         63:56:83:55:a1:87:d7:93:67:21:89:39:ec:f8:b6:7f:73:81:
         ec:9c:14:15:3e:fd:7d:fd:11:11:36:06:0e:c3:85:e7:74:e1:
         77:aa:2c:77:63:ac:db:06:3b:d0:dc:a4:92:25:b0:cd:1a:fd:
         2d:18:c8:80:ef:bb:89:5b:c2:50:5d:87:5a:18:3b:22:bf:83:
         db:4b:a2:9a:bf:e4:4d:6b:7a:1a:a9:20:77:a2:ac:34:05:63:
         53:72:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:25:51 2026 by rpki-client