Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aab57b78-f652-39c1-b67f-3e54c23a4a54.roa
File:                     aab57b78-f652-39c1-b67f-3e54c23a4a54.roa (raw, json)
Hash identifier:          7gm/2EIgfBmcZTCObxeaVdVbc0GE3Cv/EdKdlhChS2k=
Subject key identifier:   D2:A7:E8:11:55:8F:56:DE:29:FA:FE:09:C2:61:A6:63:28:AA:54:C3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA78792305065C43D5DDC8A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aab57b78-f652-39c1-b67f-3e54c23a4a54.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19527
IP address blocks:        34.4.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:92:30:50:65:c4:3d:5d:dc:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=278e692b-0a5b-41b5-ac1a-b60c000a4dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:3a:4a:6d:7a:0d:3a:e0:a8:c8:d1:e8:5a:
                    fa:d0:5b:95:75:48:d3:0a:26:89:4e:6a:88:16:89:
                    d1:3b:1a:6d:33:19:fd:e1:87:c0:b3:37:f9:ad:07:
                    2d:f8:4d:b2:0e:93:54:3e:73:1e:04:3f:1c:fe:34:
                    cb:c3:b4:da:ed:7e:88:6a:df:90:8a:38:73:a0:2c:
                    27:3b:bd:de:89:5a:4d:22:9d:fe:66:64:93:db:a0:
                    a1:91:2f:46:70:42:af:8a:3b:fd:ab:d8:42:e3:7a:
                    c2:60:61:c1:4f:ff:d5:83:bb:4e:41:6f:e2:7a:09:
                    59:12:ce:e0:35:ec:aa:76:32:1c:ad:33:a4:98:84:
                    37:a2:81:da:c1:3c:b9:e2:fe:15:d4:65:25:67:39:
                    b3:fa:51:49:57:95:bb:2d:bb:0e:c1:8e:94:db:bb:
                    28:78:fc:1d:5a:36:13:69:4e:7a:b3:ef:ef:b6:cb:
                    9c:ad:62:5f:ce:a9:ca:46:a4:73:f3:9b:56:49:88:
                    6d:15:c3:e9:33:44:36:f7:e7:4e:ee:66:99:69:10:
                    ee:7b:b4:9d:ff:42:d6:4c:7d:8e:8d:cd:51:98:3c:
                    72:b8:9d:7f:8c:cd:2d:a7:f0:d5:79:48:53:d2:a2:
                    03:d9:9e:0c:45:cb:25:ab:d3:9d:33:11:0d:f7:11:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A7:E8:11:55:8F:56:DE:29:FA:FE:09:C2:61:A6:63:28:AA:54:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aab57b78-f652-39c1-b67f-3e54c23a4a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:64:50:3e:82:ae:b4:eb:89:53:3f:43:ad:e5:c8:6d:22:
         3c:bc:2a:c4:e7:69:46:08:6d:0e:88:d4:22:5f:c7:31:c0:b9:
         8e:e1:bc:19:a3:15:84:1a:f1:0a:26:8d:3e:c4:b9:43:07:86:
         ee:dd:4c:11:ba:98:00:e9:c7:e7:37:84:8a:6e:89:0b:6b:c6:
         20:61:cb:df:b5:ff:18:c3:45:36:dd:9b:79:cd:2e:bf:14:66:
         76:69:d9:f7:05:ea:18:76:2d:58:17:58:23:f6:36:e1:35:73:
         e8:d8:2c:1c:3b:92:b2:c2:9e:a9:10:83:45:31:51:70:42:6c:
         70:e9:4c:46:14:83:ad:e9:6b:ff:d0:52:16:3f:ad:87:70:69:
         66:22:1e:53:dc:09:61:ab:c9:7e:c3:3b:17:8a:b6:57:99:8f:
         d4:b7:8f:4b:fc:f1:2c:5d:b6:7d:3c:15:36:0a:58:f5:b7:04:
         03:a2:9f:b2:31:d1:2d:40:60:46:ba:57:c0:8c:e7:24:f3:be:
         1c:43:d4:69:ef:ba:c0:1d:37:e3:de:57:8b:61:e1:cd:9c:c3:
         5f:0c:a4:c6:44:3a:25:af:3d:8f:24:72:c4:27:a5:00:13:3e:
         26:6e:77:7f:bb:ff:63:d8:89:db:97:5a:9b:c2:9c:b6:a2:46:
         99:a9:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:38:13 2026 by rpki-client