Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa
File:                     b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa (raw, json)
Hash identifier:          3Pxu93SCsWhRPFAiF0XALcaR75EGFmLRbGmLIiBubm4=
Subject key identifier:   70:FB:90:88:D3:50:0E:12:53:9A:69:6F:8F:A8:B5:2A:1D:60:E0:0C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CE8F7722E57F7482F5B0E04C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     19527
IP address blocks:        34.1.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:72:2e:57:f7:48:2f:5b:0e:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=c4cf68f3-4715-43f6-a58a-fb3f473e485a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:b7:36:f6:a8:ad:b0:93:06:ba:54:81:a3:
                    ee:78:55:22:f3:e2:90:eb:68:a7:a9:4e:d3:87:f7:
                    01:f6:ea:c5:22:71:58:7e:33:d9:de:94:5d:01:fc:
                    43:aa:bd:ee:cf:f8:dc:03:41:a2:30:5d:cb:c6:61:
                    8c:35:0c:f9:09:21:4f:ac:d6:73:46:6c:4b:ea:53:
                    e4:c3:1c:8c:06:e1:98:2f:21:67:9d:55:c1:2e:e0:
                    51:78:d5:10:88:16:89:23:3a:45:38:2c:b4:f5:bb:
                    72:2e:ef:fe:80:50:23:e7:9a:6a:18:80:28:b1:7d:
                    38:3b:4f:5a:50:e9:02:28:76:12:d2:8c:21:22:ba:
                    4c:65:f1:00:df:99:b0:64:2e:c5:03:67:27:b4:6c:
                    c0:99:4c:6a:a3:5e:99:65:a6:38:99:83:55:47:61:
                    61:f9:6f:42:0e:5b:9a:ef:f9:bd:2f:ba:93:b9:9f:
                    82:05:82:6b:f3:02:50:79:bd:7a:b8:96:5a:bb:f2:
                    bc:ab:05:de:72:52:a4:fd:5e:79:c9:63:ae:4f:e9:
                    6a:1f:b5:d2:4d:53:d8:9e:95:72:5c:56:81:e4:ad:
                    69:2c:4e:e4:85:07:22:07:1f:60:fa:34:d9:62:a9:
                    66:d1:0e:98:05:1f:3f:49:56:86:f6:c7:50:3e:ec:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FB:90:88:D3:50:0E:12:53:9A:69:6F:8F:A8:B5:2A:1D:60:E0:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c6:10:90:84:66:46:41:a6:3f:b8:eb:31:96:01:8e:6c:d8:
         a7:e3:dd:13:f4:76:d4:fe:b3:50:2f:72:bc:42:d0:3a:18:4a:
         20:f4:5c:42:74:51:b5:19:25:4d:19:e8:10:8b:2f:90:e0:bd:
         fb:26:72:d0:94:3b:62:53:f6:3e:71:a5:f5:b9:35:4b:8d:45:
         15:a2:3b:11:62:be:cb:a9:89:42:2c:94:6e:f1:32:fe:2d:09:
         89:54:50:ad:32:89:68:3d:cf:68:58:40:c3:58:cd:77:a2:88:
         6e:f9:8d:93:f3:bb:b8:4f:80:10:8d:e9:d3:c4:2e:e1:ea:bb:
         41:f2:89:e3:8d:4f:24:15:a9:26:b2:82:ab:07:e0:8d:64:c2:
         73:3f:da:13:30:b2:d9:0f:0c:88:d2:1d:41:ab:94:5a:7b:3a:
         1f:00:62:e6:f0:c6:38:09:a5:71:76:b3:8a:47:b1:c0:ff:da:
         20:6c:41:c7:8c:3c:6e:78:1e:ec:37:47:33:d5:bb:08:46:e7:
         53:44:e0:9e:13:04:de:30:91:6f:fa:2a:77:35:74:43:e1:10:
         8f:1e:33:38:4f:88:a0:2f:66:63:42:56:d9:b0:10:fe:81:48:
         b2:ad:fe:47:d5:93:c0:8c:18:8a:32:2a:17:3a:05:90:e6:bf:
         2a:9b:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:09 2026 by rpki-client