Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b90c383e-65b6-359a-9be7-febe063f8838.roa
File:                     b90c383e-65b6-359a-9be7-febe063f8838.roa (raw, json)
Hash identifier:          Qiu0mn1JzmIfCLKts6wZrhFCEWNS/PtMDT9oY097USg=
Subject key identifier:   D9:48:C8:56:A6:14:F8:5E:B5:CC:7F:71:3A:2F:67:EA:B6:44:66:90
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E086641300D7FF394283900C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b90c383e-65b6-359a-9be7-febe063f8838.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.131.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:41:30:0d:7f:f3:94:28:39:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=e7891e67-2db5-4be9-a1cf-4a5aaf44d14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:eb:63:97:b6:8f:f5:99:74:dd:6b:bb:d3:
                    b9:b9:ec:79:4f:0f:cd:c6:1c:00:27:15:4d:08:6f:
                    54:fd:cf:43:36:0e:0c:46:db:0c:1a:bc:96:43:d3:
                    41:01:36:8d:64:32:5d:31:3c:22:5a:18:2e:e4:6b:
                    d3:61:bc:2d:10:ee:ac:18:bc:db:35:fd:1c:54:23:
                    63:f4:7b:e2:c8:b0:69:38:bc:a8:60:25:54:6d:23:
                    c0:db:1c:be:09:45:16:15:7c:36:2b:78:d5:44:2d:
                    fc:bd:8e:35:cd:95:31:18:a0:0a:85:3f:9b:98:a1:
                    5c:27:0a:5b:19:03:24:b9:fc:1f:0b:9f:e3:1a:2a:
                    62:22:09:43:29:ae:06:75:40:b5:ad:5e:f8:14:e2:
                    1b:83:1a:ab:eb:a5:01:89:a9:a6:c2:c0:74:30:fe:
                    4c:5d:35:53:9f:d7:ab:0b:7f:12:1e:ad:a0:2a:7b:
                    a8:9e:22:6f:a9:5f:97:c6:60:02:23:ee:cc:d6:7f:
                    ee:3d:30:8d:01:08:a5:b3:35:3e:20:e9:1d:88:b0:
                    4b:39:b1:6b:cd:9a:8e:9f:8a:f9:39:35:80:f7:1b:
                    95:e9:04:6a:37:bc:79:e9:b0:bc:52:bb:9d:c1:31:
                    a2:06:fe:43:3b:69:b1:34:09:04:7d:0b:a3:46:4e:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:48:C8:56:A6:14:F8:5E:B5:CC:7F:71:3A:2F:67:EA:B6:44:66:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b90c383e-65b6-359a-9be7-febe063f8838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.131.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c2:1b:b5:d5:72:9d:40:a6:7b:50:56:7e:e8:b0:68:f2:be:
         c1:7d:21:e6:94:2c:27:12:bb:36:dd:e0:94:93:c5:02:67:62:
         f0:e1:b1:55:83:01:25:41:82:2e:9f:41:26:26:fa:f6:a4:57:
         ca:37:64:d9:7f:bd:35:37:b8:d0:3d:b6:44:1c:f6:30:09:c0:
         5e:16:a9:50:2f:67:90:e0:0a:f0:4e:95:43:77:65:ce:2d:ce:
         31:08:ef:2d:ff:56:ab:2a:61:16:db:65:ae:09:28:3a:18:85:
         c1:78:9b:0d:f2:b9:14:a3:1e:46:7d:6c:e6:ee:86:a8:25:db:
         5d:ec:d3:27:52:c7:aa:b2:70:70:f8:62:f9:f0:69:c1:13:bf:
         5e:bc:c1:3d:e1:32:55:b8:18:4c:31:f2:b4:93:bb:8b:ed:49:
         16:a9:8d:a4:d2:fe:b0:b8:6f:ef:76:e4:e1:4c:35:34:71:2b:
         06:53:7a:52:dd:0d:1d:9f:bb:ad:e3:9a:29:53:16:f4:04:a2:
         05:97:5c:94:8e:6b:cf:05:58:55:ef:8c:d7:8e:cb:42:43:92:
         6d:e7:34:7d:d0:7d:39:65:8c:bb:a8:25:25:2e:50:28:56:53:
         d4:e6:05:0a:f8:aa:37:20:c4:53:9c:c7:f6:55:52:eb:20:8c:
         a6:84:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:42:35 2026 by rpki-client