Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca27e6eb-a3b4-3b45-af2d-932484037d73.roa
File:                     ca27e6eb-a3b4-3b45-af2d-932484037d73.roa (raw, json)
Hash identifier:          b5mfq4HHKNHn5UCQ3oGfvY/gTSNGVHGv1TuN1hbCsF4=
Subject key identifier:   36:E4:F5:58:52:19:7D:49:D4:FC:22:D3:57:C1:BC:05:1E:6A:92:4C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D8299E104BB50DEF4328CBC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca27e6eb-a3b4-3b45-af2d-932484037d73.roa
Signing time:             Wed 15 Apr 2026 02:46:42 +0000
ROA not before:           Wed 15 Apr 2026 02:46:42 +0000
ROA not after:            Tue 14 Jul 2026 02:46:42 +0000
asID:                     396982
IP address blocks:        34.156.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:82:99:e1:04:bb:50:de:f4:32:8c:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 15 02:46:42 2026 GMT
            Not After : Jul 14 02:46:42 2026 GMT
        Subject: CN=1d9c50a9-2937-4010-aa3d-25c7c95e4fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:cc:62:30:9b:c2:1a:bf:25:fe:21:dc:eb:
                    41:62:95:fb:0e:e7:6d:d4:28:2e:2f:2b:a7:95:6e:
                    45:8d:6a:4d:88:7c:be:ca:12:d8:f9:d3:b3:8b:90:
                    9d:d5:98:12:51:72:84:f6:37:21:bb:11:70:82:b4:
                    dc:80:2a:7c:6b:0f:b7:46:e2:13:66:45:35:ad:b6:
                    52:59:86:bc:0d:b8:6c:e2:0f:7a:c1:f0:b7:8d:55:
                    2c:f6:a9:f1:21:28:2a:9f:30:c1:7c:25:7a:38:cb:
                    ad:c8:ed:b4:6d:c7:c4:04:01:2d:0a:5b:16:3c:06:
                    c4:3c:ce:31:b9:ed:ea:4a:ac:eb:20:7d:ea:ec:25:
                    0f:b8:e9:7d:7b:61:9b:9b:d6:87:01:36:a6:18:36:
                    82:98:94:1a:7b:63:9b:88:00:8e:33:d2:f4:c9:fa:
                    8d:05:a6:97:0e:12:24:83:6b:88:15:77:41:3d:3a:
                    00:be:c7:49:88:1f:5c:69:06:2b:db:7d:9b:88:8f:
                    aa:61:22:75:31:85:1d:bb:09:e6:7b:e0:9d:e7:01:
                    77:0e:14:68:e9:4a:55:ac:f2:06:07:eb:b8:75:bb:
                    32:99:1c:35:ce:d8:63:a1:96:4f:56:35:c0:9d:c0:
                    47:3d:b7:f8:97:0e:9d:e6:f9:93:6e:4a:e9:ad:1b:
                    4d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E4:F5:58:52:19:7D:49:D4:FC:22:D3:57:C1:BC:05:1E:6A:92:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca27e6eb-a3b4-3b45-af2d-932484037d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.156.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:52:b5:a0:7b:7f:0f:e4:50:4c:95:3d:dc:9c:4d:85:1c:fb:
         5b:fb:db:ae:01:7e:38:a0:9a:39:e2:c2:bf:fc:a0:bb:80:36:
         ed:d4:ae:54:7f:64:ff:a8:5c:a0:c3:8b:e3:15:07:e6:8a:84:
         0d:97:8f:c1:84:c4:28:bf:10:2f:aa:f1:56:ee:7b:e0:36:66:
         97:5e:19:9f:39:16:31:ab:a1:65:32:a5:9e:ca:41:60:d7:83:
         59:0d:7b:0c:d4:87:75:77:08:ae:f2:d6:81:54:5e:38:9f:ad:
         fd:67:3c:2f:50:aa:b0:0d:b5:56:7f:76:28:a8:52:b4:da:50:
         ee:99:6e:a8:3a:3f:c3:7b:bd:d3:ae:b7:a1:e4:5f:46:0b:b8:
         b9:8d:33:c2:4b:1a:56:a2:2b:4f:69:ea:94:a2:8e:77:2c:83:
         7a:9f:00:36:37:f1:ea:bd:3a:c6:f6:5a:9a:bd:54:da:b2:98:
         f5:37:03:4e:4c:8d:f0:20:92:9d:24:e1:26:a1:7a:61:2c:5f:
         5f:90:3c:dc:09:89:a9:a2:c8:39:8d:44:f5:ed:01:e7:3e:62:
         33:76:cd:fc:d5:eb:5c:c4:3c:15:15:b5:c2:f8:3f:18:96:94:
         69:73:d4:65:07:f2:95:9d:e7:ae:a0:ef:c1:41:8f:12:c9:97:
         2d:c4:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:16 2026 by rpki-client