Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa
File:                     ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa (raw, json)
Hash identifier:          gHxQHxerRZ+OugaHLGq6s1gfiYrrUgG8hNYUFy152o8=
Subject key identifier:   85:58:01:7D:77:D2:D1:71:A1:EF:B8:E6:FF:5A:62:18:35:B4:CE:8C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E086633AE8DFEB2A770BDC180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.96.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:33:ae:8d:fe:b2:a7:70:bd:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=529b6f86-515a-46a8-bbfe-c3fee6daf745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:d3:9a:f6:8e:fd:0e:80:9a:9b:57:4b:bb:
                    c8:c6:d9:20:ed:5b:da:1c:56:bd:55:83:9a:a2:a7:
                    0e:33:9e:c0:0e:0d:8f:48:4d:e2:d8:77:97:e7:1c:
                    1a:02:93:c1:aa:54:ef:af:d6:39:24:63:b0:b1:1c:
                    43:bd:fe:aa:e8:20:32:9b:0c:53:12:a3:81:d1:78:
                    c1:81:72:b2:11:57:57:5a:92:5d:48:ee:23:cc:e9:
                    61:c2:a5:16:33:ca:10:ac:90:4a:d4:aa:7e:cd:cb:
                    79:03:7a:de:e0:64:a3:c3:47:73:b2:9e:f6:1c:2e:
                    77:4e:26:b2:28:32:d8:32:e5:08:6d:77:a8:57:87:
                    ee:49:da:70:30:c3:df:af:b9:12:5d:db:b0:57:f5:
                    0b:2c:ef:a4:c1:39:8f:67:34:16:14:f5:27:99:b5:
                    10:85:41:26:19:0f:ff:1d:2c:4e:5b:b1:cb:42:52:
                    39:be:a1:77:7a:5f:8e:b0:51:74:77:38:1b:c3:be:
                    c9:2e:f3:77:31:f3:bb:1c:47:aa:5f:e0:cb:7d:05:
                    32:98:79:26:76:16:88:1f:b3:95:58:d0:10:cd:13:
                    12:47:8c:33:eb:09:15:85:6d:1e:bb:4c:78:2f:36:
                    dc:a9:67:38:a2:cc:73:2f:4b:ad:94:af:04:9c:7f:
                    ba:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:58:01:7D:77:D2:D1:71:A1:EF:B8:E6:FF:5A:62:18:35:B4:CE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.96.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:e1:5b:53:00:4d:a1:c1:fa:9e:e1:a5:ec:54:9a:c5:3b:
         a7:f9:0c:9b:13:17:2a:69:32:5b:b8:d4:2d:1c:8a:cd:54:59:
         db:74:cf:c4:fa:af:3b:c2:59:16:6f:aa:f3:c7:8e:f5:7a:39:
         8d:6c:ac:4d:f8:bc:a7:73:9c:ab:f7:51:79:d5:ec:41:b5:a5:
         55:68:be:8d:fa:26:35:dc:04:eb:b7:24:b7:02:89:2a:6e:f6:
         59:19:ad:24:02:31:8b:12:de:07:2e:74:e7:90:62:82:eb:6f:
         bd:52:ff:b5:8f:30:49:1c:07:18:3a:af:03:68:6f:e8:b2:69:
         d7:8b:20:ce:78:dc:51:6e:53:20:81:2d:ac:9e:28:1f:57:70:
         fe:63:59:95:9b:41:18:b5:a9:82:e2:6a:21:4d:64:17:0a:d5:
         c3:bb:73:6b:78:36:3d:23:08:7a:ec:e8:0a:aa:5c:19:51:fd:
         56:da:5d:c5:dc:c0:c1:f0:b5:33:8d:29:c9:de:79:66:6d:b1:
         c1:16:b0:83:ba:b5:68:bd:51:65:83:a1:d7:a5:b2:b6:cd:91:
         d9:f0:41:cd:68:01:61:e1:4c:42:49:a1:d8:f6:22:9b:ca:a5:
         d4:a7:11:d0:3b:d3:d6:f3:0d:61:14:37:92:34:8b:7f:35:dc:
         8f:76:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:16 2026 by rpki-client