Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca8085c2-dea0-3de5-bc68-a7f5a466c309.roa
File:                     ca8085c2-dea0-3de5-bc68-a7f5a466c309.roa (raw, json)
Hash identifier:          uaHFNSGdNcrpsl02BI8f9g1AHR9msT32sG3y/x4LN0I=
Subject key identifier:   7C:E4:29:38:D4:7E:7E:16:A5:07:9B:54:60:A4:DD:24:7A:A1:D6:69
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA787C1CDFB12AADE939EFAC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca8085c2-dea0-3de5-bc68-a7f5a466c309.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     43515
IP address blocks:        34.1.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:c1:cd:fb:12:aa:de:93:9e:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fa82ffbd-4ca3-4863-845d-a982d84f06db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:79:70:27:3d:17:cf:f2:dc:0d:83:df:5b:
                    5e:bf:f9:8e:bb:9a:65:39:b3:af:af:69:10:20:12:
                    02:6c:3a:4e:77:16:14:4b:1b:e1:d4:90:37:b3:49:
                    ef:c7:41:b7:d3:ea:5d:bb:fa:2f:6b:3c:7a:09:a5:
                    2d:9b:a9:19:5c:83:b9:d6:2f:45:15:20:36:75:30:
                    a1:20:b9:47:de:8c:37:03:60:1a:c3:be:20:7e:ad:
                    a4:3e:e6:85:09:1a:d4:46:2c:34:ec:bc:61:5e:f2:
                    71:ed:5d:a8:39:ba:13:ed:a2:3c:6e:29:f7:d8:52:
                    1c:30:aa:f5:35:20:97:4f:10:01:ba:5c:0c:c7:8d:
                    19:fb:f5:45:4a:20:80:e1:fc:5a:1b:e4:b1:c6:9a:
                    e5:db:fe:54:d4:eb:5e:6e:16:be:95:58:b8:b8:e7:
                    a6:52:31:c2:3f:ee:ef:f5:c4:25:c9:57:4f:3a:74:
                    df:83:f0:66:8e:53:72:d1:08:18:df:c2:2b:cc:2f:
                    59:35:da:7c:fc:fb:e4:fd:56:17:1f:e9:e3:0c:e2:
                    95:fd:9f:e1:aa:55:39:1a:57:dc:72:6d:77:b0:cd:
                    ab:f9:c2:b3:34:63:d9:6f:4f:7b:99:06:0a:26:f7:
                    7a:e0:25:31:97:5c:c6:fa:69:c4:1b:06:dc:b4:14:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E4:29:38:D4:7E:7E:16:A5:07:9B:54:60:A4:DD:24:7A:A1:D6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca8085c2-dea0-3de5-bc68-a7f5a466c309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:db:b9:0a:b5:11:cd:f4:09:fe:cc:24:16:90:4b:1d:7d:
         b8:de:d6:ca:63:ea:79:ff:f6:25:12:e7:60:0e:a2:5b:5e:ab:
         6d:6b:42:81:75:94:f2:4e:23:97:a7:11:89:c0:15:78:d7:d4:
         55:9c:1e:f0:4b:16:f2:ef:57:ee:4e:6b:4d:0e:e5:94:46:7d:
         3b:f2:a1:f3:ca:7c:45:e2:47:95:2c:6f:24:24:cb:3b:37:4c:
         af:2c:2c:96:bd:7c:10:a2:7d:2e:86:64:52:76:c3:a2:48:8c:
         12:62:51:52:b6:e5:ea:b0:7f:ac:07:83:11:ff:e0:94:ad:f9:
         40:6c:52:42:4c:43:2b:62:1a:05:27:80:c5:2b:66:2d:8f:e4:
         d3:89:c7:40:60:0c:ea:35:6b:23:4f:5e:e2:b7:cd:0f:9a:cf:
         d2:8e:a3:9b:91:d6:88:0d:3a:57:3d:b0:7e:90:ea:a8:90:79:
         7e:78:d5:36:7f:47:88:09:58:fc:e8:c5:7c:3d:e8:14:af:c8:
         2b:2e:b0:00:80:1c:f1:16:34:c1:6a:88:41:09:42:d0:2f:61:
         e0:a4:d8:0f:5c:fb:07:f5:ed:44:95:af:e0:bd:15:3f:b1:de:
         ba:19:e2:bb:b9:ab:f0:90:53:97:db:8a:80:6e:24:04:a7:7d:
         aa:6d:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:59:44 2026 by rpki-client