Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa
File:                     d1298af5-c68f-32c2-8389-932d2088da4a.roa (raw, json)
Hash identifier:          i9HP12jzpPxpcHj4A1lLhwYwEQOZZNG/Af+M6Cja7/M=
Subject key identifier:   F2:63:EA:1F:0F:A5:EA:31:6C:0C:3F:D9:A5:77:95:6A:4C:05:60:9A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F698D9B03CCEC28DE22B55580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     15169
IP address blocks:        34.190.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:9b:03:cc:ec:28:de:22:b5:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=215735f0-3bea-466d-acc7-72e54434207a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:fd:29:f3:fe:ba:5b:08:b6:19:15:8d:15:
                    c4:f8:e9:28:5b:71:f3:1e:66:6b:a2:ed:92:84:ae:
                    94:a1:a1:82:da:49:71:a7:98:a9:62:96:69:02:43:
                    27:3c:75:0a:ec:f7:f7:06:a6:cf:c1:c8:e8:e6:50:
                    99:c8:27:af:a8:fa:da:25:1d:f1:44:8e:91:f9:a0:
                    47:77:04:38:2e:15:29:ae:5b:53:dd:20:15:d2:33:
                    e7:17:63:6e:2e:f1:dc:74:3c:22:bb:52:bc:ae:a1:
                    3a:bd:95:32:87:ff:40:0f:63:8e:7d:36:34:b9:52:
                    38:2c:c8:74:c8:45:ef:36:bb:f4:23:58:0f:ae:b6:
                    9a:78:fd:48:ea:7a:1b:0a:7d:ad:bf:aa:9f:55:a3:
                    25:72:bf:10:a9:77:54:77:02:9e:b3:3c:fd:da:fe:
                    b0:61:73:88:03:db:53:6d:92:88:13:05:4d:c7:2c:
                    4a:11:f0:9b:0d:1b:b1:26:6a:d3:17:11:56:fb:71:
                    39:a1:3f:b0:e0:54:b5:d9:3f:20:05:2b:c2:e2:97:
                    4f:e2:4c:bf:cb:d5:2a:cf:a1:b7:a3:f1:ae:d4:a1:
                    40:79:02:a0:02:0d:ac:cc:0b:fe:e8:e4:8e:98:84:
                    4c:3e:fd:3c:a7:6b:57:f0:5a:44:1d:8b:92:c0:20:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:63:EA:1F:0F:A5:EA:31:6C:0C:3F:D9:A5:77:95:6A:4C:05:60:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2b:cf:2f:f4:63:9e:36:86:63:bc:13:40:3a:e4:dc:ac:1c:
         5e:aa:4a:7c:f7:e5:26:12:ca:9f:c4:61:05:e3:7c:a9:04:58:
         7e:d1:9b:0f:20:26:0b:ce:8b:82:80:e8:99:e1:5d:cb:7d:56:
         99:15:11:0c:43:f2:a8:4e:f1:d5:fe:ba:bb:6e:b1:0b:33:5b:
         b7:3d:ce:dc:2c:2a:62:f5:05:4a:39:37:a9:30:b9:4e:61:8b:
         4c:77:f3:e5:a9:01:f2:51:05:a8:ab:4e:d8:0a:be:d6:0c:7e:
         18:9f:7d:d2:e8:a6:60:0c:5f:5e:9a:a6:73:f3:31:ac:bd:75:
         4f:ca:5b:b9:84:12:b6:c5:64:54:b3:67:85:31:37:30:f5:4d:
         3f:86:77:de:ea:0d:00:dc:86:f2:11:79:45:0d:db:ad:f4:c1:
         11:11:6d:a5:20:a6:15:d1:bc:51:8a:f1:8b:8b:5c:ca:90:9b:
         03:47:ab:78:fe:df:d4:73:12:38:a4:11:31:ca:e1:9a:f3:17:
         6b:07:f0:0f:ee:45:d1:c8:64:9c:2c:f7:36:4e:d7:c3:4a:ae:
         7f:ca:94:73:f2:25:de:ad:42:6f:b3:d1:59:77:ab:38:34:a4:
         97:7a:7c:11:71:46:d1:94:b9:dd:66:d5:14:fe:c8:65:df:77:
         c9:6e:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:39:35 2026 by rpki-client