Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eab0afb2-c160-36d0-add4-48cdc404624b.roa
File:                     eab0afb2-c160-36d0-add4-48cdc404624b.roa (raw, json)
Hash identifier:          l+mVvEwj2Z2tfRuUkfgj78+Hjp5MO8+lu7tx4BJxsb0=
Subject key identifier:   9A:42:6E:59:C9:F6:27:3D:68:6B:60:68:ED:37:CF:5B:D0:A6:F0:2C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E059BD26D395103268F5D7800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eab0afb2-c160-36d0-add4-48cdc404624b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     19527
IP address blocks:        34.0.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:d2:6d:39:51:03:26:8f:5d:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ea49741b-7581-468d-971b-a7d7067a44cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:c5:ab:a0:05:f9:9a:12:9a:7a:0e:9a:61:
                    43:96:ad:4f:40:77:32:f8:9c:ad:bc:f0:4e:60:7d:
                    3f:ec:7f:c7:8b:84:1a:ab:4e:e5:67:d4:09:ff:6c:
                    f8:1c:38:8a:98:dd:b0:a3:4b:39:8c:0f:3f:7f:04:
                    64:f0:94:af:44:e7:28:93:85:fe:17:ca:23:74:88:
                    da:74:98:ff:86:26:5a:be:8f:4a:2a:a8:ff:ba:21:
                    08:5e:47:1d:fa:ce:cc:25:80:d7:f0:c5:cf:8e:32:
                    76:77:db:55:af:b0:37:75:a1:fa:af:35:9d:b7:d5:
                    55:0d:c4:16:76:7d:68:80:e5:ae:c6:2b:8c:25:e7:
                    25:74:64:74:1d:a0:2a:99:84:3f:d2:6a:34:d1:60:
                    db:b4:f0:5b:d6:9f:c3:45:41:5c:f9:05:eb:60:58:
                    1a:3b:8a:70:2e:0d:7a:88:d8:9e:e3:37:76:24:d7:
                    9c:63:c7:1e:3f:d0:24:9d:a7:21:84:6b:20:11:f9:
                    8d:76:19:70:d7:56:98:e8:6c:2a:25:95:42:c2:87:
                    0d:99:54:35:22:a3:65:c3:10:a1:df:5e:d2:1e:b7:
                    44:eb:e4:48:1e:3a:a1:75:21:3b:e9:8c:90:2b:1a:
                    3d:4f:b3:68:45:4f:b3:3c:dc:d1:62:2f:a6:25:3d:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:42:6E:59:C9:F6:27:3D:68:6B:60:68:ED:37:CF:5B:D0:A6:F0:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eab0afb2-c160-36d0-add4-48cdc404624b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:2b:f7:6f:73:ee:2f:70:4c:e0:cc:a5:17:b2:0a:79:86:
         64:22:30:28:78:9d:29:db:35:65:07:b4:da:e2:75:04:c4:ca:
         46:c4:2d:f1:c7:87:a9:0e:37:b5:15:35:cd:51:95:95:66:01:
         04:41:64:f9:94:a0:82:6e:23:5c:5d:75:51:53:40:88:bc:21:
         db:9d:e1:6f:5b:cf:27:e4:d8:22:72:b2:b1:f9:f3:e9:29:3d:
         20:03:26:9e:eb:0b:54:42:dd:59:81:f7:20:b5:a8:1e:f2:7f:
         0c:41:63:4c:1a:94:aa:69:b1:e3:4b:82:b4:88:50:a8:b5:31:
         ec:59:6c:e1:51:4f:1a:c0:64:74:fc:58:f7:17:08:ae:9b:1f:
         69:5b:9b:8f:7e:76:7e:cc:c8:11:e3:ed:5c:6f:72:9f:04:1e:
         07:0f:80:0f:63:ca:a2:fd:11:66:13:a5:bf:f6:fb:22:77:d7:
         f5:31:84:e8:04:cb:b8:1e:4c:6f:81:72:f9:ea:ed:65:c0:81:
         0f:7e:1f:f3:a0:ec:d9:da:36:65:ae:ab:8b:11:ab:9b:61:28:
         5b:25:4c:ec:0f:1f:57:15:8a:24:81:1d:18:2f:51:e6:4a:6f:
         64:2c:43:09:fb:49:04:dd:3a:40:05:0c:f1:b7:bf:54:ff:aa:
         36:7c:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:36:02 2026 by rpki-client