Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa
File:                     fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa (raw, json)
Hash identifier:          nP9csgqEUrU2uYSda1lTYPx47JOBfDLq/O5082kHbvk=
Subject key identifier:   1B:6A:01:94:40:98:E6:E7:28:75:E9:A2:23:62:AB:E6:1F:2D:9C:F6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CEA5CD26D80AF2F58F097F9DA
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        34.3.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d2:6d:80:af:2f:58:f0:97:f9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=fbe30f69-4df9-49dc-a3e4-0601274caa01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:86:75:e8:91:c1:b4:e4:67:33:06:59:f1:
                    e4:87:89:e2:ff:ad:21:bb:49:e5:e6:3e:f4:b5:93:
                    a0:a9:00:76:3b:c7:e5:42:7f:53:75:13:5a:67:73:
                    c7:ca:45:40:6e:be:12:15:74:60:a0:34:d9:b6:63:
                    81:e4:bf:06:15:ba:c0:c7:b7:b2:46:68:59:7d:8d:
                    55:ef:96:b4:ce:dc:bc:ca:d7:a8:58:55:1a:b7:5d:
                    1a:4d:1e:8b:c7:6d:68:8e:3d:1f:ea:71:76:4b:74:
                    c0:d1:9a:62:d5:84:44:f6:11:71:8b:44:f1:05:d4:
                    72:06:80:75:f8:03:c3:9c:16:e7:29:49:21:0d:8a:
                    85:9e:91:12:50:4f:4b:74:d8:b3:7b:45:b5:ac:78:
                    6f:ee:37:fe:8a:86:4c:36:a3:2e:bc:d1:56:d2:f7:
                    f8:72:8a:7c:4f:d4:61:65:77:f5:9a:2c:18:10:f1:
                    2d:15:e0:95:85:7c:11:67:47:73:32:76:2e:f1:21:
                    15:3f:70:4a:b0:ac:ac:da:3f:18:24:68:bd:1f:4a:
                    24:52:b1:36:ea:2f:39:d6:fd:65:80:43:a3:9a:02:
                    f1:e4:bb:f7:1b:56:86:85:16:fa:0b:f1:bf:09:10:
                    be:f1:88:3f:c2:7c:32:88:84:93:c5:05:95:fc:32:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:01:94:40:98:E6:E7:28:75:E9:A2:23:62:AB:E6:1F:2D:9C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1d:b1:a0:17:f6:a3:25:b9:19:fd:18:d5:0b:7d:3e:df:93:
         58:1c:a6:d1:83:cf:1f:68:38:3e:67:80:0b:39:bf:7c:b9:6b:
         c9:a6:c8:9f:74:75:e3:a1:34:cc:c2:ce:56:c5:f1:e4:a4:95:
         04:49:6b:82:96:46:93:e0:4e:ba:b6:98:b6:82:7f:fa:60:3b:
         cc:41:ef:f2:dd:a9:8a:7e:5a:5f:7a:8c:02:ea:75:11:89:4b:
         bc:e8:3b:33:87:8d:46:eb:bc:5a:47:28:9a:54:ee:0c:ae:23:
         91:fd:87:81:6a:aa:d8:c5:73:62:c2:b5:2e:34:ea:2d:85:82:
         fd:70:21:da:db:b3:56:a2:ac:46:70:82:0f:68:af:d7:f0:a2:
         c2:ef:76:18:3b:b9:3c:4b:be:35:ac:9a:69:68:8e:21:3b:64:
         4a:6b:d9:93:f5:04:0c:8e:f2:fa:88:38:d3:da:f0:11:43:cf:
         b4:b0:66:9c:03:ae:67:41:17:46:2e:1d:a1:3a:04:2c:cb:34:
         b1:6f:a6:4e:db:72:a3:12:f1:21:55:ec:5e:bc:43:9f:16:4a:
         24:5e:17:28:5f:51:12:5b:47:e4:21:99:9c:34:9a:39:1a:bd:
         56:74:9e:9b:68:f8:e4:9d:61:34:78:84:d6:41:b4:d1:a2:09:
         84:75:e7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:02 2026 by rpki-client