Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa
File:                     0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa (raw, json)
Hash identifier:          zpbh0bnMiBmUNWnD4NlSMLyomCrD/QtjhImPIbXuRuI=
Subject key identifier:   F4:E8:20:19:44:61:DF:42:C4:D9:3D:01:E2:40:D7:2A:F7:35:CE:18
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E0866296EC2D06FF53F819240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.21.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:29:6e:c2:d0:6f:f5:3f:81:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=4fdf79f5-1ec6-4501-ad20-3382c637756e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:01:cb:e4:76:99:e3:10:5a:18:e7:e2:aa:
                    f0:b3:98:8a:cb:ba:1c:33:c2:4e:74:a8:c3:a8:0e:
                    88:ac:1b:3c:4a:d7:da:c1:87:c4:b9:12:08:10:bf:
                    88:2a:51:22:d4:8d:c4:52:36:79:30:d2:ba:e2:d8:
                    93:6d:2c:78:9f:d9:a5:a5:aa:dd:4c:79:29:ab:af:
                    b7:3a:48:92:e7:66:ec:19:15:0e:2c:59:08:96:82:
                    b9:7f:5a:73:e6:b8:0e:7e:a7:4d:7b:e5:31:d1:a4:
                    01:8e:0c:a4:74:7b:b3:3c:5e:5a:b9:e3:fc:cd:80:
                    21:56:b4:b3:ad:68:9f:fe:33:42:b2:10:64:0f:c1:
                    20:4f:f2:65:c2:b9:19:53:07:eb:b4:fd:f2:1f:7a:
                    be:6e:81:0f:86:15:aa:1a:c1:62:f3:d2:03:62:55:
                    09:5a:52:28:15:ff:3e:6c:c0:8f:ef:ff:69:b9:bc:
                    0c:f0:37:e8:2f:18:4f:4e:14:74:a0:22:4f:5a:7e:
                    bc:a2:d6:5b:3b:d1:1f:f7:36:3c:ca:cc:c5:0e:24:
                    e4:f3:6f:ab:ce:a7:7a:ae:e5:09:ab:b7:62:86:5f:
                    b4:aa:8a:a3:ce:4e:2d:97:0f:ba:45:d7:f2:39:ae:
                    da:50:77:e0:55:82:9e:b3:6f:51:96:3a:87:da:84:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E8:20:19:44:61:DF:42:C4:D9:3D:01:E2:40:D7:2A:F7:35:CE:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.21.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:55:7d:da:58:e7:ff:e2:be:fd:a8:c4:75:3e:cf:0c:ba:54:
         3d:ad:a1:71:5f:35:11:a3:f0:b5:7b:de:ef:60:24:9c:17:f5:
         ef:4e:26:82:3c:1f:22:ca:bf:54:d5:38:72:f3:da:72:a9:2d:
         e0:ab:b2:20:6c:0b:8f:ad:03:52:be:55:cc:60:60:a4:1a:b8:
         62:50:6c:f6:ab:25:04:08:38:10:25:e9:d9:65:ce:57:c3:88:
         a1:07:72:73:80:00:33:90:a9:a3:1d:d9:7d:8b:f9:ba:61:12:
         bc:dd:5d:b1:d3:d8:ed:b0:15:a0:d8:c9:67:4a:60:f0:e5:10:
         46:37:82:bc:d3:65:d7:73:26:49:f0:2d:74:01:8b:d1:a9:96:
         47:a2:0b:6c:e4:7e:30:18:82:be:3c:44:11:1c:06:f3:20:42:
         32:ad:cc:cb:e6:57:00:ae:44:97:9b:f7:24:2b:26:ef:47:6d:
         20:83:1c:3a:2d:2a:9a:38:b0:f1:e7:69:b0:bc:4f:43:2b:bc:
         d4:d0:56:a3:ae:19:93:68:7a:ca:be:1c:83:b0:9d:a8:1b:28:
         f2:65:ab:27:52:ea:be:b3:fb:1d:5e:3c:42:8b:a3:ec:ad:8a:
         bd:55:3c:8a:ff:66:b9:d8:4f:87:01:41:4c:0d:80:3e:be:a7:
         3d:38:e1:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZiluwtBv9T+BkkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
NGZkZjc5ZjUtMWVjNi00NTAxLWFkMjAtMzM4MmM2Mzc3NTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNQBy+R2meMQWhjn4qrws5iKy7ocM8JOdKjD
qA6IrBs8StfawYfEuRIIEL+IKlEi1I3EUjZ5MNK64tiTbSx4n9mlpardTHkpq6+3
OkiS52bsGRUOLFkIloK5f1pz5rgOfqdNe+Ux0aQBjgykdHuzPF5aueP8zYAhVrSz
rWif/jNCshBkD8EgT/JlwrkZUwfrtP3yH3q+boEPhhWqGsFi89IDYlUJWlIoFf8+
bMCP7/9pubwM8DfoLxhPThR0oCJPWn68otZbO9Ef9zY8yszFDiTk82+rzqd6ruUJ
q7dihl+0qoqjzk4tlw+6RdfyOa7aUHfgVYKes29RljqH2oRrwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPToIBlEYd9CxNk9AeJA1yr3Nc4YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGE0M2U0NzgtZmM1Yy0z
OWQ5LWJmMjMtZjU4ZTNjMDkzZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlVfdpY5//ivv2oxHU+zwy6VD2toXFfNRGj8LV73u9gJJwX9e9OJoI8
HyLKv1TVOHLz2nKpLeCrsiBsC4+tA1K+VcxgYKQauGJQbParJQQIOBAl6dllzlfD
iKEHcnOAADOQqaMd2X2L+bphErzdXbHT2O2wFaDYyWdKYPDlEEY3grzTZddzJknw
LXQBi9GplkeiC2zkfjAYgr48RBEcBvMgQjKtzMvmVwCuRJeb9yQrJu9HbSCDHDot
Kpo4sPHnabC8T0MrvNTQVqOuGZNoesq+HIOwnagbKPJlqydS6r6z+x1ePEKLo+yt
ir1VPIr/ZrnYT4cBQUwNgD6+pz044Tc=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:13:56 2026 by rpki-client