Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eb9f6f7-9b8a-3cfc-b9b6-96eb028bda9a.roa
File:                     0eb9f6f7-9b8a-3cfc-b9b6-96eb028bda9a.roa (raw, json)
Hash identifier:          FK1AWTyreLIJ6Br0jLYyqjhbBZQbfe3lrTDwy0qiiZk=
Subject key identifier:   A4:F9:E4:7A:05:78:6F:9F:3D:97:D2:4F:DF:DE:E0:FE:51:B5:31:C2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA787C8DF886C7677B9838680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eb9f6f7-9b8a-3cfc-b9b6-96eb028bda9a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     43515
IP address blocks:        34.1.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:c8:df:88:6c:76:77:b9:83:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=80ade34a-e3ee-4453-ab72-3e62498fde2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:6c:5a:2a:71:f2:20:e3:6d:8e:85:97:27:
                    b5:54:24:8a:68:f9:6a:3b:c9:28:63:6d:3e:fe:1f:
                    0d:de:4e:11:20:3d:5c:f6:44:9b:03:ff:be:34:29:
                    84:17:3c:64:67:0a:90:d4:bb:7d:4d:13:28:fe:01:
                    46:8a:c2:66:1b:c4:2b:2b:ef:f3:f5:dd:4c:ed:3d:
                    bf:58:45:b1:e4:25:87:e2:32:a0:dc:3c:71:f6:6f:
                    44:fa:86:f0:e6:6e:5b:db:6a:45:c5:96:5f:98:1a:
                    d1:9b:d2:9e:f2:4c:78:7c:02:a7:29:a0:3c:c7:9e:
                    85:03:53:1e:5c:32:83:50:69:16:88:b0:cf:d8:e5:
                    04:8d:1e:33:bc:3e:ff:dc:32:9d:de:61:53:a1:96:
                    dd:99:d7:76:3d:f9:69:03:6c:ea:4c:73:89:e6:3f:
                    f9:f1:d7:3c:59:a1:eb:40:b0:46:37:48:be:95:92:
                    4e:c7:37:56:b3:ff:62:fc:be:d9:33:16:1d:a0:9c:
                    91:67:0f:e0:09:60:c3:95:14:56:4b:df:59:a3:47:
                    6f:af:3a:08:e1:73:79:fd:d3:01:5d:21:e9:a4:a6:
                    08:0e:7b:da:29:7e:05:e6:0e:53:17:31:81:d0:96:
                    67:8f:b2:76:18:6b:8d:b6:af:a7:10:04:ff:5b:fc:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F9:E4:7A:05:78:6F:9F:3D:97:D2:4F:DF:DE:E0:FE:51:B5:31:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eb9f6f7-9b8a-3cfc-b9b6-96eb028bda9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:10:f3:70:02:05:af:72:aa:83:92:21:8a:e1:2b:d9:3c:c8:
         37:2d:cd:2d:71:a6:9c:70:c4:fe:6a:3d:63:56:ef:f9:0b:a7:
         92:de:31:cb:0b:e4:99:a2:0b:b4:76:a0:49:0e:81:30:2c:84:
         45:ed:1a:31:26:57:92:a1:63:f8:72:9b:9c:b2:e8:c4:5e:c4:
         16:67:4a:c7:6f:8c:23:0a:08:86:0b:33:53:22:27:96:a7:b4:
         12:44:ad:86:7f:f9:04:b5:21:00:02:49:6b:9c:82:43:c7:48:
         c1:c9:09:ac:8b:65:b1:a8:49:0e:37:48:da:1e:f5:2b:5f:84:
         01:fa:5c:c9:39:67:c7:02:f9:7c:0b:3a:50:4b:dd:b8:51:8b:
         f8:37:b4:c1:9c:71:ea:82:af:b7:be:5d:3d:aa:f8:3c:3f:a2:
         c7:42:26:29:bd:93:8b:00:0b:d2:1b:6e:00:6e:23:08:a7:97:
         6e:be:f6:7c:e3:c3:63:6d:50:20:37:1e:34:63:9e:af:8b:70:
         a3:69:61:97:da:a9:d2:c7:52:d8:39:fb:ef:47:7b:c1:5d:41:
         02:79:0a:6f:f0:60:88:d0:1a:1a:cb:03:00:dd:81:5b:53:fa:
         48:a5:0b:eb:56:d4:fa:67:0c:4a:1d:4b:25:45:69:9a:a9:6b:
         84:d6:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:23:38 2026 by rpki-client