Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/143c6a5f-36a5-3e84-b644-25367deeba93.roa
File:                     143c6a5f-36a5-3e84-b644-25367deeba93.roa (raw, json)
Hash identifier:          abk3JE/8YK7zMj0KNDjhQd/F36u708YCvu5KLHOzDZA=
Subject key identifier:   56:1A:16:99:0C:D2:AC:82:E2:5C:9A:81:55:E9:3F:A6:03:C7:D1:A9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D92BDD40C087C5D2E1880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/143c6a5f-36a5-3e84-b644-25367deeba93.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.22.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:92:bd:d4:0c:08:7c:5d:2e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=4c59903c-c239-4399-af0c-67fe0eeb9800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:d4:b6:1f:88:c7:42:38:95:97:df:14:89:
                    41:cc:8d:bc:95:23:a3:88:a1:cf:2f:41:b6:58:73:
                    0a:21:d8:88:f7:c7:c1:f0:68:67:bb:06:f8:0e:f5:
                    f8:74:20:f8:65:5b:89:d8:04:f9:f9:6c:11:17:ac:
                    4f:6c:7f:41:85:14:9d:5d:aa:7c:ed:63:43:e1:fe:
                    33:23:55:8a:ea:df:5b:31:4d:5c:a2:4e:9e:61:cd:
                    bf:e1:23:d5:79:88:a9:76:48:53:66:64:d2:5b:93:
                    98:4e:1b:3b:70:48:e8:b0:c8:94:4a:80:91:50:44:
                    b3:23:84:74:92:bc:08:60:3b:65:a0:17:24:ce:5f:
                    ef:5c:8b:a2:55:26:43:27:39:a3:7c:48:4d:07:cd:
                    68:69:c4:af:ab:f0:6f:c3:8e:50:ee:79:d7:27:0d:
                    ba:a5:53:f0:6c:af:67:ce:f6:16:2b:18:ba:9c:02:
                    79:31:62:fa:9f:0f:f9:d4:c9:05:b8:d7:ef:10:dc:
                    95:f9:09:c0:44:f9:ae:fc:13:aa:95:44:b5:f3:f6:
                    31:78:cd:cd:1c:32:54:13:9c:b3:cf:19:9f:83:66:
                    07:83:74:94:77:f5:8b:ed:ae:68:b1:01:d2:d8:df:
                    fb:94:04:5a:dc:11:61:d8:96:94:78:73:eb:df:ef:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1A:16:99:0C:D2:AC:82:E2:5C:9A:81:55:E9:3F:A6:03:C7:D1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/143c6a5f-36a5-3e84-b644-25367deeba93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.22.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:dc:ed:10:4a:6a:c6:4a:48:63:00:1c:86:fb:a5:2a:12:
         34:0c:06:94:27:1d:70:3e:b0:75:0c:b3:58:db:22:a0:64:32:
         5f:ec:84:f5:77:8a:c9:c0:f9:8d:ff:88:6e:91:20:9e:67:5d:
         ee:37:2b:5a:8a:c9:68:7e:d6:5a:e1:2e:de:19:ef:eb:88:d5:
         fa:c4:ba:e6:c9:e9:46:08:b4:24:87:ba:35:b3:d9:23:7d:72:
         80:60:95:0e:ab:63:af:bd:aa:21:fc:31:0a:14:02:58:82:13:
         2f:22:c6:e7:04:c6:48:5c:37:bb:e4:fc:12:c0:85:1a:1d:92:
         b1:7e:ee:2c:68:5c:0f:8f:76:4c:8e:50:c9:71:f1:18:07:1e:
         29:23:e8:7e:1d:be:ef:fd:dc:d2:a2:3f:3a:38:8a:5e:3c:1b:
         39:97:d4:de:4b:91:ab:1d:2a:13:c7:bf:51:01:28:18:83:c0:
         02:c6:84:1a:a4:3d:eb:0f:4e:12:d0:2e:67:2d:8f:0f:67:a8:
         f6:ff:d4:4e:69:d6:94:48:14:06:c4:97:07:d7:4d:5d:66:52:
         0a:ae:ea:26:1d:fd:b0:fc:e3:88:c9:14:fb:55:17:c8:2b:d4:
         96:41:2a:20:c6:e7:8b:aa:32:ff:ea:ab:c1:88:91:f8:07:13:
         2d:9a:27:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:25:15 2026 by rpki-client