Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/287c2b46-36f0-3220-bd16-4b3194091d8a.roa
File:                     287c2b46-36f0-3220-bd16-4b3194091d8a.roa (raw, json)
Hash identifier:          OHRx/dkoqPgmzdfTKIFA861VDVmV5xlhKAI4Ys0FYTg=
Subject key identifier:   CB:81:AF:DC:DA:55:CF:61:77:19:45:2F:EE:F2:07:2E:48:32:76:68
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CFB1CFE95BAFBE2F4F5B66C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/287c2b46-36f0-3220-bd16-4b3194091d8a.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     19527
IP address blocks:        34.4.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:fe:95:ba:fb:e2:f4:f5:b6:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=dfaf6458-8f25-4aae-9f30-78b181922fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:c9:dc:38:49:03:0e:15:1a:bc:02:45:c2:
                    44:3b:9c:82:16:76:d8:85:62:6a:9b:b7:97:2e:4d:
                    0c:a4:22:10:ad:8a:75:17:e0:c6:22:be:99:06:4f:
                    5b:e4:d5:5b:c9:db:1f:06:b9:60:2b:67:9b:92:92:
                    38:84:68:60:ea:38:cd:14:60:8b:1b:23:b0:67:e8:
                    0b:ed:3d:5b:8f:bb:8b:22:cd:1b:77:8f:db:36:f8:
                    be:2c:d0:b3:b0:bf:2e:5e:0b:42:87:05:37:df:bc:
                    7a:e4:62:fa:94:71:1b:22:1e:b2:68:2e:f0:78:eb:
                    39:55:df:a6:0a:39:bc:92:24:0d:7f:a9:86:96:49:
                    42:84:bc:6f:da:a7:94:66:05:13:2d:3b:59:a4:d3:
                    ef:33:c9:64:28:f0:55:e3:72:ff:95:b7:95:2f:49:
                    ac:5e:58:29:74:2e:14:61:bf:8a:9e:46:9f:b6:a7:
                    51:ec:7c:c0:ae:e4:52:21:14:51:8a:cc:96:9e:b5:
                    99:4d:54:00:9c:ea:be:c3:67:9d:45:99:64:00:91:
                    b1:22:45:4e:bf:28:8f:8b:4c:1f:38:ca:78:0f:c2:
                    e3:22:31:c9:3c:08:28:7f:40:48:d2:02:63:3f:e8:
                    40:47:90:b8:27:d4:04:cd:52:63:39:0f:f6:b8:e6:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:81:AF:DC:DA:55:CF:61:77:19:45:2F:EE:F2:07:2E:48:32:76:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/287c2b46-36f0-3220-bd16-4b3194091d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:95:5d:d0:8c:33:13:a3:49:be:57:6e:9b:bd:96:88:3b:7d:
         5f:86:bd:0e:7b:f8:e3:c9:22:69:f1:5b:34:5d:a0:3e:b3:14:
         ca:92:63:12:0a:38:25:59:f1:94:47:df:6c:a2:54:4f:03:3a:
         cd:aa:4a:4d:72:38:fb:5e:2a:49:34:61:8b:3c:54:5b:8a:3d:
         91:17:0f:1c:77:0d:0d:0e:54:ff:14:36:1a:5c:29:74:ba:e6:
         1f:cb:03:d1:c8:0a:87:f5:36:20:4f:5e:d6:8e:06:8f:30:fb:
         9e:57:99:ae:3c:9c:ab:b0:6f:80:ca:82:dc:c1:4a:da:bd:6b:
         99:64:54:48:b6:78:19:06:37:d0:12:8d:1e:77:a6:2b:57:3d:
         1b:45:6d:ce:26:42:dc:6e:02:fd:fd:88:f2:aa:7c:48:aa:a5:
         1d:cf:53:ef:cf:db:ce:84:32:d2:b4:72:3a:9b:b1:b8:2f:59:
         45:fb:72:de:30:e0:a8:14:3a:0e:71:93:ca:d8:29:a9:98:39:
         0f:24:37:18:9f:7d:73:c9:2b:e5:37:f0:09:d4:25:72:54:41:
         54:25:28:74:76:ea:7d:14:2c:98:dd:4a:00:37:d2:61:a0:86:
         b6:76:ed:ac:d8:56:2e:42:19:41:66:f0:f4:58:02:f4:49:b7:
         a6:71:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:50 2026 by rpki-client