Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/359ed621-fbe0-3d6e-b211-65fd21dc1339.roa
File:                     359ed621-fbe0-3d6e-b211-65fd21dc1339.roa (raw, json)
Hash identifier:          DI0jMY/WxqPG9FKTDHjaLb8PshXaBWUZpzFffbA5dtk=
Subject key identifier:   E2:43:59:5A:8C:DF:F9:59:2D:CA:A4:A7:AB:90:64:C4:5F:AC:6A:73
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E086643879AAB955D8E267180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/359ed621-fbe0-3d6e-b211-65fd21dc1339.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.140.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:43:87:9a:ab:95:5d:8e:26:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=3c060535-40aa-4225-ba1a-ee65b332b812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:7a:6e:e8:59:c5:45:75:98:c2:0d:aa:93:
                    31:56:21:d5:c3:e4:83:2e:f2:49:53:05:f2:75:96:
                    7e:6c:4e:6a:16:6d:f0:8f:e5:36:4a:26:2a:37:c2:
                    11:c5:2c:94:fb:29:f4:ab:d9:9b:30:be:6e:8b:8b:
                    0e:a1:da:df:48:29:cd:2d:e3:b8:f2:b2:08:19:85:
                    cc:d6:d2:5f:df:25:b2:94:f4:9a:5d:9a:75:08:7e:
                    28:39:ac:8b:e2:fe:15:d2:b1:83:7f:ed:94:2d:e4:
                    40:cb:30:c8:87:d2:ae:78:0a:f9:d5:e3:0c:68:9c:
                    c6:9c:76:34:c1:49:56:00:29:6e:a9:f1:9b:fd:79:
                    8b:1b:33:46:f1:29:99:d2:da:19:94:d5:23:b9:9c:
                    33:b6:52:15:21:67:53:c6:93:43:75:2f:d4:ca:5f:
                    f1:dc:11:3d:56:fb:36:3b:f3:82:c4:bf:cf:60:f1:
                    ba:cb:ad:67:9b:6d:bf:63:e2:d8:a1:33:9f:d5:d2:
                    aa:7b:66:9f:8c:2f:35:51:b7:e3:7a:f7:96:56:72:
                    53:40:cd:61:a2:55:a4:f6:c3:56:c6:f0:a7:f7:20:
                    69:55:96:98:01:91:f4:e5:8a:7b:58:e5:52:5d:e4:
                    43:1e:f2:ce:17:3f:08:ee:17:4f:6e:8f:41:55:3a:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:43:59:5A:8C:DF:F9:59:2D:CA:A4:A7:AB:90:64:C4:5F:AC:6A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/359ed621-fbe0-3d6e-b211-65fd21dc1339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e0:d4:16:95:21:e2:8c:b9:42:c7:d8:55:fb:49:e0:02:ce:
         f8:94:4e:81:80:ca:c2:48:f0:f8:f1:a0:52:a3:6c:c3:51:7f:
         29:f5:3f:c1:dc:1f:b7:fc:24:1a:a4:a1:bd:d9:75:a5:35:c9:
         b6:87:bf:ac:41:51:e2:69:d4:c8:17:73:2d:af:3d:2f:57:13:
         a5:06:b7:82:5e:5d:c5:94:0d:f0:4a:c3:60:20:a8:73:4f:e7:
         ef:d7:7c:d6:32:2c:7b:65:51:e1:64:b3:57:46:b3:12:23:03:
         43:a9:6c:4a:d0:92:85:22:59:09:cf:89:e5:b8:e7:9f:bb:6e:
         18:a8:f7:f0:09:9d:3e:19:04:31:4f:aa:a8:e5:9d:9b:53:46:
         2c:51:09:91:86:30:b5:4b:35:cf:9a:c2:8b:13:ca:d8:08:2b:
         89:b0:ba:29:a0:46:96:38:1d:d1:ab:c0:d3:57:70:d7:fd:a6:
         bb:cb:50:35:bc:90:1b:57:03:e3:b3:d4:89:af:a5:96:3e:b6:
         de:3d:70:1b:c8:0f:66:26:d4:90:55:06:b6:e0:ea:d0:4b:a8:
         3f:db:41:c2:14:45:4c:63:b8:be:46:6a:93:01:e9:85:8c:89:
         17:7e:1c:fb:41:8a:c2:58:8d:7a:c5:94:32:f1:91:52:58:e7:
         65:32:98:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZkOHmquVXY4mcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
M2MwNjA1MzUtNDBhYS00MjI1LWJhMWEtZWU2NWIzMzJiODEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIx6buhZxUV1mMINqpMxViHVw+SDLvJJUwXy
dZZ+bE5qFm3wj+U2SiYqN8IRxSyU+yn0q9mbML5ui4sOodrfSCnNLeO48rIIGYXM
1tJf3yWylPSaXZp1CH4oOayL4v4V0rGDf+2ULeRAyzDIh9KueAr51eMMaJzGnHY0
wUlWACluqfGb/XmLGzNG8SmZ0toZlNUjuZwztlIVIWdTxpNDdS/Uyl/x3BE9Vvs2
O/OCxL/PYPG6y61nm22/Y+LYoTOf1dKqe2afjC81UbfjeveWVnJTQM1holWk9sNW
xvCn9yBpVZaYAZH05Yp7WOVSXeRDHvLOFz8I7hdPbo9BVTp6dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJDWVqM3/lZLcqkp6uQZMRfrGpzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzU5ZWQ2MjEtZmJlMC0z
ZDZlLWIyMTEtNjVmZDIxZGMxMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIozwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXg1BaVIeKMuULH2FX7SeACzviUToGAysJI8PjxoFKjbMNRfyn1P8Hc
H7f8JBqkob3ZdaU1ybaHv6xBUeJp1MgXcy2vPS9XE6UGt4JeXcWUDfBKw2AgqHNP
5+/XfNYyLHtlUeFks1dGsxIjA0OpbErQkoUiWQnPieW455+7bhio9/AJnT4ZBDFP
qqjlnZtTRixRCZGGMLVLNc+awosTytgIK4mwuimgRpY4HdGrwNNXcNf9prvLUDW8
kBtXA+Oz1ImvpZY+tt49cBvID2Ym1JBVBrbg6tBLqD/bQcIURUxjuL5GapMB6YWM
iRd+HPtBisJYjXrFlDLxkVJY52UymGU=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:42:26 2026 by rpki-client