Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3823196c-ffe1-3608-8f83-e03cbc3b766f.roa
File:                     3823196c-ffe1-3608-8f83-e03cbc3b766f.roa (raw, json)
Hash identifier:          mfzQ96HPm+JmsFIIsyxCFcpjSKPWUlpbvZtDJ57I0hs=
Subject key identifier:   3A:9C:3A:CE:95:E3:56:18:C3:59:07:DE:A4:BA:06:1F:24:30:E3:9C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA79E93A8DC6601139E734740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3823196c-ffe1-3608-8f83-e03cbc3b766f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        34.104.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:93:a8:dc:66:01:13:9e:73:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1eb364da-e4ae-4472-9c6d-7556bd7e6115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:e4:29:74:f1:26:13:48:3d:0a:94:93:1d:
                    c9:84:5e:3a:d0:72:f6:4b:ca:5a:2f:2e:eb:ca:40:
                    93:77:ef:29:67:11:61:95:a3:63:b3:39:4a:94:2d:
                    54:c1:f7:8f:9b:68:aa:e7:f5:06:72:3f:29:e8:aa:
                    b3:ee:19:93:83:73:1e:52:70:c4:d5:96:cc:75:9a:
                    23:60:fb:bc:c1:99:38:cd:b0:6a:e3:76:7b:85:be:
                    db:79:a6:24:4c:a2:fd:42:c2:e2:44:cb:b9:90:29:
                    bc:b1:8a:e1:44:89:4a:01:31:ba:5f:d9:8f:bb:38:
                    8d:98:30:c3:e5:1b:26:3a:13:2b:3e:67:0d:27:42:
                    7d:2f:91:b1:a3:e6:41:10:e3:f3:bc:e5:da:2b:40:
                    ff:cc:fa:87:07:61:15:5f:d2:29:01:c0:5e:de:2b:
                    ff:58:a9:f5:d0:a5:b4:c5:1a:ab:ca:a1:d0:27:e4:
                    07:9d:6a:96:d9:4b:f4:1f:b5:b8:7e:97:eb:84:a3:
                    cb:86:9b:b9:02:1f:fa:7b:6a:68:33:e0:04:08:4e:
                    11:00:01:ab:08:5c:87:08:05:ee:70:84:af:03:73:
                    77:04:21:85:e2:96:a3:93:1e:0b:0d:90:c5:a3:52:
                    f7:44:04:9a:4c:34:27:77:01:a6:2e:f2:b9:1c:36:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9C:3A:CE:95:E3:56:18:C3:59:07:DE:A4:BA:06:1F:24:30:E3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3823196c-ffe1-3608-8f83-e03cbc3b766f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:ca:04:4a:a0:e5:68:dd:2b:fb:4a:96:22:08:63:26:5a:
         49:e6:67:d5:4f:40:92:1f:c3:7c:b6:7d:ba:a1:66:b7:fc:8d:
         94:5b:ca:b7:cf:cf:1b:ce:13:14:25:c6:b7:d3:99:d5:5c:a8:
         82:03:0b:14:f0:56:eb:eb:0e:5e:d2:ce:6b:f1:96:96:ee:0d:
         fd:38:74:20:07:5d:d3:e1:e0:f0:f4:68:42:84:8d:ca:2a:25:
         e4:c9:f2:cf:0e:82:96:99:7d:25:0d:eb:2e:e1:54:89:59:d4:
         5e:cc:a2:f7:32:a3:2c:5f:cd:9a:e7:b2:44:14:dd:d3:ed:12:
         e0:7d:be:4c:32:d5:38:99:57:39:26:4f:d6:31:4d:9d:72:09:
         db:e2:aa:ee:84:79:07:9d:7e:55:0c:89:4f:38:d5:e3:4d:d0:
         49:a1:59:45:55:30:08:1b:f8:1c:dc:8d:d6:ab:22:30:ae:89:
         50:39:fc:bf:3d:b7:8b:14:a0:3a:34:aa:79:57:c6:71:e0:07:
         7c:b8:d6:f0:cd:41:65:1c:52:03:cd:37:5a:1c:3b:a0:4a:6b:
         f8:a6:e8:5e:68:61:c6:f0:49:05:c4:53:ab:c8:71:17:38:f3:
         98:de:fa:53:3f:17:89:de:43:73:56:d8:89:f5:61:bc:35:39:
         e8:da:92:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:34:15 2026 by rpki-client