Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6f2ec24e-112f-3750-8a43-e86c3a130aed.roa
File:                     6f2ec24e-112f-3750-8a43-e86c3a130aed.roa (raw, json)
Hash identifier:          44njXihX530dsCSGgGDaANjR4U+BQpZOqQoP1GsnNEU=
Subject key identifier:   FE:18:4A:1C:EC:1F:32:7D:9F:ED:DD:F9:AF:C9:93:88:F9:E1:0D:92
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584BBE4050CBAE45966B938AF6C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6f2ec24e-112f-3750-8a43-e86c3a130aed.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     15169
IP address blocks:        34.112.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:50:cb:ae:45:96:6b:93:8a:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=94c1ae74-5418-4c75-80f3-ec32b7f9fda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:3a:7f:49:42:fc:9b:83:52:b2:5c:cf:2e:
                    9f:a4:a7:93:cb:be:8a:cd:5c:04:ad:49:73:d1:83:
                    e8:74:4c:93:51:d3:84:f3:db:0f:55:71:bf:70:08:
                    88:34:bf:b7:c1:1d:0f:39:a7:dd:6a:5e:c7:a2:0f:
                    47:83:d1:be:d5:1e:0a:09:70:f9:ef:b1:9e:41:92:
                    b9:4c:2f:5c:d9:56:c0:9e:60:9a:42:42:42:d6:5d:
                    b5:2e:ac:aa:c8:31:48:ec:66:db:f9:c1:e8:65:3f:
                    99:4a:96:c3:27:37:c2:43:01:59:3b:32:4f:36:fb:
                    31:a5:01:22:db:56:30:a8:b6:11:c0:e7:f2:ea:7c:
                    aa:12:a8:93:9d:01:d5:b2:53:8c:c8:76:04:38:a4:
                    7d:bc:75:6d:e0:a3:1b:d8:fb:44:92:b3:83:a7:9a:
                    82:3f:38:b2:64:12:41:70:71:b1:aa:2f:3c:b8:64:
                    80:c0:5c:7f:38:9e:23:0a:54:cd:f4:11:1c:57:b6:
                    47:12:35:88:81:ea:92:bc:bf:23:44:d3:9f:6a:b2:
                    e5:21:ed:47:9c:66:08:09:dd:a5:39:1a:c5:51:11:
                    4e:0c:ce:5f:08:3a:1e:e3:64:24:b1:ce:52:d4:0d:
                    1c:3f:7f:3d:5a:1b:fe:d1:3c:c7:7e:60:68:88:1a:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:18:4A:1C:EC:1F:32:7D:9F:ED:DD:F9:AF:C9:93:88:F9:E1:0D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6f2ec24e-112f-3750-8a43-e86c3a130aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:dd:5f:df:de:44:a7:f1:04:13:c2:39:14:b0:ca:2b:7d:
         db:29:b8:cc:99:3d:2c:73:55:5f:89:ef:ba:43:70:ba:b5:61:
         4c:65:8c:c4:03:e7:1a:86:c6:b3:e9:70:e5:e3:80:14:f3:ad:
         7c:0d:04:17:5e:54:d9:00:2a:07:34:f5:f5:c4:9a:0c:6f:11:
         39:d0:4e:a7:42:a8:fc:f9:e1:85:90:60:99:6e:c7:6c:04:1e:
         8d:57:5a:04:27:10:67:16:d7:e1:47:a4:04:90:ab:1f:a2:ba:
         88:0a:28:70:b6:2f:c6:a6:9e:2d:d9:5b:5e:a2:51:55:3c:a5:
         5d:cf:c0:c8:9d:f6:cb:73:f9:fa:24:a4:73:81:dc:22:47:be:
         38:3f:bb:dc:f7:7c:80:3c:ba:17:38:7a:d0:67:1d:5a:03:9a:
         61:66:d2:2e:11:b3:9a:cf:8e:eb:27:3b:16:58:c7:69:82:78:
         7f:9e:f3:26:0b:c6:1f:b4:56:4b:f9:92:91:d0:bc:73:ce:c5:
         19:2e:0e:e1:b3:14:f1:da:99:f5:81:a5:e5:51:a0:38:46:04:
         b6:e8:c7:06:94:ac:5e:1a:3d:b2:24:54:99:28:6d:0f:6c:e9:
         b7:2f:cd:46:b9:c4:db:1b:d4:5a:ec:ab:53:c7:6b:ae:91:7d:
         d0:5b:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:06:26 2025 by rpki-client