Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa
File:                     70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa (raw, json)
Hash identifier:          JHAQfJw8mXuuad7+L/PbzxGPTktWoNxFoPUEUk8/pc4=
Subject key identifier:   2C:14:EB:3C:85:39:E6:FA:05:BB:F2:D0:D2:AB:DF:54:8C:9C:82:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E08664C72F5FAE11916BADF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.134.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:4c:72:f5:fa:e1:19:16:ba:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=0983f771-3a73-4414-b796-9d1422a6f8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:ad:34:2f:68:d8:d3:19:04:02:0d:8d:8c:
                    a8:a5:ff:4f:8e:df:8c:97:05:50:be:b2:ef:0c:65:
                    ff:f7:c7:b5:d4:cb:0d:d5:21:6b:69:01:57:81:63:
                    52:b0:68:b6:9c:05:72:3b:17:84:65:44:92:d9:14:
                    a8:de:3d:74:f7:8e:ab:99:18:ec:31:8f:67:03:d8:
                    e6:19:0a:8d:4b:1b:a2:14:56:96:5e:bf:8c:c5:f0:
                    a2:d4:09:d7:10:1f:62:18:ea:02:5a:71:37:cc:4f:
                    e3:4e:de:be:ee:08:ae:9d:f4:11:cd:2d:e1:de:68:
                    05:76:74:f7:e9:e9:6b:a6:1a:54:32:6b:12:f7:8e:
                    37:50:af:09:6d:1d:9c:ca:96:d4:15:d8:e8:e0:03:
                    a6:63:e3:80:48:f6:07:0d:b2:9b:99:1f:13:3d:2c:
                    2d:8a:d5:c0:9f:72:84:93:02:99:5a:56:6c:a1:5a:
                    e0:86:a8:a5:b2:02:67:1c:fe:b7:f8:83:63:d0:fd:
                    c9:ee:aa:1e:49:5b:27:9c:e7:bd:87:78:a6:84:ef:
                    70:a6:c1:12:6e:a9:67:be:2e:4e:97:92:42:45:b2:
                    54:dd:3a:c5:4e:3a:36:00:03:cc:0d:22:fa:48:21:
                    2f:52:20:e2:8d:a6:87:a3:0f:6a:89:0f:8a:fe:2e:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:14:EB:3C:85:39:E6:FA:05:BB:F2:D0:D2:AB:DF:54:8C:9C:82:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.134.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:71:de:13:b2:cd:d3:13:30:51:9a:67:98:7f:16:4e:64:3f:
         66:b2:9b:3b:e1:2a:16:3f:a7:a0:aa:0e:d5:bb:e1:01:fb:cb:
         07:ba:f0:05:20:8b:ba:8e:11:cc:f9:80:2c:65:66:9e:66:0f:
         0b:05:1d:bc:2a:84:e4:04:f4:86:74:4e:d7:08:b5:cf:15:8e:
         4e:77:25:d9:cc:ce:20:aa:03:d3:14:02:16:57:f3:7c:20:c8:
         f5:89:d3:1d:d6:bf:04:f4:2a:78:5e:58:2e:bf:1e:73:c8:df:
         e8:30:a9:27:0e:7a:3c:30:0a:81:62:e3:57:cc:d1:36:07:cc:
         25:0a:d1:eb:dd:61:f5:b2:26:19:a4:3b:77:e7:90:84:38:05:
         9e:00:65:3b:2b:1d:2d:c4:b8:90:96:d1:b0:bf:bf:f0:49:91:
         8a:b5:13:98:cf:9a:1f:35:50:3b:19:9b:c6:f4:17:b3:bd:ef:
         e9:53:ab:65:00:62:8f:93:f7:c1:1f:12:5e:83:23:f2:4b:ca:
         57:57:ff:50:99:d0:58:fc:f4:f5:16:dc:6f:c9:a3:3a:a1:3e:
         33:db:14:ee:f0:1c:7a:df:03:6e:9e:3c:4d:b1:52:e0:d5:7b:
         e6:f7:59:69:03:6f:37:1e:09:47:05:79:0e:eb:8b:22:66:5d:
         ee:03:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:14:16 2026 by rpki-client