Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e4888ca-6fe6-3ef6-b05a-e4821591e422.roa
File:                     9e4888ca-6fe6-3ef6-b05a-e4821591e422.roa (raw, json)
Hash identifier:          +WTE+kFz5/CryQ0/DLo+qo74ui7u5WjAg7X9dXWoxLw=
Subject key identifier:   E4:4C:C6:CD:BA:E4:91:16:0A:71:A0:DC:FB:0C:47:8C:B2:EB:5E:15
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EC7A1C0CEE1490826618CEFE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e4888ca-6fe6-3ef6-b05a-e4821591e422.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     19527
IP address blocks:        34.190.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c0:ce:e1:49:08:26:61:8c:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=0685a6b9-7335-4ccc-a884-7b62c7fb4287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d7:dd:c6:6e:4c:c3:41:a5:27:e6:a7:ec:72:
                    6a:df:d5:0e:a0:18:38:b9:6a:7c:2e:26:f2:6b:2f:
                    61:c8:b6:75:bb:a6:ec:1e:fb:ab:0c:4a:0c:86:67:
                    8d:48:4e:da:80:9c:27:ff:ae:cd:3c:9e:1b:41:10:
                    36:ec:7c:2f:d3:89:0a:14:51:45:77:79:29:9c:ed:
                    36:c0:cd:a7:b0:9e:41:ba:78:34:a3:fd:3a:36:6a:
                    47:b0:2b:63:a1:ec:32:59:aa:41:66:5c:bc:71:50:
                    17:8d:17:1a:7e:13:6c:6d:5f:ea:d0:63:ec:d9:9a:
                    ac:f0:2d:74:86:83:67:aa:82:6d:93:aa:21:58:ca:
                    dc:d2:51:1c:b4:f0:fd:fe:8f:a4:c6:d6:2d:d4:65:
                    77:8c:c4:14:58:5e:d6:7b:d0:b0:08:c8:db:f7:4b:
                    a0:a8:a8:ed:6c:b5:a4:42:a0:39:79:cb:0f:b4:6c:
                    25:f2:bc:4e:c8:32:f4:db:d7:f5:a8:d8:89:07:fb:
                    49:da:ec:a4:e2:5a:21:cd:ac:41:f9:e3:d6:b6:6f:
                    af:5f:f6:01:d0:4d:13:91:ab:d1:13:14:f8:31:ff:
                    42:a8:71:1c:11:a8:ae:0f:5b:42:85:e4:b2:2c:ef:
                    1c:2d:ec:eb:28:32:5a:06:5f:d9:9b:4d:0c:f8:92:
                    fb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4C:C6:CD:BA:E4:91:16:0A:71:A0:DC:FB:0C:47:8C:B2:EB:5E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e4888ca-6fe6-3ef6-b05a-e4821591e422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e9:5f:b0:0e:cd:a8:2a:8b:17:8a:30:e2:64:5a:79:12:ee:
         f7:41:c8:1c:0a:e9:d2:e9:48:96:33:a8:e5:a6:92:8a:18:74:
         d8:a2:87:da:b7:13:f9:a1:7f:b4:12:66:54:26:fe:c1:75:40:
         5c:bb:86:45:12:f7:77:ae:b9:1d:63:16:1f:2a:d8:dd:67:c5:
         c7:7b:3e:d2:b1:98:19:39:d6:b1:a6:34:ce:49:96:72:cf:69:
         df:f6:c8:ec:8d:aa:eb:75:40:d7:ee:31:3e:2c:36:16:41:d6:
         ec:18:2d:b0:7a:b9:71:dd:e4:0d:de:94:57:e5:f8:1d:25:1b:
         5e:ad:e9:56:bf:c3:a6:d1:46:7d:48:27:f6:a3:a0:8a:ca:16:
         d2:34:7c:5e:77:61:88:ff:3d:2a:85:0b:ca:4e:66:5d:0f:1e:
         b6:f8:6d:ba:56:8e:14:36:0a:d6:f9:66:aa:a1:7f:64:3d:48:
         2c:12:3c:94:7b:d0:5e:ab:b5:06:cf:79:a8:b6:a4:4d:4f:d2:
         b8:57:07:ad:7d:dd:9f:91:e4:4c:d8:d2:e3:b3:c8:13:93:80:
         68:1f:9b:f6:6b:cc:72:45:b2:f7:d4:b1:4d:52:68:42:80:32:
         55:1a:61:02:d6:66:a1:e4:78:d4:6f:4f:05:67:67:91:a4:32:
         48:94:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:32:46 2026 by rpki-client