Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa
File:                     b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa (raw, json)
Hash identifier:          YuA7JL+BsCWfCg0W+CuoI8981Kf+mG9+NUJaSVHBKXQ=
Subject key identifier:   5F:B6:AE:42:A9:14:32:2F:98:05:92:4B:8C:0F:7E:EE:19:55:55:2F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CE36216925895E47F634B2300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     15169
IP address blocks:        34.2.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:16:92:58:95:e4:7f:63:4b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=32199a08-da9a-4f84-a11e-e242d9257110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:0e:e5:50:4d:56:01:f9:75:c1:8a:f4:02:
                    fd:d5:14:2f:e0:cb:95:b8:a4:ba:4f:32:9b:5c:f7:
                    90:9a:94:fc:ab:5a:fb:1b:e9:2a:b5:44:40:09:be:
                    e4:4c:98:6e:31:07:41:7a:d4:dc:f9:60:03:84:3d:
                    bb:ea:99:5f:e8:47:0e:9f:de:e5:65:7f:13:28:ba:
                    fb:70:ad:15:a0:14:a1:70:6e:d1:fa:2f:4b:5e:75:
                    a8:2d:27:06:57:f4:ee:f9:5a:77:02:35:c7:57:f3:
                    0b:a0:84:91:65:fc:04:b5:32:a4:99:25:12:45:16:
                    ac:2e:53:ae:25:fe:95:fe:ea:d1:53:fa:bc:37:ee:
                    36:c4:14:ce:a9:63:a0:f7:2c:5c:e2:1f:e2:82:28:
                    52:9e:17:96:af:2a:a9:1a:6d:be:0c:e2:82:5e:a8:
                    c5:e4:36:6a:71:7b:cf:69:ef:60:b0:34:86:4f:a3:
                    c3:b8:23:7a:b5:17:4f:e3:3a:57:18:66:cd:d1:3d:
                    a5:8a:25:51:f9:84:8c:16:05:81:d2:ba:99:8b:4e:
                    2b:2d:c2:4c:63:d5:29:83:57:aa:fe:81:19:ef:32:
                    ef:0b:b4:a4:77:ac:66:d4:2b:77:18:07:dd:59:6f:
                    ea:7b:d0:20:53:75:ea:20:02:e1:bd:2c:50:73:83:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B6:AE:42:A9:14:32:2F:98:05:92:4B:8C:0F:7E:EE:19:55:55:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:aa:80:8d:2f:1e:9c:0a:f4:3b:7f:bd:a3:98:f0:85:6e:e4:
         68:0e:68:eb:d9:ba:5a:d7:b9:4f:f6:de:fb:16:e1:ba:0f:23:
         8e:12:03:9c:11:ab:8f:5f:41:94:06:4a:f5:7e:57:4c:ed:45:
         28:d0:5f:a0:f7:9e:dc:30:90:82:88:82:a4:17:95:a8:0a:1e:
         a5:2f:8e:a4:11:a7:c4:36:a2:03:c4:bc:f3:26:38:b9:45:48:
         a2:6f:8e:ce:72:75:3a:23:10:6d:9c:be:6b:e7:d7:7a:c4:bd:
         13:6d:4e:df:30:89:8b:23:94:88:7a:c5:10:c9:9a:fd:ff:61:
         08:b7:d5:c9:2f:ba:57:eb:d5:75:1f:ef:f1:d9:ab:13:ee:b2:
         31:55:07:d3:c7:f3:0a:fd:45:78:5c:39:88:a9:75:9f:4e:c9:
         72:d6:98:7e:86:1f:88:6d:97:77:ef:8a:b0:af:4e:40:87:79:
         20:b0:6c:94:56:8a:41:a2:99:fd:3f:6a:fd:03:37:f5:2a:dd:
         fc:c0:94:9e:67:de:0e:db:00:44:df:88:16:9a:ab:88:c8:d5:
         aa:64:7e:b7:55:b7:f5:76:a6:7a:44:eb:8a:c0:ab:84:76:6d:
         6c:53:62:90:36:dc:20:9a:4d:97:85:5c:53:0f:04:14:99:56:
         8b:b6:24:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:48 2026 by rpki-client