Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d85c26c9-36e2-3371-9afb-eeb1824fcc6f.roa
File:                     d85c26c9-36e2-3371-9afb-eeb1824fcc6f.roa (raw, json)
Hash identifier:          PxyUM68j3iwmsFZ31MZfA1QzxfBOLLd9RQcoMNR47y4=
Subject key identifier:   BC:D0:34:AD:A0:BE:AC:94:20:D3:8A:10:D0:E4:8A:7C:73:F0:D1:B1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D5F7FACD5746E5B679C4EE800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d85c26c9-36e2-3371-9afb-eeb1824fcc6f.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     15169
IP address blocks:        34.4.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:ac:d5:74:6e:5b:67:9c:4e:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=f205daba-870f-4740-93f9-b6285234701c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:e0:ab:de:cf:bb:ab:d6:1d:19:14:b8:81:
                    99:3f:25:0e:80:4e:7b:c4:61:e6:0b:5f:5a:9f:24:
                    7e:0b:3e:35:24:6e:2c:af:3b:21:89:3d:c0:fe:e9:
                    6e:67:12:e9:e1:19:ed:83:d3:49:9c:7d:5c:e4:0e:
                    45:31:fe:31:d3:c9:ba:b3:db:f8:88:4b:e0:f1:21:
                    09:a1:fa:43:e5:9d:ea:6e:46:0c:a9:5d:90:f2:d9:
                    b7:12:e5:02:de:31:4d:01:75:1f:c3:de:25:34:9d:
                    03:c8:a9:16:c0:3c:2e:f3:13:57:45:49:4c:54:60:
                    55:c6:3c:d3:df:ee:2e:9b:ec:00:82:8a:84:bd:87:
                    8b:94:09:72:8c:90:b3:5d:b7:93:57:1f:0e:6c:c8:
                    33:8f:1c:92:8b:78:69:82:92:93:2c:40:b3:d4:c1:
                    e9:8f:1c:6c:f4:7a:7e:e7:41:ae:35:00:83:e2:74:
                    8c:4d:04:e8:f2:a7:4e:6a:04:6b:70:b2:4f:a5:19:
                    43:21:53:7b:e3:ea:00:3f:ba:83:fa:66:56:08:30:
                    45:5e:d3:b7:67:b7:b6:84:e1:51:8b:03:24:84:a3:
                    b3:ec:ef:a1:16:aa:2f:98:cf:f6:87:1a:9f:36:52:
                    15:52:d2:93:c5:25:8e:21:08:81:9b:90:3d:02:ca:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D0:34:AD:A0:BE:AC:94:20:D3:8A:10:D0:E4:8A:7C:73:F0:D1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d85c26c9-36e2-3371-9afb-eeb1824fcc6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:8d:a7:5c:d8:4b:44:12:8a:ea:ba:f4:67:1f:3e:47:c8:
         4c:ec:25:8d:81:20:02:e3:76:99:bd:9e:0f:14:32:b5:bc:72:
         95:4b:ae:a7:a3:cc:6b:e5:24:dd:80:3e:53:ba:4d:ad:3b:9d:
         2b:cf:ac:e3:25:8c:d0:c6:34:73:96:28:84:51:d9:a6:87:9c:
         99:30:aa:32:8d:be:89:32:9f:db:a9:a9:a0:34:a3:fe:b5:b4:
         73:d3:47:00:c0:be:e2:e2:11:71:ee:a1:20:be:df:eb:ce:39:
         2d:86:ae:0d:88:17:60:ab:d0:0a:21:84:cd:07:ac:e0:92:33:
         e1:19:ae:1c:51:ce:96:5f:b0:3d:31:2e:e7:73:b2:36:d0:75:
         68:5d:6b:22:49:4a:c0:23:6c:7b:a1:00:8f:09:56:ea:bc:3c:
         25:8d:31:2e:9e:22:e1:9d:7e:c4:48:6c:df:07:0e:d6:12:ae:
         f6:6f:02:14:8c:79:69:3d:bc:f6:69:6d:b8:be:94:0c:df:5d:
         ef:b8:c6:48:82:7a:e7:d1:1c:b8:fd:17:2f:82:36:2c:55:5a:
         1b:f9:4f:4b:ec:65:78:01:e2:f5:c7:be:b0:a5:f5:37:d9:c8:
         57:1f:f0:b8:b6:c5:ba:ef:bb:5c:54:08:d9:09:d6:0a:75:cf:
         f9:fe:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:41 2026 by rpki-client