Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
File:                     e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa (raw, json)
Hash identifier:          6WZALjjfLylBKtCDWaXk/V/5hGOx1ShQQI4VAf4Xk6s=
Subject key identifier:   16:26:4A:8D:60:BC:5F:9E:49:E2:14:D4:9B:FE:C0:4B:CD:EE:91:98
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CEA5CC8E6171CB881F46D7B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     19527
IP address blocks:        34.2.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:c8:e6:17:1c:b8:81:f4:6d:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=3210c534-7c3e-41d5-988f-a940df570621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:57:c6:0a:7b:58:cf:cc:82:4b:68:00:da:
                    9b:b2:97:dc:fe:45:40:7f:3b:da:76:e2:b8:79:31:
                    98:bb:a0:54:84:09:03:a3:d4:ae:ac:5f:de:4d:e7:
                    89:12:92:6a:59:0e:07:c4:bb:39:9e:f0:1d:e3:e3:
                    3b:01:8d:83:84:64:1c:72:7f:41:85:58:42:22:c7:
                    32:b3:25:5d:7b:ee:df:3a:fe:dc:78:f8:a8:af:62:
                    bf:5b:7e:85:83:40:6e:81:a9:b3:d3:14:dc:d8:9a:
                    18:95:ca:1b:65:07:41:66:3c:e3:e6:2a:cb:af:b3:
                    0d:b4:d7:56:27:06:ad:69:cb:33:67:2d:bf:7a:c7:
                    d6:b7:03:78:d2:ef:84:5a:78:a6:5c:03:5f:09:47:
                    88:a8:01:bd:39:68:a2:9f:65:cd:72:22:37:18:16:
                    7a:a3:d8:e2:67:65:a0:11:d3:6b:d6:12:e3:e5:48:
                    c2:a6:52:c5:56:bd:29:3b:e2:63:de:b1:51:4d:db:
                    ea:52:b6:59:2f:09:ab:e6:5b:5f:6d:d2:fc:7d:af:
                    91:2e:fe:51:f3:ed:c4:06:42:74:94:87:40:0c:92:
                    56:b5:d2:8b:6e:08:77:cc:70:e3:bf:ea:df:ef:1d:
                    b3:7e:ac:7c:69:95:74:00:99:fb:7a:2b:2c:69:f2:
                    5e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:26:4A:8D:60:BC:5F:9E:49:E2:14:D4:9B:FE:C0:4B:CD:EE:91:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:56:c5:e6:ec:38:96:fd:bb:64:70:f7:66:15:4d:a9:90:97:
         f8:0f:41:32:c9:0a:43:3b:36:2d:00:b9:5b:9c:b2:4e:23:75:
         ec:e8:e4:e5:fb:38:bc:c9:14:30:74:d8:f7:29:54:0a:d1:b9:
         6c:40:96:98:91:80:33:8e:76:fd:6e:6b:37:54:b6:df:4a:b1:
         ee:d1:b3:ec:1d:b2:7d:1f:64:73:8c:0a:3f:eb:15:99:a7:12:
         c9:e0:25:6e:4b:3e:16:eb:ef:f0:54:b9:78:fb:61:9b:dd:f4:
         71:97:ba:bf:ef:39:99:bd:cb:8d:55:b9:79:77:70:83:cb:b0:
         5d:de:25:b1:3f:f6:a2:41:a5:a6:9d:87:29:b7:42:81:99:a5:
         e2:b7:5a:ce:b7:8e:66:0f:17:67:3b:73:b7:4b:b8:c8:69:e5:
         8d:a6:06:72:3d:46:38:24:5c:e2:f8:02:a8:a2:e4:84:25:86:
         97:b8:dd:99:11:b3:60:20:d3:62:cb:3e:b9:03:e6:4f:7e:f7:
         18:ce:45:3e:06:30:98:a3:48:08:53:12:e4:67:46:c9:33:b1:
         9b:6e:e3:f3:67:40:53:bf:35:ed:05:53:12:77:77:69:7e:e6:
         7d:53:9f:3a:b0:96:f5:10:0f:d3:35:ef:a3:1c:65:8a:99:c2:
         8b:57:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:59 2026 by rpki-client