Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff554af7-3031-3f6b-8094-dcdc2932ae5e.roa
File:                     ff554af7-3031-3f6b-8094-dcdc2932ae5e.roa (raw, json)
Hash identifier:          kuciIXvWcH6ESenQgEUeOn/F65zArK4UoJC4DWTwoQM=
Subject key identifier:   95:52:27:71:10:9B:57:75:87:71:F8:1F:EE:A2:0F:91:E8:C7:4B:16
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CEA5D04DA8E39A482959358FF
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff554af7-3031-3f6b-8094-dcdc2932ae5e.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     19527
IP address blocks:        34.3.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:04:da:8e:39:a4:82:95:93:58:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=071b13fd-3b28-4b5d-8e48-f7b5247f520c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:06:24:d5:26:73:b6:8e:c7:14:93:9f:8e:
                    b9:45:80:7e:33:b8:d1:54:81:4f:98:ab:6d:43:9e:
                    70:e1:16:95:5c:4a:7d:6c:9f:ef:6c:b9:5f:6d:b1:
                    6b:09:17:a6:54:39:5a:4b:59:41:ce:18:10:a4:72:
                    f7:e4:e5:91:f3:53:e8:6a:15:c8:d5:82:09:51:19:
                    4a:42:6d:39:74:07:1e:d4:11:96:ce:cc:db:4f:67:
                    97:63:1f:6c:6d:27:99:9c:20:40:2f:30:7a:79:86:
                    e0:ea:42:86:75:9f:53:74:cf:59:41:db:18:98:3e:
                    c6:5d:de:6d:7b:b8:58:22:da:15:14:79:71:24:0c:
                    0b:e5:eb:53:58:a9:5b:26:37:7b:13:48:fc:52:44:
                    30:ab:56:62:05:79:01:e2:4f:37:f7:b0:8a:3d:b9:
                    ba:8c:2b:76:4d:2f:32:1f:1d:b3:10:ff:ef:bc:24:
                    a1:72:47:b8:e1:2a:42:20:63:7d:4a:39:f8:3d:67:
                    30:99:41:d5:c0:4d:20:e2:a0:67:c8:0a:94:f2:20:
                    0b:41:c6:90:8a:32:b8:4c:2c:62:f7:f9:0d:cd:74:
                    87:3d:2f:22:c5:34:a2:72:f0:e8:31:93:ed:71:e0:
                    cd:a8:eb:da:d0:af:d1:93:07:df:49:8d:f9:97:8c:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:52:27:71:10:9B:57:75:87:71:F8:1F:EE:A2:0F:91:E8:C7:4B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff554af7-3031-3f6b-8094-dcdc2932ae5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:22:d3:b0:1f:fe:9e:15:5e:bd:79:e4:e3:c5:15:cd:ef:34:
         60:23:30:46:70:72:98:2c:88:e9:b0:c0:56:e5:bf:1a:a1:66:
         a4:a3:5d:f6:8f:ba:24:80:74:94:d9:f4:bb:67:f5:14:e6:49:
         76:10:20:fd:2b:84:76:3b:72:a7:c5:91:f6:72:08:d3:0b:d6:
         07:b3:34:94:a2:9f:44:a5:4b:8d:af:3d:30:b3:34:87:aa:ef:
         b5:26:a9:39:63:fa:38:90:ca:b3:31:8d:3e:d2:16:f6:49:61:
         b9:42:5a:32:7b:17:e9:02:2a:0f:ea:ab:56:14:c8:09:36:89:
         c6:99:c1:6f:a6:0a:dc:35:bc:89:8d:78:2c:07:3e:43:59:3d:
         60:36:bc:9d:6e:dd:8c:96:95:da:55:b2:c9:93:71:9c:7e:43:
         4a:90:5d:f1:2c:d6:e4:90:e0:cf:f2:8b:a1:dc:de:fa:26:44:
         76:21:81:7c:e6:66:e9:eb:d3:8a:23:ec:fd:39:b3:66:d7:e5:
         47:d6:12:54:3b:6f:7f:fa:e4:03:fa:e6:f2:1a:20:21:fa:e8:
         a3:e4:fa:da:b5:a1:ee:b3:27:c4:0a:c2:be:eb:89:37:61:cc:
         31:4f:b1:68:30:b9:cb:f3:82:8a:30:1c:4d:d0:4b:b3:88:c8:
         d9:25:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:23 2026 by rpki-client