Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa
File:                     138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa (raw, json)
Hash identifier:          8cF0LjunTIKayqdkWotu3cGhlZK06Eikije5WdfDwpk=
Subject key identifier:   F1:F9:F9:83:98:A6:BB:93:AE:14:9D:6B:AB:32:6F:93:57:04:2F:0C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797A6FA97042F60B64AB080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.17.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:a6:fa:97:04:2f:60:b6:4a:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=b82fa3fe-ffdd-4b4a-9032-62dd8f1f6625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:0d:2c:a7:0c:b6:51:69:2c:02:c7:26:08:
                    d8:8e:f2:b7:13:02:59:aa:52:e4:d2:d7:06:f4:7f:
                    90:38:ab:6f:8f:e3:18:da:04:d9:a1:04:f2:f1:ee:
                    11:aa:e7:e8:30:8f:a0:79:11:55:09:28:2f:43:3b:
                    0b:dc:e6:17:96:86:b2:7a:a3:0f:89:8e:7a:c1:4c:
                    20:7b:ac:f4:6d:5d:76:92:7a:87:1b:06:68:e0:31:
                    37:a4:4b:e5:f8:6b:35:c4:b0:cb:99:fd:6a:72:2a:
                    52:bc:49:f2:e3:2e:e8:73:59:41:9b:3e:31:2c:ed:
                    1d:06:4c:e3:75:e8:3e:5a:cd:fc:a9:2c:ff:41:36:
                    19:7f:8e:25:62:40:35:6c:fd:d2:66:94:91:cf:0c:
                    39:c4:95:6b:9a:fe:a3:a9:92:cc:a4:5a:1a:a0:78:
                    06:e7:b0:dc:ea:05:d9:76:56:88:74:2b:c5:9e:2b:
                    00:b0:8f:4b:25:ae:03:be:95:8f:01:99:2b:a1:e6:
                    fc:8b:e3:63:01:a9:dd:ae:eb:aa:c9:99:91:a0:9e:
                    97:41:20:40:23:fe:41:ad:cb:77:24:94:ac:b6:1e:
                    c7:fb:3d:c8:5b:2b:c3:8c:2d:f2:13:e3:c5:a5:4f:
                    5c:01:49:d5:4e:87:aa:02:32:39:34:e7:78:21:e6:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F9:F9:83:98:A6:BB:93:AE:14:9D:6B:AB:32:6F:93:57:04:2F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:46:26:f7:f6:5f:bc:5e:cc:79:b1:14:e5:ba:e1:f2:fe:
         15:8e:f9:d5:ee:e3:35:31:49:70:2f:2f:1c:7d:c0:a0:80:69:
         79:b6:66:d9:c2:ec:d5:22:fa:a3:a9:e3:57:ca:ae:83:93:a0:
         95:fe:60:94:ef:00:1f:44:b7:08:12:a7:df:97:62:ea:20:4f:
         b7:00:7b:b0:cb:20:50:9a:07:a7:d9:3d:d9:bf:7e:40:ad:ce:
         42:fd:2f:35:61:c1:b1:14:d7:1b:91:fe:cf:e0:7a:3d:b8:17:
         db:68:8d:05:7c:2a:e5:52:31:aa:50:89:af:72:dd:6b:2c:97:
         6d:7a:9d:4e:43:0b:27:c6:2a:5c:a1:79:6a:6c:96:ff:d3:86:
         67:5b:f3:ba:4a:8a:c4:73:1d:0f:cd:7f:e0:37:9e:38:98:4b:
         fc:1b:4e:f8:ca:30:41:b3:1f:f4:9d:ca:41:77:a7:80:a7:3c:
         27:e4:89:d1:a5:9b:8e:98:a1:ec:62:04:8d:0f:b7:6f:f5:81:
         68:fa:7a:ae:9d:ba:8d:2b:d3:7b:0c:ec:a5:b3:0f:58:1a:8f:
         76:8f:91:bc:38:51:fc:fc:d3:86:9b:19:8e:6c:d2:c3:dd:4b:
         37:4f:3f:db:9c:18:0b:00:5e:10:7a:29:0a:5a:e7:92:22:26:
         2c:15:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:21 2025 by rpki-client