Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a4dd1f6-f4e7-3786-924f-c7d9949c0e8a.roa
File:                     1a4dd1f6-f4e7-3786-924f-c7d9949c0e8a.roa (raw, json)
Hash identifier:          ihaTjK3dRIFxK3Bna5iiCGQUnd2tULe0WyvfCRLqK64=
Subject key identifier:   D5:70:2A:F2:02:ED:DC:13:73:69:2C:75:DE:45:7D:BC:1C:1D:77:A0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA4685CDE0F937CC141578
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a4dd1f6-f4e7-3786-924f-c7d9949c0e8a.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.82.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:46:85:cd:e0:f9:37:cc:14:15:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=e5acc490-81db-464b-a16f-a6d35d6f7e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:65:1c:44:35:73:0d:9a:3c:b2:64:78:2a:
                    99:0b:4a:84:67:ec:10:50:35:1e:d8:fa:d8:00:ec:
                    e9:b6:1d:87:3b:ad:6e:cb:c0:95:be:59:81:99:7b:
                    5e:00:ce:8a:34:b9:7a:b2:d3:14:74:8e:e3:19:16:
                    cd:bb:72:4e:e4:4e:54:8a:40:e9:c7:33:3d:25:de:
                    7d:90:60:47:f0:7b:93:70:9f:f8:fd:82:10:52:de:
                    05:bb:2f:1c:10:b4:87:b9:ec:63:79:df:f2:f6:3a:
                    3a:2f:bb:6f:6b:7a:fb:44:22:46:ee:c9:c6:89:ce:
                    d6:8d:7c:4d:5b:e5:85:a3:ee:6c:1f:da:cb:fb:23:
                    a1:67:a7:a4:69:e0:3d:f6:80:14:a6:74:02:de:10:
                    d8:c7:a2:60:27:88:61:da:62:11:7d:cd:68:36:ac:
                    d6:95:d1:6c:22:a4:f6:22:da:12:59:5f:42:ee:20:
                    23:42:b1:0b:5b:29:6b:88:d5:30:ca:2c:97:b9:65:
                    eb:d8:57:0f:24:c0:00:cd:1a:e5:c3:e7:6f:17:3b:
                    70:ec:21:33:e3:3e:4a:73:81:55:ef:22:bc:a1:f0:
                    03:4a:3b:51:94:cd:26:18:df:37:df:dd:06:17:bb:
                    bb:dd:62:71:ce:ff:78:bf:e6:9f:42:23:2c:57:38:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:70:2A:F2:02:ED:DC:13:73:69:2C:75:DE:45:7D:BC:1C:1D:77:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a4dd1f6-f4e7-3786-924f-c7d9949c0e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.82.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e0:f7:25:46:1e:d7:fe:48:b5:85:56:d7:b1:83:6e:0d:cc:
         3e:c1:f6:b4:3d:f4:28:ae:1a:77:95:41:b4:4a:99:17:ee:02:
         74:19:0d:9a:22:46:34:9b:82:49:9b:0b:7c:80:43:3a:3c:3a:
         4f:14:4a:e5:01:eb:b0:d5:d2:ae:ef:92:ad:ff:de:96:1d:f0:
         40:d0:77:5f:e0:50:0f:3b:f0:e4:90:1a:81:3a:5d:ac:ec:6c:
         47:c9:f6:e5:b4:27:fe:03:9c:21:55:d2:9c:7b:24:10:8e:06:
         f4:05:7e:c0:7d:fe:3f:bc:3b:00:65:0c:8a:5d:f1:07:0f:c5:
         ec:d3:a4:dc:d9:d3:34:db:5a:89:d3:49:b0:9f:7f:81:2e:1b:
         6b:a9:a4:59:c7:7b:c7:24:d7:11:40:9f:a8:51:bb:ce:31:1b:
         06:fd:01:80:db:10:4b:98:ea:1e:3e:e3:39:27:21:46:ed:f4:
         d3:5d:aa:68:32:ea:d4:66:97:f5:29:39:37:78:74:62:ef:05:
         54:5e:c9:eb:04:ec:be:67:79:41:bd:0d:a3:0f:f6:1f:56:62:
         7c:8c:23:c4:db:b8:e9:60:3d:f0:2d:f4:c8:90:1b:77:2b:74:
         5b:e9:3e:c9:7e:d5:1f:1d:fd:d9:c8:44:c8:27:be:fd:ed:92:
         3b:ad:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:56 2026 by rpki-client