Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22bb804c-749a-3e8b-b4ca-b6024d899e7e.roa
File:                     22bb804c-749a-3e8b-b4ca-b6024d899e7e.roa (raw, json)
Hash identifier:          tuuas/VBFVQH1aV/utd0mxbEctYQBXfoRtMNezmRfaE=
Subject key identifier:   D8:22:52:71:00:E2:F7:8B:C1:50:20:CF:CE:BE:53:24:6C:00:8B:A2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF64468C3665CA4A5F4D5800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22bb804c-749a-3e8b-b4ca-b6024d899e7e.roa
Signing time:             Tue 12 May 2026 14:55:57 +0000
ROA not before:           Tue 12 May 2026 14:55:57 +0000
ROA not after:            Mon 10 Aug 2026 14:55:57 +0000
asID:                     396982
IP address blocks:        34.1.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:64:46:8c:36:65:ca:4a:5f:4d:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:55:57 2026 GMT
            Not After : Aug 10 14:55:57 2026 GMT
        Subject: CN=36fd14cf-de25-434d-b23b-010cf9c65da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:32:3a:88:63:24:fe:8d:d4:c3:3c:c8:6a:5e:
                    44:72:89:84:af:4f:bf:dd:25:2f:9e:2c:8b:8f:9b:
                    27:da:2b:b2:a1:c9:4f:75:be:bc:1f:78:78:e4:ed:
                    c6:aa:f6:22:04:8d:d8:af:fd:5d:48:c8:c2:b3:ad:
                    84:dc:be:f5:a9:0b:76:17:3e:b7:19:51:39:04:c1:
                    e7:b6:22:58:70:57:56:e3:a8:dd:4d:d7:3a:a7:ed:
                    5d:b9:7d:bb:06:5e:1c:4a:a9:f2:f1:83:31:b6:d1:
                    a4:d2:55:26:66:44:87:84:df:df:d4:6d:bb:76:aa:
                    32:63:09:4f:99:24:f6:cf:96:e1:b2:0c:a1:64:90:
                    3e:84:95:58:af:95:5d:64:25:96:e0:2b:eb:4a:3a:
                    57:83:84:af:e9:37:30:84:74:27:93:9d:28:3c:a4:
                    56:ac:6a:a5:ee:2f:30:33:1c:75:c1:04:1a:ea:06:
                    06:06:03:86:2a:db:43:ab:2b:e9:36:d2:57:38:a5:
                    91:2d:d8:37:bd:5a:a8:05:9f:9a:84:69:0a:ce:91:
                    b3:f9:17:87:b3:ac:d6:b9:f3:46:4d:38:c8:0c:60:
                    07:5d:4b:db:77:7d:e1:8c:ac:26:6a:65:00:be:d4:
                    b9:b4:d2:4c:19:d8:dc:da:7a:9f:67:ac:dd:ab:8e:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:22:52:71:00:E2:F7:8B:C1:50:20:CF:CE:BE:53:24:6C:00:8B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22bb804c-749a-3e8b-b4ca-b6024d899e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:75:02:d3:68:81:40:25:36:fd:d4:a2:27:9b:51:e2:bc:6e:
         07:22:91:25:17:e4:a8:83:69:48:9d:bc:ac:9a:6c:b4:66:d6:
         41:7d:f0:a4:ad:d6:b0:7f:6a:96:d5:6b:f4:aa:b5:ea:4c:a0:
         23:8b:9d:1c:f4:72:54:ed:b3:1e:bb:fe:f2:2f:05:f7:bf:07:
         2a:c1:92:ed:dc:87:65:99:2a:27:15:1d:ab:a7:01:d0:cf:50:
         e6:69:46:5e:dc:f4:44:4c:87:9e:d1:d8:97:2e:62:71:e4:d2:
         b2:ad:ca:43:65:1b:2b:1b:69:e4:2e:9c:00:4c:a7:28:10:d4:
         31:a9:19:8d:03:98:5d:53:9a:82:45:6e:f7:99:3e:f6:e9:18:
         b8:f8:e5:44:44:23:fe:3b:fe:da:89:99:51:24:12:ef:d1:8d:
         f3:9f:50:55:e1:ab:3d:51:23:70:25:74:91:fe:8e:b8:cd:5c:
         b9:20:53:a4:57:01:a8:e2:25:f2:47:62:81:a3:d6:25:79:27:
         01:6c:f4:3f:d5:ee:c8:03:b3:59:60:3c:ee:5d:c0:41:cb:86:
         6d:36:87:ea:a9:1e:d4:17:ef:22:11:06:1b:b3:81:a2:46:81:
         9b:ee:db:2f:f6:9f:ef:a5:de:98:57:ab:9d:8b:32:9f:a3:2e:
         75:89:8e:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PZEaMNmXKSl9NWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDUxMjE0NTU1N1oXDTI2MDgxMDE0NTU1N1owLzEtMCsGA1UEAxMk
MzZmZDE0Y2YtZGUyNS00MzRkLWIyM2ItMDEwY2Y5YzY1ZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jI6iGMk/o3UwzzIal5EcomEr0+/3SUvniyL
j5sn2iuyoclPdb68H3h45O3GqvYiBI3Yr/1dSMjCs62E3L71qQt2Fz63GVE5BMHn
tiJYcFdW46jdTdc6p+1duX27Bl4cSqny8YMxttGk0lUmZkSHhN/f1G27dqoyYwlP
mST2z5bhsgyhZJA+hJVYr5VdZCWW4CvrSjpXg4Sv6TcwhHQnk50oPKRWrGql7i8w
Mxx1wQQa6gYGBgOGKttDqyvpNtJXOKWRLdg3vVqoBZ+ahGkKzpGz+ReHs6zWufNG
TTjIDGAHXUvbd33hjKwmamUAvtS5tNJMGdjc2nqfZ6zdq47RpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNgiUnEA4veLwVAgz86+UyRsAIuiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjJiYjgwNGMtNzQ5YS0z
ZThiLWI0Y2EtYjYwMjRkODk5ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI91AtNogUAlNv3UoiebUeK8bgcikSUX5KiDaUidvKyabLRm1kF98KSt
1rB/apbVa/SqtepMoCOLnRz0clTtsx67/vIvBfe/ByrBku3ch2WZKicVHaunAdDP
UOZpRl7c9ERMh57R2JcuYnHk0rKtykNlGysbaeQunABMpygQ1DGpGY0DmF1TmoJF
bveZPvbpGLj45UREI/47/tqJmVEkEu/RjfOfUFXhqz1RI3AldJH+jrjNXLkgU6RX
AajiJfJHYoGj1iV5JwFs9D/V7sgDs1lgPO5dwEHLhm02h+qpHtQX7yIRBhuzgaJG
gZvu2y/2n++l3phXq52LMp+jLnWJjqQ=
-----END CERTIFICATE-----
Generated at Wed May 13 10:26:18 2026 by rpki-client