Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c51b58-797e-32c6-a5a2-abd16dc19fa1.roa
File:                     50c51b58-797e-32c6-a5a2-abd16dc19fa1.roa (raw, json)
Hash identifier:          XqKGnggAG6rfu97Yxpr4m1gUU1iby5TKsMTm4LaPfJo=
Subject key identifier:   1F:EE:D4:8E:3B:CC:29:36:98:84:31:A7:C5:5B:83:DD:49:5F:26:23
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B72C1F5EE25B8D14DB9405100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c51b58-797e-32c6-a5a2-abd16dc19fa1.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     396982
IP address blocks:        34.136.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f5:ee:25:b8:d1:4d:b9:40:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=6b2229bc-28d2-4182-b9e8-bb6714f84e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:31:5f:da:ba:f8:bd:2a:7c:f6:07:f7:75:cf:
                    6d:5d:4a:25:64:9b:9d:71:2c:8a:59:d8:3d:fb:2e:
                    78:9a:9c:94:71:c3:9a:7e:2e:18:5c:a8:52:cd:f9:
                    5f:65:86:cb:57:de:1e:6b:c3:f8:cc:67:f9:a3:4f:
                    e8:4e:1e:5e:4b:81:d0:de:cf:4e:1c:b7:b2:44:10:
                    0c:f2:a1:69:cb:b8:8d:48:88:cd:66:0b:74:96:85:
                    2b:20:8d:a3:ca:d5:39:6f:58:a5:02:2e:94:45:69:
                    8e:f8:37:f1:a5:60:0f:56:8b:9b:bf:b0:9d:79:a4:
                    a7:fd:11:3b:d0:0c:af:c9:af:5b:e2:ae:27:84:80:
                    35:fb:a4:da:fe:9a:8f:76:d9:08:7c:c3:0f:6e:16:
                    3c:b9:d8:c6:63:86:db:d2:23:fc:d4:e0:45:66:95:
                    4b:a1:b7:3b:b4:57:32:68:70:da:a8:5b:ec:c6:8e:
                    2c:96:67:51:e9:8c:16:cd:cf:13:2a:24:58:47:93:
                    82:7c:1f:7a:85:41:9f:b4:09:11:2f:d5:95:55:90:
                    f4:3d:eb:28:ee:f9:c0:36:a6:43:12:b5:08:1b:26:
                    4f:21:40:d4:68:83:18:1b:95:d0:e4:b7:b6:b7:75:
                    d0:f7:d9:30:b7:49:3f:85:d7:f2:ca:d8:1a:f6:90:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EE:D4:8E:3B:CC:29:36:98:84:31:A7:C5:5B:83:DD:49:5F:26:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c51b58-797e-32c6-a5a2-abd16dc19fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.136.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:97:d5:d2:0a:09:a0:c8:8e:70:85:68:ce:de:91:21:b3:d1:
         c6:62:d3:ad:5f:cd:06:bf:fa:dc:ca:1f:84:85:5d:86:61:79:
         b2:02:ff:c2:ff:22:db:ed:05:38:2f:89:17:72:9e:88:16:5d:
         7e:42:e4:96:02:15:7e:4c:91:12:64:38:b4:53:47:e3:86:7f:
         9a:15:19:73:c8:99:f4:fe:8e:29:18:0d:c8:fc:0e:03:f5:89:
         07:70:f5:ed:2f:d1:ce:f6:97:c4:a0:6e:9e:8d:33:03:b7:28:
         d0:2a:4c:77:6e:38:fd:8d:27:86:ba:25:e3:7d:ae:6b:83:7c:
         4e:f7:62:91:8a:96:4a:8b:6a:48:d9:e4:95:d9:8e:84:6a:f6:
         9b:f4:72:bf:5a:0f:d0:fe:eb:7d:8e:15:44:e9:41:b1:7a:29:
         48:0a:25:78:28:43:ae:e4:76:02:f1:68:0f:4d:d3:83:01:fa:
         7a:5e:96:e2:7a:11:2b:c9:cb:a0:8c:ff:c8:f2:dc:51:62:e6:
         a1:0b:06:9e:36:d1:e2:c5:db:0e:ef:e6:95:3d:26:c4:3a:14:
         a0:07:08:cf:a3:f7:24:04:9b:50:7b:d1:a4:d1:e7:cb:15:98:
         ce:55:c5:82:66:e9:11:b4:7e:53:58:0e:da:53:19:de:0e:2b:
         96:77:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:18 2025 by rpki-client