Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f6c7f49-a185-3cc9-9361-fc0342e40e0d.roa
File:                     5f6c7f49-a185-3cc9-9361-fc0342e40e0d.roa (raw, json)
Hash identifier:          qFoJwOt0JqbKBPpjmOGFqqhx6xbSYpprWai7zAikTdY=
Subject key identifier:   D8:F0:2E:33:2B:B9:BC:62:6B:2E:FF:2A:28:F8:C2:93:A0:DF:E2:82
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B72C1F297C0EDF1BFDA566B40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f6c7f49-a185-3cc9-9361-fc0342e40e0d.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     396982
IP address blocks:        34.141.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f2:97:c0:ed:f1:bf:da:56:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=d989df35-d362-488e-9373-d7493a7b9d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:6b:20:09:4c:5c:ff:99:58:fc:b9:ba:3e:
                    e4:8e:13:e4:1c:c3:7a:d1:4e:a1:34:0d:12:0d:2f:
                    e2:9f:c7:dd:89:8c:36:53:53:61:84:ff:40:ed:1b:
                    c7:e5:97:ff:40:1c:a1:0f:ae:5e:5d:b9:72:b2:f0:
                    6a:63:2f:8b:5f:f9:75:87:2c:7a:9e:3b:5b:73:5d:
                    66:8d:f7:85:f3:df:dc:f5:e2:9b:39:e3:3f:a3:d5:
                    a0:6c:b0:3e:e6:b0:f5:62:38:12:a6:c9:7a:d7:14:
                    bd:4d:a4:91:4d:88:38:a7:0a:40:2c:e8:00:4c:b8:
                    df:ba:94:01:66:ed:87:09:75:22:5c:e9:39:d4:14:
                    e6:df:47:29:0b:d9:a9:b9:d2:23:85:6b:83:72:c1:
                    94:8c:64:5e:f0:ff:c4:4c:db:2b:6f:60:85:e9:54:
                    bc:eb:49:bc:93:ac:a0:34:95:e6:4e:40:9f:ab:2b:
                    af:f3:9b:66:a1:1e:61:b9:42:cd:37:0a:9a:d2:75:
                    20:bd:6b:8f:a0:c3:8f:b7:47:66:35:57:62:dc:8e:
                    0a:08:e5:32:e7:6f:e5:a8:82:e6:27:25:dc:98:48:
                    82:ad:c4:6c:4d:18:4f:3a:42:05:4a:e4:62:73:b5:
                    59:96:7d:45:96:ff:3f:a7:5f:f1:87:22:b3:15:8a:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F0:2E:33:2B:B9:BC:62:6B:2E:FF:2A:28:F8:C2:93:A0:DF:E2:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f6c7f49-a185-3cc9-9361-fc0342e40e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.141.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5c:af:75:c7:56:93:e5:e9:1f:ac:1f:07:16:d8:8e:ae:83:
         5d:c7:bb:3b:84:72:40:e1:ec:8e:6d:37:a5:bf:59:94:7b:a3:
         40:1f:3e:ee:32:1b:04:bc:c5:26:0b:ef:91:c3:c4:4d:a4:43:
         ff:51:97:65:9d:dd:19:7a:fc:64:5c:21:da:09:a2:4d:ca:63:
         56:4c:5c:57:81:25:d3:c7:38:3d:46:13:df:c6:a2:a0:d9:70:
         85:f0:4c:a1:bb:8a:94:b5:4f:ea:4a:ed:2f:d5:d8:69:6a:0d:
         b4:85:b9:51:06:f3:41:49:6f:ae:74:fc:0c:7b:f3:9c:76:f1:
         fe:31:4a:01:84:0f:f3:8f:a4:94:a6:cf:87:ff:62:cc:aa:bc:
         04:9f:4a:b4:41:68:ef:ba:b1:0d:32:a4:00:e6:51:83:96:d0:
         02:5f:04:31:c4:bc:f8:43:df:88:a3:14:75:22:0e:93:59:39:
         98:0b:33:a8:35:e7:95:a0:9a:8d:e3:bb:e2:bd:14:ef:9b:cb:
         ed:fb:2e:3f:29:f8:d8:0e:4a:fb:59:44:e4:52:b1:3f:7a:09:
         24:8c:bd:04:18:64:58:fb:39:bb:02:fb:c9:cd:73:09:6e:8f:
         74:14:4f:2d:10:3a:77:24:01:33:2e:76:b8:cf:b6:d8:54:20:
         d6:59:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:54 2025 by rpki-client