Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6901ad2e-eb32-3587-95ce-97a1802062fe.roa
File:                     6901ad2e-eb32-3587-95ce-97a1802062fe.roa (raw, json)
Hash identifier:          nBJRaZzHy7Mpn2h2eId8mDnt91iNLydL55J3+n8DhfU=
Subject key identifier:   EE:1D:2D:08:2A:9C:4B:3B:73:12:85:F9:80:E7:A6:3D:48:5F:7B:48
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CD63382A2F7899D7496B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6901ad2e-eb32-3587-95ce-97a1802062fe.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        34.119.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:63:38:2a:2f:78:99:d7:49:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=77ae6d80-d760-451c-b810-7fc3e850abe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c2:e6:51:a7:a5:57:5e:79:b4:07:e6:95:b4:
                    1b:5f:4e:b6:ca:fd:ce:96:10:1d:ae:79:76:1a:c7:
                    ad:50:b3:0d:de:27:0a:c6:c1:74:a4:b1:30:ba:db:
                    ee:bd:87:d1:1c:b1:ad:45:db:2d:bf:2e:ef:65:75:
                    bb:cc:d2:ba:4f:68:0a:fb:7c:5f:d7:aa:8f:2d:25:
                    6c:9c:50:f8:19:be:71:1f:4a:f4:fb:6a:6e:2c:b8:
                    af:dd:c2:a0:84:cc:44:c5:d8:0d:ca:81:09:5f:fd:
                    9d:46:fb:20:f4:83:b6:a3:d3:bc:77:16:49:be:08:
                    0b:04:c5:9c:2f:09:c6:fb:fa:ee:9f:04:ac:14:cf:
                    2d:b8:54:99:ac:47:12:5b:d6:1e:d8:87:d5:41:bc:
                    72:58:11:62:6b:c3:e2:0c:c6:fa:a0:a1:4b:40:84:
                    3a:a4:50:ef:1f:a0:10:64:76:b2:6d:f5:8b:86:ba:
                    f8:79:8a:e1:db:09:25:64:f4:73:23:d2:0e:38:2f:
                    a2:74:19:2f:69:48:33:86:49:0b:95:dd:70:80:d1:
                    a8:e8:f7:d1:78:27:ce:ed:a7:d8:8e:fa:07:9d:ff:
                    02:e7:5c:c4:c2:36:63:ce:15:b1:30:97:d8:fb:87:
                    6c:c6:b4:4c:0b:41:a1:76:0c:38:34:58:3e:55:8b:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1D:2D:08:2A:9C:4B:3B:73:12:85:F9:80:E7:A6:3D:48:5F:7B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6901ad2e-eb32-3587-95ce-97a1802062fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.119.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5c:ce:a0:14:14:b7:53:db:18:99:25:53:55:cb:67:f5:8e:
         87:06:4b:df:90:3c:33:a7:d9:db:61:ac:0e:cc:7d:1c:43:09:
         f1:97:cb:d0:41:d6:38:82:cb:5e:4a:9a:72:65:64:83:ce:42:
         83:39:4d:da:99:50:4e:78:1c:19:0d:d1:53:9d:9e:00:60:ec:
         e0:61:2d:4e:06:78:35:68:a4:5a:ba:d8:b9:45:f0:9e:7e:cd:
         e2:54:56:7e:7d:72:a5:04:c4:9e:48:07:c7:2a:6f:0b:3b:2d:
         92:8d:54:db:74:17:f1:26:a5:0c:fb:49:0a:db:ec:48:85:8c:
         7d:10:23:af:ea:f8:ab:58:1a:23:cd:9f:ec:75:20:94:a8:17:
         2e:f4:c7:ee:df:bd:24:17:ff:46:4a:bf:43:1b:05:d3:ed:1c:
         f5:30:03:25:0f:d4:6b:47:87:1f:24:eb:1e:a3:c4:b4:54:12:
         67:23:94:b8:a1:fe:f5:fc:43:17:c0:14:8e:fd:5c:b9:6f:ea:
         26:94:3d:22:0c:13:8c:ed:e1:19:c4:db:ea:a5:db:83:68:47:
         7c:36:1b:8f:18:6b:c5:f7:50:17:cb:85:b8:c0:d7:44:0b:74:
         7f:7d:f5:f8:60:1e:e3:a7:9c:63:90:7d:d5:45:06:d5:53:b4:
         04:1b:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:46:13 2025 by rpki-client