Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76df2acd-38f5-356c-aaba-2af855fdbdc2.roa
File:                     76df2acd-38f5-356c-aaba-2af855fdbdc2.roa (raw, json)
Hash identifier:          CAcaRDYIgR1BGXzgBDqEk/OnyaMn85CXiBqfFhphFDo=
Subject key identifier:   96:BA:47:17:4E:83:C3:31:FC:E8:82:8C:71:69:5F:09:C0:7F:E0:F7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B2496E17095359BDF101A6180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76df2acd-38f5-356c-aaba-2af855fdbdc2.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        34.1.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:e1:70:95:35:9b:df:10:1a:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=568a741f-e47d-4034-8ab2-5f3eeb4d9bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:41:c4:3f:cd:9f:e6:78:8e:03:0f:b3:b0:
                    e5:5d:32:9b:d6:29:88:d0:61:0f:78:01:76:85:58:
                    99:54:3c:c1:ee:40:30:43:09:a1:a1:eb:76:4b:f6:
                    54:a8:e2:4a:06:4b:05:9d:f5:96:68:eb:88:0a:65:
                    33:b4:59:4a:e2:c2:3a:20:9b:76:8b:00:97:aa:c4:
                    99:fa:80:3a:13:71:65:2d:99:03:0b:6e:54:9c:11:
                    5f:03:88:f3:fa:57:3b:b9:25:f0:b0:99:9a:1f:5c:
                    85:ba:00:66:b3:9a:3c:90:b5:27:72:cf:6c:ea:8f:
                    7a:da:e3:f1:c2:c9:35:1a:aa:2f:47:a4:e0:8f:63:
                    c9:74:16:de:67:ed:57:b0:2a:7c:6f:dd:3d:63:cb:
                    da:da:a4:e4:aa:3e:69:e7:10:fa:10:83:d2:64:e6:
                    b7:27:e7:cb:11:cc:4f:21:3c:b1:6e:cd:15:0f:67:
                    20:3a:46:f3:9b:c9:ec:71:c9:c7:69:65:49:bf:24:
                    41:b6:e7:0a:38:2d:fa:8c:0e:99:83:03:0d:e5:91:
                    80:92:ba:f8:23:1c:9d:24:73:49:ee:70:4e:40:cc:
                    56:35:83:a3:ba:b6:41:e7:a8:3b:69:70:5b:31:68:
                    d8:26:99:df:e6:fb:4b:c3:3a:1c:12:1a:85:d6:ad:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BA:47:17:4E:83:C3:31:FC:E8:82:8C:71:69:5F:09:C0:7F:E0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76df2acd-38f5-356c-aaba-2af855fdbdc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1b:bc:23:8d:74:91:98:89:60:4c:a3:fb:7b:a8:6d:8c:d7:
         6e:64:cc:97:27:23:26:00:86:9a:be:ae:49:0e:5b:06:74:ee:
         2e:b7:ff:6e:66:0e:25:ec:10:ba:ae:61:95:d7:67:e6:ae:92:
         94:e5:b8:cf:b6:2f:7e:6b:13:28:d4:83:b1:a1:1a:f2:49:10:
         1e:c7:91:88:be:aa:ea:7d:cb:c7:be:58:db:d3:2e:a4:3d:69:
         b5:b5:5e:cd:37:65:50:4c:ea:db:f3:d0:13:e7:45:85:ee:f9:
         3d:5f:7e:38:47:de:42:bd:0e:f5:19:03:72:5d:12:de:a6:35:
         77:42:25:48:b4:ee:9d:9e:cd:46:ce:5f:b6:71:63:4c:55:b5:
         19:bb:ee:3e:dd:55:a4:5d:b8:06:6b:de:40:80:c2:7d:98:ba:
         b0:13:77:68:cc:ce:f2:32:6d:34:5b:e4:ff:87:ef:f6:99:c8:
         4a:7d:d1:ac:1e:f9:1f:3b:f1:fe:aa:86:61:1f:18:9a:9d:34:
         82:b6:d6:dc:22:cb:ab:51:d4:1e:0d:ab:10:fb:07:89:81:ae:
         cc:4e:3e:19:85:e6:fe:94:fa:dd:81:9d:85:a0:51:0d:c8:99:
         c9:f4:c5:62:63:b8:4e:db:7b:f4:c1:85:d7:e0:c5:3c:6a:c4:
         58:64:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:46 2025 by rpki-client