Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d3c67e7-0eb6-3b92-a6a4-b0622cb66a53.roa
File:                     7d3c67e7-0eb6-3b92-a6a4-b0622cb66a53.roa (raw, json)
Hash identifier:          S2twmNLv+gHpopZn/WJPzwYkYJNcNf6sfG/Y9pmsxF4=
Subject key identifier:   DC:9A:37:85:F4:31:52:BA:1A:BC:5C:BB:1D:C0:1F:53:4B:60:8F:0D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67976BFE54D1CB579D068780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d3c67e7-0eb6-3b92-a6a4-b0622cb66a53.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.81.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:6b:fe:54:d1:cb:57:9d:06:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=4aee80dc-aba9-44df-8073-fd672bfc69b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:89:9c:30:13:01:95:45:6a:86:77:9f:74:
                    1b:1d:65:31:90:b9:26:54:8c:5d:a9:43:b9:b1:ad:
                    72:1e:f6:fa:e6:d9:e2:48:3f:75:b0:8a:a7:35:37:
                    92:10:19:3f:0f:c0:64:77:d2:7d:01:d4:c8:c8:03:
                    d3:45:a4:6f:d9:94:55:c0:59:ae:6c:ee:84:d1:30:
                    50:0e:bc:71:5d:2f:fa:4b:76:9d:3d:7c:3b:72:4d:
                    c4:be:52:f7:c0:56:6a:f4:a5:9e:f5:a4:ba:5b:85:
                    a3:97:cb:2a:dc:20:07:f3:dc:d9:6a:dc:5c:5a:0f:
                    bc:9b:a7:ca:03:03:32:45:52:28:ce:ef:fd:02:d5:
                    05:08:dc:b9:bd:d6:0a:b1:fa:c4:08:e9:40:a1:cb:
                    d2:ab:a2:f0:c5:1a:72:c8:61:89:aa:32:49:ca:0e:
                    b5:27:33:fe:36:21:89:c2:a9:8e:8a:62:0b:8a:80:
                    12:9f:6b:78:d4:64:bd:86:48:98:20:17:3a:09:09:
                    22:7e:6e:57:b6:91:19:95:5b:7b:4d:2e:df:50:a6:
                    5f:60:bb:88:5e:40:cf:0b:0a:46:8d:c5:0b:93:68:
                    a4:14:14:a0:76:ea:74:9a:cf:82:d4:8b:da:b0:79:
                    51:8c:1a:54:38:70:12:3e:2e:bc:61:6a:20:8c:c4:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9A:37:85:F4:31:52:BA:1A:BC:5C:BB:1D:C0:1F:53:4B:60:8F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d3c67e7-0eb6-3b92-a6a4-b0622cb66a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.81.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:56:f3:6c:94:3c:79:2a:24:64:c4:63:95:29:45:87:a0:
         e5:3d:81:ba:96:99:48:11:99:79:6c:e7:f4:9d:d3:0c:c8:73:
         c3:99:1b:c1:c7:a0:c4:7b:28:3f:0c:bb:8b:d0:6c:e3:13:0a:
         c6:41:0f:25:a1:b3:37:59:e2:f9:69:b3:ab:f2:39:af:c1:5f:
         85:87:8f:10:8f:30:e6:37:a1:78:00:60:16:5d:03:19:57:86:
         ad:80:8e:73:cf:d3:fb:a6:7d:77:6a:62:a6:ba:05:69:08:7f:
         48:31:9e:99:90:7a:93:07:96:0e:38:35:2c:83:c7:08:fd:d7:
         a5:3d:12:70:bf:0e:9b:7e:b6:e2:57:4c:60:45:54:7d:ca:62:
         4d:4d:6b:29:93:47:3c:54:f0:0e:0c:d4:d3:09:cf:fa:eb:51:
         c9:44:e4:3c:d7:94:52:21:18:0a:17:7f:4c:5c:13:b6:fc:8d:
         3a:13:fc:70:1f:44:1a:3f:6c:2d:48:39:b7:6a:ca:e3:95:a7:
         cb:43:67:80:b1:67:00:8f:e8:67:c7:74:83:6e:32:b1:86:4d:
         b4:81:f6:c4:c7:3f:b5:0c:2d:0c:07:4b:16:af:66:40:94:a1:
         16:a0:e7:df:15:2e:02:83:f8:4d:1f:78:78:2b:db:44:73:e4:
         93:d5:bd:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2v+VNHLV50Gh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
NGFlZTgwZGMtYWJhOS00NGRmLTgwNzMtZmQ2NzJiZmM2OWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSWJnDATAZVFaoZ3n3QbHWUxkLkmVIxdqUO5
sa1yHvb65tniSD91sIqnNTeSEBk/D8Bkd9J9AdTIyAPTRaRv2ZRVwFmubO6E0TBQ
DrxxXS/6S3adPXw7ck3EvlL3wFZq9KWe9aS6W4Wjl8sq3CAH89zZatxcWg+8m6fK
AwMyRVIozu/9AtUFCNy5vdYKsfrECOlAocvSq6LwxRpyyGGJqjJJyg61JzP+NiGJ
wqmOimILioASn2t41GS9hkiYIBc6CQkifm5XtpEZlVt7TS7fUKZfYLuIXkDPCwpG
jcULk2ikFBSgdup0ms+C1IvasHlRjBpUOHASPi68YWogjMQEqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNyaN4X0MVK6Grxcux3AH1NLYI8NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2QzYzY3ZTctMGViNi0z
YjkyLWE2YTQtYjA2MjJjYjY2YTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFr+VvNslDx5KiRkxGOVKUWHoOU9gbqWmUgRmXls5/Sd0wzIc8OZG8HH
oMR7KD8Mu4vQbOMTCsZBDyWhszdZ4vlps6vyOa/BX4WHjxCPMOY3oXgAYBZdAxlX
hq2AjnPP0/umfXdqYqa6BWkIf0gxnpmQepMHlg44NSyDxwj916U9EnC/Dpt+tuJX
TGBFVH3KYk1NaymTRzxU8A4M1NMJz/rrUclE5DzXlFIhGAoXf0xcE7b8jToT/HAf
RBo/bC1IObdqyuOVp8tDZ4CxZwCP6GfHdINuMrGGTbSB9sTHP7UMLQwHSxavZkCU
oRag598VLgKD+E0feHgr20Rz5JPVvTE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:59:42 2025 by rpki-client