Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8270a68b-2c4c-3155-9023-5a1bd4b2c0ba.roa
File:                     8270a68b-2c4c-3155-9023-5a1bd4b2c0ba.roa (raw, json)
Hash identifier:          sn1OM2P7gzhQuzl/8cEMb80S44KJH5X9QFUOktvH3IE=
Subject key identifier:   4A:15:FA:EB:93:7B:5A:C7:AF:C0:74:7C:F8:DF:0B:99:85:91:3A:24
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B8949FEBBCA50C5A2250FF480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8270a68b-2c4c-3155-9023-5a1bd4b2c0ba.roa
Signing time:             Thu 16 Oct 2025 02:42:32 +0000
ROA not before:           Thu 16 Oct 2025 02:42:32 +0000
ROA not after:            Wed 14 Jan 2026 03:42:32 +0000
asID:                     396982
IP address blocks:        34.158.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:49:fe:bb:ca:50:c5:a2:25:0f:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 16 02:42:32 2025 GMT
            Not After : Jan 14 03:42:32 2026 GMT
        Subject: CN=8b86460f-f73f-4a5f-bca1-c6175bd1d56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:0f:e1:b4:74:9a:e3:6f:0c:de:86:05:bf:
                    df:da:7b:49:2e:f3:a6:80:1e:ec:34:f9:08:21:2c:
                    92:d0:a4:0b:44:21:ea:d0:f5:bf:5e:11:c0:77:05:
                    7f:78:b3:f6:88:db:1a:7a:b5:ac:3d:df:cd:a7:94:
                    6e:9b:0a:8a:fd:15:a9:eb:e2:4c:a1:e3:f3:c3:64:
                    26:38:3b:d7:9e:d8:75:0c:a4:20:4e:a5:7a:35:fe:
                    e0:28:47:b0:f6:14:72:aa:ac:fd:f2:ce:6c:88:36:
                    62:a6:5e:0c:99:70:05:5b:8d:9c:16:71:70:8d:3c:
                    81:cc:e7:bc:8d:bc:6f:90:70:43:fa:7b:9d:94:19:
                    c2:21:ad:9e:21:2b:49:ee:d1:3e:6b:cd:b2:57:b9:
                    82:52:66:a7:8b:e2:a9:b4:99:27:a8:46:69:28:62:
                    2d:6e:03:c8:ba:b9:20:5f:c9:ea:1a:8f:93:3c:fb:
                    c1:cb:3c:a4:e0:b6:46:24:0c:04:f0:fd:54:8a:a6:
                    a3:ca:8c:a6:d9:97:b9:f1:c5:28:18:79:62:d0:df:
                    ce:6b:3d:5a:91:12:3e:5a:da:4b:8b:98:1f:8d:61:
                    63:9b:60:01:8c:74:0a:67:7c:bb:5a:8b:32:30:9e:
                    59:38:aa:a1:ae:fa:8e:5c:fc:04:86:4b:e2:c5:9c:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:15:FA:EB:93:7B:5A:C7:AF:C0:74:7C:F8:DF:0B:99:85:91:3A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8270a68b-2c4c-3155-9023-5a1bd4b2c0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.158.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:bd:e0:f5:40:a1:58:cf:26:72:bb:de:ed:f1:ad:b7:05:
         03:36:e1:8d:01:6b:b3:83:e0:ae:74:b9:f2:c6:4f:ce:99:99:
         5a:7d:1d:da:aa:90:7d:81:34:b7:09:fd:eb:68:15:19:1b:44:
         f9:ea:6a:24:f4:c0:76:3e:6d:84:ce:9d:cf:bb:64:79:ef:b1:
         11:b5:6e:8a:3f:07:c5:92:25:74:55:81:43:04:87:06:20:fd:
         f1:43:6a:c6:bf:1c:4d:d7:81:02:eb:a7:3e:ae:80:dc:49:0f:
         2d:f3:fe:84:20:56:82:b0:19:4f:7e:97:52:5a:d6:23:c1:96:
         a3:05:0b:3f:33:e0:0d:1d:a6:9d:f5:75:81:fb:0d:3d:e5:d4:
         d4:f9:f3:5a:fb:f0:c9:00:94:7c:7c:3c:5d:c7:78:d9:01:ef:
         fa:7c:4e:45:5c:55:dc:69:3b:0f:52:6d:09:28:56:74:05:39:
         5a:73:e2:11:b2:ee:f4:dc:d7:be:92:84:4b:2d:14:92:b7:75:
         f8:21:e1:85:e2:2a:7d:fa:e8:41:eb:02:72:26:63:0e:e4:7e:
         a0:23:77:6f:42:d6:f5:b1:8f:cd:1b:f7:b5:11:c0:3e:62:96:
         86:1f:f2:ce:7d:d8:51:0b:f1:0e:58:56:4d:bf:ad:c5:a3:c6:
         5c:79:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:55 2025 by rpki-client