Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4e28a3c-241d-3bfe-a5f7-7a08ebed5bcd.roa
File:                     a4e28a3c-241d-3bfe-a5f7-7a08ebed5bcd.roa (raw, json)
Hash identifier:          Orhn1WEGiQ28Zo+z3p8qXF9bSvCBdmcpgAzxBaCEMRQ=
Subject key identifier:   0C:C5:66:66:11:18:0F:DD:E1:63:69:21:C5:0E:88:FC:3D:CB:C0:C1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67978A839F54B40AFDC3F1C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4e28a3c-241d-3bfe-a5f7-7a08ebed5bcd.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.43.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:8a:83:9f:54:b4:0a:fd:c3:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=3f18525d-d410-4bff-ab2d-8f7a59c64606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d3:5b:c3:59:0c:53:c5:9b:df:ec:92:5e:ab:
                    d1:1c:3b:e4:fd:de:24:87:9d:41:78:7a:25:a3:70:
                    51:49:81:d2:d2:eb:cc:14:90:b3:63:c7:04:b1:b4:
                    c8:62:b8:e5:c5:89:e7:d8:06:04:d0:a7:45:2f:22:
                    9d:1e:7e:66:8f:b2:16:45:d5:06:7a:ad:80:84:73:
                    38:fe:cf:4e:47:1d:a5:6a:6b:36:c3:c5:bf:c3:f4:
                    be:9b:f6:33:f9:91:a2:b7:e3:92:43:ca:bb:d1:7d:
                    50:db:36:1d:28:2b:2c:7c:f7:56:a3:0d:c4:88:6f:
                    9c:03:a2:0e:3e:3d:9c:c1:a7:2c:12:34:db:b6:1a:
                    30:b6:c5:81:bc:9d:c1:f8:c6:06:a3:0a:eb:81:48:
                    57:7b:7b:04:55:4d:94:9b:0d:a6:43:cf:ab:31:61:
                    d9:86:5b:d3:89:90:de:67:bb:43:81:e0:bf:4a:cc:
                    96:26:11:e2:3c:70:27:c5:60:86:25:08:d1:43:5d:
                    a1:48:d2:fa:c3:69:22:06:7a:e2:56:e6:e4:11:14:
                    82:28:cb:a8:9b:d3:7b:27:b0:cb:b2:a3:ee:57:8a:
                    1b:11:2c:88:19:11:8d:82:d7:b8:28:54:b3:f2:87:
                    83:b8:b8:02:4a:69:08:61:0f:ff:71:31:c2:92:f3:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C5:66:66:11:18:0F:DD:E1:63:69:21:C5:0E:88:FC:3D:CB:C0:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4e28a3c-241d-3bfe-a5f7-7a08ebed5bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:72:00:e1:15:59:73:c3:7a:f8:bc:a3:4b:19:88:64:ae:01:
         36:64:6f:84:09:5f:50:0a:c6:83:c6:b6:94:10:da:3f:7c:df:
         bf:83:db:84:02:65:b2:46:84:0f:7f:ca:f4:97:8e:9c:5e:89:
         ea:9c:5d:eb:93:6f:02:ff:51:df:df:55:3d:54:4c:b4:3e:b5:
         3a:22:e9:bf:de:d3:e1:4b:d7:7f:bd:ad:1e:67:cd:ae:64:32:
         41:41:2a:5e:d9:d1:a0:55:b2:57:dd:11:27:c9:04:72:90:2e:
         97:c5:42:55:b3:44:73:8f:67:b2:33:38:d0:41:47:2b:f0:3a:
         2a:ad:7f:91:0f:f3:72:ae:f9:97:f6:27:b8:f9:bb:46:52:f4:
         1f:a1:cb:19:91:20:4c:18:cf:0c:97:64:1a:c6:be:2e:b0:35:
         aa:40:0a:58:dc:4a:a1:cd:3b:f4:f8:81:d0:62:12:85:b0:e1:
         38:e6:01:53:6b:af:c5:2c:63:55:7e:77:2b:67:72:81:a6:e2:
         90:77:fc:26:eb:02:82:8f:a4:96:ec:63:01:46:3c:f2:db:ec:
         c9:6f:b1:86:2c:1c:98:21:8f:84:db:ea:25:1e:11:39:f3:97:
         5a:ae:f7:d3:28:a0:e0:2a:3e:9e:0f:63:71:c1:5c:99:24:38:
         a9:0b:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:26 2025 by rpki-client