Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa
File:                     b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa (raw, json)
Hash identifier:          xzyNV/umWVddkGk0KjVBUCql74bAqHz5j/OoljpQ9zg=
Subject key identifier:   A0:00:8F:AC:8A:E1:B4:6D:63:09:81:FD:2C:BB:F3:BB:23:11:8C:CE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DC4005884FD62EEFAD134CAC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     15169
IP address blocks:        34.2.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:58:84:fd:62:ee:fa:d1:34:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=be4ab57a-2263-4ee2-b885-75e116463d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:cf:ff:72:2a:2c:18:e1:cc:86:97:fd:b5:
                    7e:31:28:8f:8f:5c:7d:cd:60:9f:2c:d7:9a:25:4f:
                    1f:70:2c:22:1b:19:6c:c3:1c:79:38:1b:24:d6:e7:
                    ca:8b:86:c3:63:7f:88:66:c2:6d:a8:29:39:95:a5:
                    82:1e:4e:92:46:66:80:78:4d:82:1e:78:2f:6b:1e:
                    21:06:2c:d8:8f:f2:a9:d5:19:c5:02:ec:45:2b:0a:
                    46:91:c8:1a:2b:97:49:5e:89:47:b6:67:76:51:9b:
                    ff:52:2e:04:d5:b7:7d:5c:31:be:9a:bd:95:63:98:
                    39:ab:17:cc:a9:41:c3:89:38:40:20:9c:e4:bf:4b:
                    00:a5:de:e3:64:9c:2f:df:de:36:f3:b1:ba:cd:eb:
                    1d:fe:19:e8:4c:32:8b:8e:de:d7:31:bc:61:cf:b3:
                    a3:b8:4b:4e:08:04:4b:ec:5b:52:bb:e3:a6:a5:c4:
                    f5:02:a7:d1:41:8a:96:f2:0f:84:2e:ce:2c:2b:7a:
                    8f:b5:68:29:48:ae:8c:0a:1d:d9:7a:b6:4a:bc:da:
                    ec:c8:98:13:18:1c:c6:0e:53:4d:dd:90:50:dc:47:
                    60:79:ac:e0:c7:63:bb:f7:35:ec:5e:d5:92:3f:cd:
                    fc:12:2b:26:0f:0d:39:d7:fa:89:7e:c3:55:e0:ec:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:00:8F:AC:8A:E1:B4:6D:63:09:81:FD:2C:BB:F3:BB:23:11:8C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b2:9b:3b:a9:89:30:f4:59:c4:84:a8:6f:9e:86:c3:86:12:
         ac:31:68:41:04:5f:8c:bb:a0:b7:06:6b:9c:49:f7:18:a3:32:
         d0:7f:41:27:e1:45:f9:aa:e0:d4:6d:06:2d:a8:36:ac:0e:ac:
         7c:3f:0c:d6:e1:42:4c:b3:e4:f8:21:d2:35:d5:5d:8c:df:55:
         86:34:f2:f5:11:5b:45:70:9a:2d:90:bc:f0:84:49:04:20:c5:
         4f:59:58:95:1b:f0:f4:57:54:7b:10:f4:95:ce:4e:e7:9a:3a:
         de:19:c1:f0:3a:6d:94:73:b7:91:92:a4:eb:9e:d7:39:35:02:
         51:9d:c3:e3:f9:1f:12:fa:2d:61:fd:1f:c0:23:ea:77:dc:a5:
         4b:8c:67:6f:72:8e:72:69:9f:c4:69:ef:5b:1e:38:22:4d:aa:
         f8:dc:97:45:ee:76:2e:8e:ab:84:bf:7b:5c:62:3b:25:15:79:
         9c:40:c4:71:76:80:c6:10:fc:8b:b3:56:41:71:d4:c0:04:51:
         c6:70:29:14:fb:0e:63:5e:a1:27:35:c7:cc:ea:ed:61:5a:d6:
         9f:59:11:e1:04:ac:e5:2b:4b:78:a8:59:d2:67:b0:f0:32:1b:
         9f:f7:04:fa:34:18:79:fe:61:af:44:19:eb:e9:6e:1e:5c:ad:
         e3:5d:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:08:23 2026 by rpki-client