Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5883070-c9c5-3422-b738-780ebb2058e5.roa
File:                     c5883070-c9c5-3422-b738-780ebb2058e5.roa (raw, json)
Hash identifier:          nUYj807h9/JTAjZrKsmhilCxwtP7Qw4URNmip+uUjbA=
Subject key identifier:   ED:20:DA:55:8B:10:0A:A6:E5:39:EC:43:46:EE:6B:9C:D5:09:8F:E0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797670EB5DFA41C16776F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5883070-c9c5-3422-b738-780ebb2058e5.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.74.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:67:0e:b5:df:a4:1c:16:77:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=05d41193-c2e2-44b2-873c-4082f9b7b3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:6d:d3:d0:15:cf:89:18:7f:f8:8c:a5:1e:
                    b9:96:0d:97:87:e8:52:4f:3a:10:bc:51:86:5f:18:
                    12:72:70:23:90:34:24:bf:30:99:14:2c:07:d8:4a:
                    ee:9b:21:7d:ab:0a:f4:16:11:87:f3:a7:09:88:92:
                    46:b4:a4:6c:53:4d:30:e2:f7:8f:5f:97:e4:3b:34:
                    b2:1d:35:ae:86:92:14:f4:ff:af:25:2a:ed:73:1e:
                    7e:ab:09:35:8c:0a:cc:ec:9b:04:42:09:ae:ce:30:
                    5e:7f:4e:b6:0d:15:7d:c2:da:06:51:0f:a5:d8:66:
                    6d:4e:f5:0e:60:6c:fd:2e:2f:11:9c:14:16:87:66:
                    ad:2e:fd:50:a9:e5:de:78:5e:e6:61:23:27:d7:4d:
                    1d:d8:9f:a9:fc:64:ca:51:2b:56:93:6d:b8:c5:75:
                    2a:10:98:df:a0:da:fc:06:45:8a:67:a8:78:87:d7:
                    47:1e:10:6c:3a:7f:ca:30:ca:48:b4:4f:85:e0:e3:
                    75:e4:81:06:b5:c0:64:34:64:24:9a:20:2c:d1:ce:
                    5d:8e:24:c9:5c:d1:51:76:52:d7:ed:14:29:78:27:
                    b3:8a:ae:1f:76:09:c8:b6:e1:62:09:c3:2e:d2:1c:
                    1d:27:42:d3:07:1e:a0:ba:44:63:bd:21:38:e3:15:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:20:DA:55:8B:10:0A:A6:E5:39:EC:43:46:EE:6B:9C:D5:09:8F:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5883070-c9c5-3422-b738-780ebb2058e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.74.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:16:79:72:67:d3:1f:31:15:52:77:7d:e3:04:72:63:f7:75:
         7b:9e:62:86:ac:df:09:0f:29:d4:c8:ba:2e:34:3e:2b:b3:a6:
         20:fd:54:eb:8a:07:ab:c2:4b:3b:02:17:26:e7:74:a8:bb:e1:
         4f:a8:b0:e7:8a:7d:09:c3:b7:a3:66:8d:90:5d:09:d2:fc:96:
         82:53:b7:ec:a2:cf:0b:52:ef:31:f8:3e:d8:93:13:7d:39:13:
         c4:1d:32:bf:b8:7e:94:77:00:3a:75:f9:ed:8c:ab:c3:53:6c:
         ae:48:8a:f6:1c:3d:ba:9b:51:08:7c:97:f7:54:d3:c8:09:9b:
         48:15:74:f7:7e:5e:5f:54:92:9e:00:94:1d:92:29:21:16:17:
         e2:a8:be:14:54:3b:8a:4a:39:b9:86:70:78:e0:a9:64:6b:34:
         ba:7b:93:8f:11:fb:c3:79:b1:8b:22:53:2a:cb:9b:77:36:9e:
         05:8e:9a:d5:bf:3a:0b:52:a3:df:70:6b:51:62:1e:f8:a6:bb:
         7d:3d:64:4a:8e:f0:5c:1a:0a:d2:8a:63:43:7c:dc:8f:8f:33:
         3c:76:06:26:0c:19:1d:04:48:a9:4c:02:78:d7:79:0a:b4:9e:
         b1:ca:6d:8c:1f:c0:bd:91:24:5c:c3:5e:6a:17:bf:66:7e:6a:
         42:12:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:16 2025 by rpki-client