Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c9278a1d-aed6-38f5-8143-4d3065dc77bb.roa
File:                     c9278a1d-aed6-38f5-8143-4d3065dc77bb.roa (raw, json)
Hash identifier:          58lGaPxAgfFaAZ7rlPgVKUgK6ASHTRxNo/nXnOohBQE=
Subject key identifier:   EE:E3:76:4E:C8:8A:D9:33:7F:62:EA:56:C7:9D:DD:9D:74:16:D0:1B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797C07FFC8E4FA304A40C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c9278a1d-aed6-38f5-8143-4d3065dc77bb.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.143.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:c0:7f:fc:8e:4f:a3:04:a4:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=b3882644-3f85-44dc-a86b-8d30952d01b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e1:55:88:81:e7:40:87:5c:5e:30:c1:9e:d6:
                    7e:52:89:99:1e:44:14:0d:ee:cd:50:83:d9:52:26:
                    2a:6c:9a:ae:72:80:e3:c8:f0:99:08:a7:43:2c:5e:
                    73:0b:f1:ab:6d:7e:43:32:ec:6b:fb:02:a9:5f:2f:
                    f2:5f:c9:a1:7f:76:d6:96:6d:2d:be:63:4e:36:de:
                    bd:da:92:04:18:87:ee:8a:42:0f:c3:c7:95:b2:03:
                    c1:66:ed:b1:87:3d:51:33:b4:cc:8f:6f:e8:a6:59:
                    5a:a8:a8:fb:1c:fd:d1:8a:6b:04:2f:6f:0d:81:63:
                    43:44:a3:ec:77:de:fa:aa:40:2c:15:fb:77:98:14:
                    95:e4:bd:64:b9:29:23:2d:32:fe:3d:9c:65:68:5e:
                    ff:dc:1c:de:17:20:35:f4:e9:da:ad:8f:cc:3a:a0:
                    cf:ec:8a:43:c5:f4:b9:fa:90:75:97:53:69:bb:d7:
                    cc:67:5f:83:81:06:5f:ac:dc:56:8f:f2:01:c7:0a:
                    91:e1:4e:c9:3b:f7:39:e2:bf:ed:00:c9:0b:1f:5d:
                    63:af:ff:d2:1b:47:c1:96:1b:92:48:a4:b8:ff:0e:
                    f3:4c:c3:7c:eb:27:04:f0:2f:9e:2e:bb:12:d0:d5:
                    bb:85:92:a3:7d:d8:6e:a9:08:68:eb:c1:54:c8:9c:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E3:76:4E:C8:8A:D9:33:7F:62:EA:56:C7:9D:DD:9D:74:16:D0:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c9278a1d-aed6-38f5-8143-4d3065dc77bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.143.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:bd:c4:6c:58:8d:b5:e5:8a:bc:af:17:03:45:b8:9f:aa:
         b2:34:b3:7a:25:79:f6:4b:ab:2b:6b:b6:9b:23:29:e5:b5:cb:
         ad:c3:50:85:af:c4:44:65:4d:93:6f:a0:db:5e:34:9c:cb:b1:
         b9:12:c9:17:a4:fd:6c:dc:a4:13:5f:b7:ca:a2:68:c5:6c:bf:
         3f:88:94:7e:c0:97:f0:62:1d:5a:1c:94:fd:4c:14:21:26:09:
         6c:15:f6:35:dc:8e:48:c3:74:56:6b:92:bd:5b:17:7e:06:e4:
         8c:63:e3:64:ab:c9:a8:06:48:04:51:e3:7d:1c:2b:11:23:9a:
         83:15:f6:3a:5b:2e:2c:e6:e5:65:69:bb:cb:dc:b9:e0:3f:7b:
         3c:7e:ea:2a:e2:02:73:90:9f:d1:74:1e:07:03:74:1b:7e:30:
         dc:48:21:e6:81:78:a3:7c:83:87:b6:92:38:16:ed:b2:d9:55:
         dc:11:6b:aa:eb:ae:c0:64:27:d3:e5:15:7a:98:37:66:31:6e:
         6a:03:fe:cc:e8:48:0d:20:6a:b4:68:53:e0:d4:94:63:b0:60:
         5f:a6:19:39:7e:98:87:18:94:4c:91:d9:cb:61:96:9a:8e:70:
         e8:c5:71:78:06:34:71:2e:86:91:49:b3:88:45:bd:bc:c5:76:
         cf:0a:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:19 2025 by rpki-client