Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa
File:                     d1298af5-c68f-32c2-8389-932d2088da4a.roa (raw, json)
Hash identifier:          HuL8qEd4To71zAeYWchmBfv6NKCl2Esnp4D/JwLbryo=
Subject key identifier:   F6:82:52:AC:F6:90:28:0E:82:AA:FD:AA:D1:7B:3D:29:11:77:0B:F6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B864CB5831DB59201D03A9900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa
Signing time:             Wed 15 Oct 2025 01:00:30 +0000
ROA not before:           Wed 15 Oct 2025 01:00:30 +0000
ROA not after:            Tue 13 Jan 2026 02:00:30 +0000
asID:                     15169
IP address blocks:        34.190.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:4c:b5:83:1d:b5:92:01:d0:3a:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 15 01:00:30 2025 GMT
            Not After : Jan 13 02:00:30 2026 GMT
        Subject: CN=98908d77-2fc2-43de-871d-1b93643b67dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:ed:a3:5e:f2:29:03:c5:c0:e7:24:43:9b:
                    e9:8d:0e:16:f9:fe:a1:0d:58:df:57:3b:5e:02:92:
                    48:c5:f8:78:6d:58:c0:b6:db:d7:75:41:de:37:76:
                    01:ff:81:fc:8f:ae:67:ff:d2:b3:f8:74:3f:cd:f2:
                    e8:0a:92:88:eb:a9:57:e6:40:f2:c5:11:02:8a:dd:
                    71:04:3f:93:45:e0:b6:db:f2:51:df:49:71:99:63:
                    91:80:5f:ba:ef:e3:72:84:3f:77:e0:91:48:cf:20:
                    fe:e3:09:47:7e:94:97:f6:30:29:71:98:b5:03:53:
                    ba:21:1c:1f:65:87:fa:9f:82:be:fb:6d:ac:98:66:
                    d2:6e:74:a9:5c:f8:20:e2:92:81:43:b0:c8:27:ab:
                    4b:5a:2f:50:36:ab:38:fe:56:57:35:da:e8:9b:0b:
                    61:ce:d1:58:05:66:dc:86:56:2a:20:bf:0e:95:21:
                    c9:5c:bd:0c:e0:c5:f6:b8:96:e1:26:98:ef:b1:d5:
                    98:d9:e9:c8:e0:2c:c9:cc:aa:c6:fb:e4:7b:5a:16:
                    19:58:48:69:1b:59:ab:4b:86:c4:30:03:34:73:e9:
                    e3:c7:aa:fc:b1:53:06:a7:ff:71:eb:23:70:dc:f4:
                    f9:d2:4e:48:c1:f0:fa:67:35:bb:14:c8:bb:8f:b5:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:82:52:AC:F6:90:28:0E:82:AA:FD:AA:D1:7B:3D:29:11:77:0B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:22:11:45:e8:21:20:2b:01:c2:8b:82:7e:62:eb:08:3d:38:
         48:31:11:54:ed:b6:17:15:25:68:ce:09:98:07:f4:39:ce:1f:
         1e:d4:7d:95:c8:76:f0:02:ea:fa:4e:a9:5a:77:50:eb:bf:9d:
         37:4f:f1:0f:b9:fb:aa:a3:84:0e:80:89:c2:8d:1e:ec:0d:e2:
         4a:c5:ca:a8:57:3e:d5:a0:f0:51:4f:1d:a6:8c:06:02:4b:e6:
         1a:4d:28:b7:15:a5:38:f8:a1:a9:47:2b:67:20:4e:68:9a:b9:
         5f:d1:50:d5:15:6a:e6:49:2c:ab:62:92:e8:4f:15:78:9f:5b:
         49:25:f0:31:8a:7b:40:85:93:66:20:ce:ce:fc:d4:77:6a:dd:
         18:af:5b:63:02:3b:c0:e5:2e:ab:f5:94:8f:ab:4c:33:5e:50:
         51:c1:e9:be:e1:45:6d:7c:30:d3:b5:59:2f:c8:98:60:bc:99:
         55:33:62:1f:a6:05:df:00:d5:ec:f0:6a:4a:8f:33:89:a1:2a:
         af:b0:be:f3:f2:8e:f0:da:0c:ec:1a:db:76:12:11:bb:3e:84:
         69:c8:e8:a0:67:04:e6:11:f1:d8:91:08:22:fe:84:16:da:a6:
         34:70:b5:d2:40:ac:1d:eb:95:4c:35:30:7e:b8:71:76:8a:12:
         60:b4:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:02 2025 by rpki-client