Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa
File:                     d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa (raw, json)
Hash identifier:          XzwXc15w6sBpdxkeZrRbJ4EZ2Y+ndkPSJ8gxxH6qV0U=
Subject key identifier:   26:AF:D9:94:3B:6E:31:45:01:B4:1F:F3:3A:F5:23:B7:1F:F4:A0:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E3FC4770355381AC98F7E1340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     15169
IP address blocks:        34.4.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:77:03:55:38:1a:c9:8f:7e:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=f063070a-ed59-4a37-9a2e-dcd614f343f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:7d:93:df:75:80:01:b0:22:e1:3d:ec:26:
                    bd:a6:3f:d7:04:28:62:66:5c:99:0d:0b:93:9d:57:
                    23:08:8d:8a:41:30:6d:ca:25:aa:f2:ff:62:88:63:
                    b3:81:0d:09:d2:61:cb:fb:8a:e4:bd:89:57:a4:59:
                    58:28:34:0c:97:54:0b:89:fc:df:e4:e4:f8:0e:c2:
                    2b:aa:d3:bd:1d:21:58:ce:4b:bb:ef:f9:08:79:9e:
                    7b:39:fb:82:fd:24:a9:98:32:d0:2c:38:02:4d:e1:
                    5f:1f:a2:b1:2c:20:e7:da:14:1f:4b:f5:4a:0d:c5:
                    da:78:4d:8f:17:c4:12:76:9d:08:52:53:5d:3e:b9:
                    b0:f0:68:74:db:91:3b:ca:60:84:d1:3e:cf:fc:84:
                    ae:78:8f:b7:e9:70:e3:cf:e6:a6:e7:0e:d7:92:22:
                    24:32:2c:a9:63:42:21:79:69:72:37:b0:84:dc:62:
                    f3:52:65:d2:13:03:41:64:28:3e:b7:e4:06:6a:32:
                    66:25:58:46:19:54:58:a0:b9:20:61:62:37:03:2d:
                    8c:c2:c5:fa:e4:af:70:28:9e:10:87:21:4b:7c:65:
                    01:3d:b2:83:71:40:7c:be:bb:da:cf:1e:9f:31:25:
                    97:99:f2:42:86:19:a8:6a:81:b5:e9:51:73:d9:2d:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AF:D9:94:3B:6E:31:45:01:B4:1F:F3:3A:F5:23:B7:1F:F4:A0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:7a:d4:83:96:59:29:99:06:b7:7c:6b:90:a8:62:f0:49:
         a1:e0:55:12:7f:8f:0b:5a:50:85:b2:ac:0d:2c:82:12:b7:15:
         3d:5a:2a:b7:05:bf:86:1e:ed:8c:a5:99:85:3f:44:e0:dd:0c:
         14:c0:52:8e:b8:57:16:75:6a:ef:cb:e1:62:ec:eb:60:d4:d7:
         e2:5c:9e:26:44:cb:e1:7b:08:ee:5a:96:26:0d:f2:16:72:2d:
         b8:04:db:b6:01:54:0f:9b:f9:14:2f:09:a8:53:1c:46:c1:56:
         fd:28:d2:89:7f:20:6f:da:37:a9:a4:37:62:a1:be:5d:a1:97:
         36:87:aa:ad:96:1c:89:2d:91:11:39:68:6a:8b:60:0e:36:06:
         10:35:d2:1c:39:3b:22:e5:0b:ac:1d:3b:53:fa:d3:2b:2b:bb:
         ab:4a:85:f8:e4:14:0c:49:50:7d:7e:4c:f4:b3:a4:51:c1:c6:
         6f:6b:d4:b7:2f:60:6a:78:88:5e:16:51:dc:e4:ce:2f:85:05:
         f9:25:17:7a:dd:a3:c1:7f:e9:40:77:f8:be:a0:72:b6:cd:0f:
         2c:42:b3:e9:bd:85:46:26:db:5a:66:03:7e:6a:2c:ea:b8:95:
         95:22:62:c5:0d:a3:64:2b:20:69:ed:90:87:fc:c1:c6:13:3a:
         97:0d:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:08:56 2026 by rpki-client