Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfc2481d-102c-3256-bf46-f9479a3e8271.roa
File:                     dfc2481d-102c-3256-bf46-f9479a3e8271.roa (raw, json)
Hash identifier:          /Di6/4/zcPqOjiRmvatzfX1zWO7ZBa3TDNvpp/EVeIo=
Subject key identifier:   92:33:0F:D2:95:C3:F7:9C:FA:9A:A6:2E:9C:AC:BB:CF:E3:21:88:B9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E4824A69B31D6CBB499325EC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfc2481d-102c-3256-bf46-f9479a3e8271.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        34.181.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:a6:9b:31:d6:cb:b4:99:32:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=f9ffdc77-d89a-4554-8e29-86093fcb4afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:38:a5:70:38:8b:4c:e7:43:97:a3:b1:9d:
                    05:d7:e2:56:42:55:a6:56:2e:ef:de:f7:2a:16:4a:
                    84:ba:e0:ca:29:a9:52:55:19:d6:45:1d:37:ca:c8:
                    60:70:bf:41:d5:37:d8:d9:85:17:6e:0a:67:01:92:
                    ae:5f:42:49:13:c1:ce:a1:bb:0e:03:89:cc:6a:84:
                    9d:fc:e8:ab:9a:79:8e:3f:61:99:e2:54:df:8b:a5:
                    a2:c8:31:51:20:b4:2a:81:1c:d2:a8:8e:8c:c8:28:
                    62:ff:39:e6:c3:85:d4:35:e4:2b:af:9d:a9:27:00:
                    99:31:4f:bc:80:47:8b:30:ff:1a:6f:6e:52:48:20:
                    d5:8f:82:ad:07:98:37:f4:eb:dd:b6:4c:b5:b5:06:
                    dc:fd:46:e9:67:4d:b7:19:93:57:b7:1b:c0:62:f6:
                    e4:2f:bc:10:10:5e:f2:d7:b1:9e:67:9d:7b:e4:4b:
                    90:63:c7:d7:92:90:e3:27:a9:b1:7e:4f:06:98:37:
                    42:34:86:57:d1:a4:0d:d3:2b:de:d6:27:db:fe:e8:
                    eb:69:81:4e:e5:2a:69:8e:49:79:99:32:73:40:21:
                    5d:1f:6e:1d:b6:36:47:82:73:e9:ba:2e:96:7c:54:
                    46:0a:61:6f:6c:af:79:8c:b4:1b:ce:24:2d:f0:94:
                    d5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:33:0F:D2:95:C3:F7:9C:FA:9A:A6:2E:9C:AC:BB:CF:E3:21:88:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfc2481d-102c-3256-bf46-f9479a3e8271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.181.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ff:c5:53:89:3b:56:85:5f:56:c8:55:34:6b:df:72:8e:07:
         91:9d:76:06:f2:cf:6d:e5:cf:1c:f7:c0:6a:c7:66:e7:78:4c:
         bd:15:fc:1f:f8:c7:8f:82:2d:56:8a:65:0e:3d:fa:f8:11:95:
         da:be:0d:85:da:68:35:bd:94:4f:bf:4e:4b:a9:e5:c2:96:ad:
         c7:2b:78:41:eb:23:cd:6c:35:d4:af:c3:f2:a7:4c:29:26:7f:
         62:d6:d6:13:72:89:86:e4:26:9c:7a:df:13:3f:d5:a7:d3:e5:
         9a:6c:8b:81:70:f8:07:22:fa:73:91:34:05:47:58:c0:a8:c4:
         6d:eb:52:47:1a:b5:02:56:a7:9e:bd:1a:f0:b7:22:97:d6:3a:
         eb:d2:e7:4f:d5:81:33:7e:38:40:2c:31:0a:f8:c8:f2:67:57:
         27:c7:58:4e:1c:73:f7:bf:e1:da:d1:23:73:a7:55:0b:ca:27:
         f2:02:e3:12:13:96:44:1e:b7:27:06:a0:fa:dc:41:80:15:62:
         2b:ec:f5:f7:65:8d:26:89:7d:98:09:29:2f:56:e2:b0:a3:25:
         d4:d0:d4:d6:2c:52:55:68:dc:86:0e:97:56:20:5f:f9:6f:68:
         1b:62:68:03:d4:63:4b:67:56:f1:60:47:3e:25:8b:20:70:31:
         c5:fe:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:35 2026 by rpki-client