Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e133e0da-d13d-36be-af87-a77ecb3b63e2.roa
File:                     e133e0da-d13d-36be-af87-a77ecb3b63e2.roa (raw, json)
Hash identifier:          tRXkhPHsYSTk1HFMrlB4rrIDpKCj0EMzwQX53DhXB8g=
Subject key identifier:   5B:48:96:15:18:8A:A7:A1:7D:9F:5C:0F:36:F5:1E:64:E8:6A:09:3C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B72C1E7686C73DBEC7CDB1280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e133e0da-d13d-36be-af87-a77ecb3b63e2.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     396982
IP address blocks:        34.137.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:e7:68:6c:73:db:ec:7c:db:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=ba2a008b-f8b7-4010-a7bb-e294b6b14908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:45:95:d5:3b:6f:02:df:91:a0:4b:25:d9:7f:
                    27:df:e9:6a:a8:52:7e:0b:e7:bb:e7:1b:70:50:7a:
                    5c:2b:72:38:62:19:04:26:9f:78:4e:f9:f6:ac:29:
                    a3:e0:c0:db:60:ee:19:b0:75:02:31:e2:b6:bf:d7:
                    d9:90:43:18:a7:2c:82:e1:77:88:28:80:91:a8:74:
                    e0:2b:ed:6d:98:4a:f1:cd:62:0a:64:2b:1a:a6:d1:
                    23:3e:e5:08:0d:c3:3f:c1:1f:4f:f7:48:e1:ea:39:
                    ce:93:56:b7:27:df:26:ba:47:e5:0b:d5:6e:3b:e0:
                    22:99:ed:c2:5e:48:a9:48:e3:f8:13:6c:5c:a5:cb:
                    d7:11:03:fa:15:7d:a4:32:9c:f3:ba:46:49:9a:ac:
                    46:b2:90:30:07:b2:dd:79:d9:a9:52:da:8f:eb:e7:
                    3f:81:7b:93:6c:bb:4d:a8:19:f5:50:d8:cf:22:81:
                    3e:e2:f1:42:68:0f:71:7e:d9:35:7c:9f:ef:5c:14:
                    41:f4:e1:c6:f2:11:6c:5f:7d:ff:89:71:c8:af:dc:
                    3c:84:7b:00:69:01:01:b0:08:a2:cc:c6:08:08:04:
                    1c:9a:99:a7:df:d7:36:e0:80:2c:d8:3d:a6:89:c4:
                    12:e6:4e:b1:31:68:de:76:3e:01:d2:b4:26:67:88:
                    bc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:48:96:15:18:8A:A7:A1:7D:9F:5C:0F:36:F5:1E:64:E8:6A:09:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e133e0da-d13d-36be-af87-a77ecb3b63e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:90:54:3a:76:11:2a:da:19:ea:e2:3d:e0:95:b6:75:0c:7c:
         55:33:56:1c:6c:da:27:87:56:50:c0:73:fd:3e:43:d5:a5:8b:
         c3:c5:e7:37:78:a5:5d:1a:3a:21:27:c9:3f:d1:94:c0:bc:13:
         ac:8f:75:5f:d0:09:11:0d:c8:0d:3a:2d:a8:9a:e9:ab:d8:23:
         c2:56:9c:4f:b2:51:06:93:1a:46:11:73:2d:0d:df:de:0d:69:
         ae:a2:40:83:b9:ab:b3:cb:2e:5a:ad:7e:db:c7:21:f8:61:2a:
         c6:ba:ba:d7:38:1d:72:fd:9a:e1:9d:df:e9:e8:72:1a:d5:74:
         ca:e6:80:64:c6:74:76:2d:13:9d:a6:d1:f0:48:92:4c:6f:70:
         df:38:90:6d:6c:9f:c8:41:cf:da:75:5b:86:4c:f6:44:8a:b7:
         e0:4a:95:48:92:c8:21:27:82:e5:18:ac:b3:bc:ca:5d:48:aa:
         e9:d1:04:5f:e1:3c:de:5e:86:64:01:7c:ed:34:e1:f2:78:d9:
         2b:74:9f:d4:73:b0:3c:f1:37:26:43:df:27:5a:da:0e:d6:29:
         ee:bb:57:c6:4b:9a:38:b5:11:a1:61:09:74:79:9f:01:e5:6f:
         34:35:60:b0:5e:d1:38:d8:88:06:29:71:3b:2e:4a:46:42:ff:
         c7:c8:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:56 2025 by rpki-client