Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea667d11-6ebb-305a-92cd-bf792e5095e1.roa
File:                     ea667d11-6ebb-305a-92cd-bf792e5095e1.roa (raw, json)
Hash identifier:          jAU+nJGG8Oib1zEwj6UbbGc6juXx777CNr9muQGXXCY=
Subject key identifier:   E6:DC:A0:50:07:81:7F:18:9C:C4:04:48:46:91:0B:AE:65:F9:94:54
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67978DF7480E9C83EB36F400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea667d11-6ebb-305a-92cd-bf792e5095e1.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.48.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:8d:f7:48:0e:9c:83:eb:36:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=fb998c61-6752-4983-be42-0b67290f21c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:02:26:70:50:f4:53:f4:d1:f8:57:3c:8a:79:
                    0a:3a:36:de:ac:18:fa:6d:bd:5a:d5:b1:03:6b:42:
                    e5:72:fb:17:38:a0:60:fd:95:6f:26:cf:5f:42:34:
                    90:16:51:2d:ad:05:36:fe:cf:27:01:81:ce:7c:f1:
                    e2:6b:99:e7:b6:a0:8b:aa:be:82:88:ab:0e:28:99:
                    f6:f3:e5:75:14:87:bc:71:68:09:ee:fa:c9:7c:9d:
                    4c:18:56:64:94:b0:8e:cd:8f:6a:0c:45:ff:da:1b:
                    0b:fc:db:15:42:bb:6c:c5:41:5e:c1:77:e9:de:d3:
                    70:8b:db:af:db:de:2b:c9:84:f4:81:70:a0:e5:71:
                    4e:b6:c3:23:b7:8a:6d:a2:0d:7b:d4:f8:67:46:40:
                    3e:38:0d:2d:18:d4:ab:61:b5:3c:bd:cb:03:6b:ae:
                    2f:84:83:2f:d9:6f:b6:a9:10:d2:98:5d:24:62:82:
                    c9:36:f8:7d:7e:75:18:39:8d:81:d4:a2:f2:40:22:
                    70:d5:1d:fd:65:4f:8d:37:9c:f2:a6:de:fd:f8:27:
                    ba:35:e2:2b:ed:5f:46:a1:59:40:70:01:02:83:48:
                    f3:fa:54:ae:cf:a2:7d:45:21:08:0c:d3:9f:4b:7e:
                    e7:89:37:1c:1b:51:5f:0f:25:58:6c:da:2e:2a:00:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DC:A0:50:07:81:7F:18:9C:C4:04:48:46:91:0B:AE:65:F9:94:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea667d11-6ebb-305a-92cd-bf792e5095e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:db:16:a8:9d:b0:cf:a1:3f:6d:6d:20:3f:3f:48:7b:fd:a0:
         eb:cf:c8:d0:4b:6c:48:fd:47:04:42:e1:e6:bf:d8:1b:2f:c1:
         ab:ff:c5:10:24:89:1b:0e:e0:ee:0b:c6:da:b8:24:54:82:4a:
         b8:e6:2d:5f:2b:c3:ff:f6:82:69:57:b0:da:1d:09:58:ec:d7:
         79:aa:6b:5f:ec:ad:a2:a6:48:90:24:48:ea:30:fe:46:3f:08:
         33:77:ca:b9:c7:1b:cb:17:d6:d2:57:fc:40:45:61:b5:7d:c4:
         f1:8e:a1:d5:8d:07:c9:f1:1b:0a:27:27:01:df:89:b6:9d:f0:
         42:00:34:6f:e6:aa:56:da:39:97:c1:2b:f3:ea:77:ef:05:64:
         f8:5b:de:03:e2:ac:6b:bf:01:43:a9:b7:18:02:34:bd:22:4d:
         89:d3:55:a1:bf:c3:71:a1:19:18:94:be:57:20:01:a5:77:fc:
         dc:05:56:bb:4e:7f:da:60:24:a8:37:58:35:63:fd:66:d7:cb:
         a7:0a:9f:f8:5f:f8:53:62:98:20:02:b1:cb:61:5c:07:75:44:
         e6:9c:ea:fa:34:3a:f3:ca:77:78:17:6d:9d:22:f7:61:22:54:
         6b:8d:6b:db:66:6f:5a:72:0c:09:18:ed:43:87:f6:21:a3:3c:
         2b:8b:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:06:43 2025 by rpki-client