Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc16cac9-185a-36bd-b9cf-2044fd317de5.roa
File:                     fc16cac9-185a-36bd-b9cf-2044fd317de5.roa (raw, json)
Hash identifier:          a5D4Lrh6YivIghKrCoPgIi0IDvX4xE3mYip5Z2OdRJg=
Subject key identifier:   24:9D:F9:AC:CB:B3:1D:29:AC:18:BF:BC:84:56:FF:10:04:81:A7:68
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE29BBF24BBB834C5C9E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc16cac9-185a-36bd-b9cf-2044fd317de5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        34.106.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:29:bb:f2:4b:bb:83:4c:5c:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2d13b791-a9d0-48d7-a538-128ad5ea573a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:f9:1f:cd:c8:31:46:fa:fd:52:61:91:f8:
                    76:f3:54:32:e4:48:13:9b:b9:14:ce:da:18:9c:00:
                    b3:03:f3:06:79:42:70:46:4b:10:88:bb:5e:43:4a:
                    3c:de:8f:51:41:06:42:f5:93:50:cd:b9:9e:d3:56:
                    4c:26:2e:27:ef:04:1b:c8:a5:0f:76:86:90:3f:a6:
                    d9:ca:bf:c9:b1:9d:8c:fc:13:78:b6:3b:4b:3b:dc:
                    1b:95:77:62:fd:ba:69:4c:8c:19:76:5c:9a:8c:a1:
                    46:b0:a8:f7:b2:f7:60:c7:ff:53:f1:57:f8:4a:01:
                    5e:87:e6:5c:47:99:cc:4b:bb:15:ea:1c:f6:e4:fc:
                    76:01:3f:55:ef:c0:76:47:b1:66:38:06:4c:0d:e4:
                    04:71:8c:e8:d3:d0:2b:37:b0:95:20:fb:07:46:11:
                    d3:30:f7:a2:9b:4d:7f:38:61:9c:3d:bd:48:2d:35:
                    90:ee:bd:bc:50:aa:01:56:6d:ba:57:f1:d2:21:7f:
                    eb:d8:a0:17:ed:0d:03:62:20:49:af:1c:da:15:30:
                    83:27:bd:ab:48:b4:0f:d7:10:a6:bc:52:58:ff:35:
                    0f:18:70:df:35:b4:b8:32:e8:ea:74:bb:90:fa:bb:
                    4d:a6:12:37:6f:e4:d4:73:f4:da:e1:e2:ba:8c:32:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9D:F9:AC:CB:B3:1D:29:AC:18:BF:BC:84:56:FF:10:04:81:A7:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc16cac9-185a-36bd-b9cf-2044fd317de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.106.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:ae:db:e2:4a:a1:ff:4d:be:b1:0c:6b:3a:ab:19:ed:12:
         04:7f:5a:f6:d4:0c:ef:d3:9a:f9:d6:60:a4:fb:af:e4:6d:1e:
         65:76:9a:0e:50:e4:6c:4a:9c:97:1b:e4:95:ea:48:db:63:61:
         88:20:19:77:94:4a:d0:02:62:61:0a:2e:32:27:8b:15:cb:ad:
         b0:ac:77:ef:3a:0c:40:60:cf:63:8b:52:42:f0:13:1e:2c:b6:
         ea:8a:77:60:56:eb:97:d3:49:1d:29:3b:61:86:d4:0d:4f:2f:
         68:f7:47:5e:e7:02:9a:4b:eb:2b:e0:03:72:c1:cc:70:94:90:
         63:38:7c:2f:91:88:21:89:4d:0f:e1:04:d5:15:8c:aa:c6:64:
         7c:2f:2a:ce:8c:1e:c0:91:b4:0d:d5:c2:43:05:ba:68:c2:af:
         40:c3:64:e2:cd:8b:a3:c8:12:1c:70:3b:a9:6a:ae:af:f0:78:
         49:b4:15:bb:1e:ae:c5:e1:ad:96:e3:56:e7:fc:aa:0c:97:ee:
         74:d5:c0:40:3b:bc:d3:06:02:32:a9:8e:28:88:7e:a6:97:6d:
         85:25:7d:17:fc:63:d6:8e:72:5f:d1:f9:c4:62:77:84:0e:9b:
         76:80:53:75:21:67:09:54:63:31:ff:97:71:53:e9:1b:a1:56:
         72:f4:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:10:05 2025 by rpki-client