Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e80862d-8502-3d3e-8c1c-d0e710c164bb.roa
File:                     0e80862d-8502-3d3e-8c1c-d0e710c164bb.roa (raw, json)
Hash identifier:          GoLnkzNEN+F4beMOt6JOP4fRKaMdELOU2NrJG6rgS1E=
Subject key identifier:   D9:2D:29:E3:03:26:35:C0:86:40:FE:08:41:AD:66:72:C1:4C:F0:0C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA945E054FA1F15A2E2900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e80862d-8502-3d3e-8c1c-d0e710c164bb.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.136.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:94:5e:05:4f:a1:f1:5a:2e:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=88672287-fb90-4293-a382-0cf6e05e97b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:f1:ac:70:c3:50:b1:c4:c2:92:a8:29:de:
                    09:e5:37:45:34:f5:1b:a4:0f:2c:cd:2b:8f:52:cd:
                    7e:8d:d4:a1:74:48:5e:bf:40:60:ea:bc:43:d5:a7:
                    d2:19:13:ea:df:de:17:06:51:5c:dc:31:21:33:e1:
                    60:2c:b8:78:15:43:15:ce:ea:b2:91:cc:a6:dd:10:
                    5f:2f:b5:2f:e3:83:eb:ca:83:ce:23:4e:b9:13:59:
                    10:99:17:b8:4e:7f:82:14:c4:5e:5b:77:a0:e9:e3:
                    f1:33:14:88:5d:b3:f4:5a:81:34:56:16:45:8b:de:
                    04:44:6b:5b:e1:fe:44:af:99:ec:e5:8e:6b:86:d2:
                    b2:4b:61:47:40:c4:da:f7:63:6d:29:43:07:45:2a:
                    3a:73:43:25:63:d9:64:72:ae:f8:aa:dc:bf:8c:7a:
                    9b:15:e6:12:5e:cb:02:13:6f:89:f1:18:5d:7a:81:
                    13:6d:e8:30:94:35:67:a9:43:40:6e:b6:e1:79:23:
                    fb:16:8a:60:6f:08:db:0a:91:39:9d:b8:9a:fa:48:
                    71:10:2b:55:08:b4:cb:a2:8b:4f:7b:4a:57:1f:71:
                    ea:a1:ed:68:56:ba:24:68:53:29:f8:d0:35:49:fe:
                    2a:c5:38:bd:d0:aa:f1:ed:57:c4:50:53:19:3d:7e:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2D:29:E3:03:26:35:C0:86:40:FE:08:41:AD:66:72:C1:4C:F0:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e80862d-8502-3d3e-8c1c-d0e710c164bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.136.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:de:f8:51:92:c4:62:ac:77:f7:aa:06:df:9f:1e:0d:95:56:
         96:6c:8e:20:88:93:d9:ce:7a:30:6e:e7:94:52:7b:1c:14:40:
         ea:f2:56:02:e8:cb:86:d4:32:bf:67:0f:c2:23:c2:e3:4d:74:
         f1:af:95:3d:5e:bb:01:2f:d9:32:b9:cf:3e:36:02:44:98:26:
         8a:32:07:57:c1:bd:16:4c:17:4d:08:1a:55:a4:01:9f:44:be:
         ec:c3:ab:a6:98:e3:ca:0b:bb:e6:31:25:ff:9e:2c:f6:e7:d3:
         4f:5f:ea:98:48:b4:5e:77:6a:38:f5:ae:ed:80:3a:56:8b:aa:
         17:a9:30:00:7c:7f:7b:cc:6c:58:dd:4c:9d:51:70:cb:0a:6c:
         16:51:32:03:e4:1c:c4:ba:f2:cb:e4:d1:09:73:22:ec:de:3a:
         d8:93:31:45:13:90:cc:dd:c8:02:2e:5b:80:22:80:50:64:b9:
         ed:b1:10:94:3b:6a:93:7b:d8:d0:4d:73:53:33:19:6d:0b:86:
         29:99:70:4e:80:86:f2:15:b2:f8:8a:d7:0a:4e:79:f8:02:fe:
         dc:55:f1:4f:c4:15:dd:d0:d6:85:d4:bb:a1:2d:f5:7b:59:f7:
         d8:35:c1:2b:8f:4f:a5:a4:d4:24:f2:c5:79:28:54:5e:bb:d7:
         dd:9c:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:53:23 2026 by rpki-client