Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1079cbfd-304b-3758-b09d-a9d6f974f07e.roa
File:                     1079cbfd-304b-3758-b09d-a9d6f974f07e.roa (raw, json)
Hash identifier:          aVp2kHi32Oiy9rF7lGqkpDLw6ipaHXVnuqMXYMeG7yA=
Subject key identifier:   E7:6F:3A:4B:5B:86:5A:87:7F:D8:FF:38:81:3C:1E:AD:51:F3:1B:27
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA61A9639E4BBC47C67980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1079cbfd-304b-3758-b09d-a9d6f974f07e.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.165.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:61:a9:63:9e:4b:bc:47:c6:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=73747083-ba03-4a83-bf0a-bc1174be2214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:76:bf:e7:95:6b:da:82:25:3f:8a:84:d1:
                    8c:bf:2c:3b:28:2c:d8:cb:01:d8:b2:b9:0a:ea:49:
                    2c:7e:ce:27:91:3e:06:d9:e9:8c:83:52:09:d4:ec:
                    8d:ed:a4:da:36:cc:af:34:dd:13:b0:08:43:0a:b6:
                    07:5c:47:6d:3c:c5:3a:f8:47:74:fe:86:0a:d7:a4:
                    7e:c6:75:b2:f2:c8:e1:86:9b:d5:e4:a0:ee:71:c5:
                    c9:fe:2e:18:51:41:48:ad:e8:53:ce:0f:72:a2:d9:
                    89:46:ce:96:cc:d3:1b:02:ad:65:46:e2:b9:eb:b5:
                    0b:44:81:ee:a0:d2:fe:19:09:2c:b0:ca:f8:51:33:
                    37:02:05:a2:c2:43:5a:c3:4a:4e:f4:f5:5d:27:fd:
                    33:09:ba:37:9d:f1:92:f6:f4:03:5f:c4:cd:14:ba:
                    0e:a2:9a:61:c2:75:2e:f8:ae:69:b3:ad:cf:d0:3b:
                    f8:01:24:22:50:9d:fc:41:04:62:51:67:0f:39:c7:
                    1d:9c:ec:1e:d9:c7:a7:d9:58:6a:45:bc:bd:24:dc:
                    0a:84:0a:cc:0f:8e:fe:e7:99:ec:51:74:97:52:c9:
                    cf:54:d4:4e:76:d7:5f:08:37:0e:7f:84:d9:4b:a9:
                    39:0d:43:ab:7d:c8:fe:70:03:65:f4:33:d4:a9:bc:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6F:3A:4B:5B:86:5A:87:7F:D8:FF:38:81:3C:1E:AD:51:F3:1B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1079cbfd-304b-3758-b09d-a9d6f974f07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.165.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:5e:64:bc:8d:93:fa:42:fa:2e:8b:3e:1c:1d:c1:ac:01:
         0f:69:cd:39:b6:37:8f:bb:63:8b:4b:ec:3d:20:0c:4b:e6:62:
         43:f7:a7:37:fb:78:ad:e5:f3:a7:a9:d0:c5:87:a3:59:6d:c8:
         dc:dd:81:99:e6:c6:e8:0e:84:26:5f:04:84:a4:98:90:c1:2d:
         6f:b5:ad:54:a1:cc:27:63:f5:e6:bd:20:e5:fc:39:6c:75:6f:
         c1:da:9f:19:5d:8d:19:84:bc:6d:bc:f7:4e:ee:a3:5c:9a:6c:
         93:b3:2f:13:42:c0:5d:f3:23:69:88:2f:a5:9a:d4:63:6e:b5:
         40:5e:77:a6:ec:66:6f:04:9f:32:de:aa:d6:16:37:a1:3a:a5:
         6e:41:31:42:4b:e3:40:49:d6:cc:50:7c:59:a6:05:68:41:b9:
         48:dc:6d:e7:9f:a5:25:fc:a9:94:6b:2e:57:86:db:1c:37:ce:
         7e:71:b9:5d:4a:c1:04:50:4d:52:2b:b6:9b:18:8b:85:8b:0a:
         66:28:53:98:94:fa:39:16:8c:b5:3a:c7:27:cd:a3:dc:49:69:
         d9:2e:e9:17:47:ce:f1:d2:dc:65:5b:ee:20:52:24:2f:c7:f2:
         00:11:b9:37:91:37:05:d6:62:0b:6c:84:46:08:7c:c3:33:e6:
         01:61:0c:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmGpY55LvEfGeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
NzM3NDcwODMtYmEwMy00YTgzLWJmMGEtYmMxMTc0YmUyMjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLp2v+eVa9qCJT+KhNGMvyw7KCzYywHYsrkK
6kksfs4nkT4G2emMg1IJ1OyN7aTaNsyvNN0TsAhDCrYHXEdtPMU6+Ed0/oYK16R+
xnWy8sjhhpvV5KDuccXJ/i4YUUFIrehTzg9yotmJRs6WzNMbAq1lRuK567ULRIHu
oNL+GQkssMr4UTM3AgWiwkNaw0pO9PVdJ/0zCbo3nfGS9vQDX8TNFLoOopphwnUu
+K5ps63P0Dv4ASQiUJ38QQRiUWcPOccdnOwe2cen2VhqRby9JNwKhArMD47+55ns
UXSXUsnPVNROdtdfCDcOf4TZS6k5DUOrfcj+cANl9DPUqbzwAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdvOktbhlqHf9j/OIE8Hq1R8xsnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTA3OWNiZmQtMzA0Yi0z
NzU4LWIwOWQtYTlkNmY5NzRmMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADucXmS8jZP6Qvouiz4cHcGsAQ9pzTm2N4+7Y4tL7D0gDEvmYkP3pzf7
eK3l86ep0MWHo1ltyNzdgZnmxugOhCZfBISkmJDBLW+1rVShzCdj9ea9IOX8OWx1
b8HanxldjRmEvG28907uo1yabJOzLxNCwF3zI2mIL6Wa1GNutUBed6bsZm8EnzLe
qtYWN6E6pW5BMUJL40BJ1sxQfFmmBWhBuUjcbeefpSX8qZRrLleG2xw3zn5xuV1K
wQRQTVIrtpsYi4WLCmYoU5iU+jkWjLU6xyfNo9xJadku6RdHzvHS3GVb7iBSJC/H
8gARuTeRNwXWYgtshEYIfMMz5gFhDMY=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:52:41 2026 by rpki-client