Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/176ad48e-c5e8-3879-b5f9-6bb106c9f5b0.roa
File:                     176ad48e-c5e8-3879-b5f9-6bb106c9f5b0.roa (raw, json)
Hash identifier:          7X5TuiCmX+V9OIgJ/Q9dqs3DXutGLMi35zlDWTE0hno=
Subject key identifier:   14:C3:CA:C8:3E:D9:6C:84:AB:2A:9D:87:27:CD:B9:0A:29:71:D9:9F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA5A97D8C3B1CA2F312000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/176ad48e-c5e8-3879-b5f9-6bb106c9f5b0.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.163.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:5a:97:d8:c3:b1:ca:2f:31:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=91ec5c70-a31d-40bb-8985-b1b9af76530a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:39:d3:78:84:c8:cb:2b:bf:53:6a:f2:71:
                    58:ae:94:e0:5c:f0:a5:73:b9:2f:db:9a:ce:5b:11:
                    b0:6e:89:f8:a5:9e:82:af:72:cd:4f:5e:c6:2c:e7:
                    1f:15:3c:1f:e6:68:88:26:6c:9f:cd:43:ca:72:39:
                    f5:9e:ae:3a:30:00:26:22:4f:27:40:2d:fb:ad:d5:
                    ff:e4:ba:60:80:b3:23:c1:0c:c9:7f:54:0c:93:d0:
                    11:9b:ad:c3:48:31:65:dd:c1:f8:be:d2:6a:a3:4c:
                    a1:42:df:49:f4:81:57:eb:b3:74:18:53:23:f1:1a:
                    a6:58:e2:76:e1:56:39:60:91:b4:e1:35:6e:4b:96:
                    55:50:c7:94:a5:ef:f5:99:23:22:aa:91:56:9d:2b:
                    9d:59:a2:9a:ca:c6:af:0f:ba:ac:1d:d6:1c:17:3c:
                    b1:0c:ec:3b:93:ca:89:96:e7:d5:ec:4e:91:0c:81:
                    54:23:7f:65:84:ab:bf:d7:7d:a5:a1:1c:15:67:e6:
                    4b:72:5c:8b:88:6e:96:f7:33:0f:f4:30:1e:af:81:
                    47:ab:e2:3c:57:0e:1c:af:04:e5:a4:99:e0:0c:f9:
                    82:4a:af:2c:53:1f:51:fe:f0:3d:12:99:56:50:b3:
                    8f:e1:5c:06:de:38:d7:d0:ac:9c:4b:d4:b6:58:3d:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C3:CA:C8:3E:D9:6C:84:AB:2A:9D:87:27:CD:B9:0A:29:71:D9:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/176ad48e-c5e8-3879-b5f9-6bb106c9f5b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.163.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:86:8a:ba:50:d8:ab:bb:b0:ca:82:f2:26:de:b9:04:c4:dd:
         98:6b:57:bb:b3:51:ea:d8:11:30:46:08:9a:58:a7:2d:24:7f:
         f9:7a:15:20:bd:6e:ed:22:01:6b:c8:0a:07:27:17:9e:96:c4:
         ce:dc:fc:19:59:67:91:17:33:b1:7d:73:8f:8a:87:9e:9f:f8:
         d7:e9:a6:d7:83:4f:dd:35:7b:8d:9a:26:06:5f:f5:58:74:9b:
         de:14:d2:a5:1a:3e:ff:d0:1a:97:0c:88:5d:4b:4a:59:d2:44:
         9a:06:8d:b7:c9:05:65:2b:11:29:4e:01:4c:8d:76:4e:f3:16:
         35:da:77:83:49:e8:b5:d4:dd:26:ab:76:cb:46:fb:c3:3c:d3:
         14:c4:b1:90:95:f2:b1:7c:9b:dd:7e:bc:44:b3:04:74:be:a8:
         67:e9:8d:bd:fc:f4:62:b3:21:a7:6b:63:d8:3c:73:49:51:31:
         df:a3:58:47:0f:f7:40:61:64:44:ec:ed:f1:64:39:6b:04:75:
         7e:c9:06:2e:9f:3c:a5:b6:e4:dd:29:d9:e0:92:45:d1:0b:f8:
         ae:fb:43:b9:b5:2b:b5:fa:13:d1:d9:0e:89:a7:f5:4b:8c:07:
         28:18:95:f4:ba:87:4f:3c:1c:43:ee:ef:92:64:14:39:02:27:
         cd:f0:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:49:32 2026 by rpki-client