Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f975dce-d326-3c97-af36-d6b6f386d43d.roa
File:                     3f975dce-d326-3c97-af36-d6b6f386d43d.roa (raw, json)
Hash identifier:          rhRhHwgIaVjWu4N3yCmDd7D+Gw+O3I0+Zo5KFy0hCLM=
Subject key identifier:   B1:95:10:D9:2E:E7:B7:57:26:91:72:F6:31:49:C1:B3:B6:83:06:77
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA751F4B80D3BAE6FDD020
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f975dce-d326-3c97-af36-d6b6f386d43d.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.129.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:75:1f:4b:80:d3:ba:e6:fd:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=ebc3121c-9e63-4a29-9964-2868024ec42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:75:84:8d:1f:b2:5d:b4:41:36:b4:78:d1:
                    a6:df:b0:07:2f:7e:d1:ba:ff:17:6e:49:72:2c:cb:
                    26:1f:45:75:d4:73:0b:8b:82:23:a4:44:50:0e:71:
                    d2:b4:c3:de:98:c7:a6:9d:c3:61:d1:53:09:59:9e:
                    81:88:f0:88:2d:3f:72:bd:94:fa:18:95:bd:c0:a5:
                    dd:be:04:54:e0:4f:95:ec:cf:0e:69:15:ca:ae:fc:
                    58:39:3e:95:bd:4e:b4:80:c9:9c:27:e8:68:c7:2d:
                    f0:76:d2:b9:da:19:a7:ca:39:32:8e:ba:2f:f0:e9:
                    28:81:94:44:44:2f:fb:ef:2b:20:49:ea:d7:41:96:
                    8f:a1:90:c7:2f:48:85:19:ab:60:b1:48:e0:56:d0:
                    a9:9d:4d:f1:98:6a:a1:d6:43:61:c9:4d:84:2c:3f:
                    81:8f:43:07:54:53:02:7a:ae:20:45:e8:77:6f:fa:
                    52:44:59:7c:ae:02:67:20:b8:92:8e:a6:65:3a:4e:
                    39:c8:b0:9c:cd:b4:a9:e3:eb:3d:7c:3f:54:f7:2b:
                    ad:4c:eb:18:9d:9c:af:c1:60:89:94:bb:1c:04:2d:
                    01:d3:0f:26:7a:a7:54:c1:3f:72:a7:8f:ea:92:a1:
                    3d:c8:b8:64:33:c3:50:b4:6e:71:76:09:0e:f9:b7:
                    29:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:95:10:D9:2E:E7:B7:57:26:91:72:F6:31:49:C1:B3:B6:83:06:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f975dce-d326-3c97-af36-d6b6f386d43d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2c:cb:6f:b9:70:f1:ef:b3:c7:f6:fb:cd:99:e7:e2:cc:cf:
         b3:93:9e:d6:f3:a6:7f:c5:c0:de:0d:56:fa:da:0c:81:49:9e:
         86:a3:54:34:2f:2c:d5:f6:ad:ff:2c:4e:ac:b7:4c:a5:6e:b8:
         14:06:e7:74:06:dd:23:ef:d7:a4:d6:79:af:6c:d6:49:5a:6f:
         61:24:4c:58:1e:f3:7a:23:f2:66:af:f5:23:fe:70:06:de:e8:
         eb:82:f9:cf:ad:d8:a3:c5:1c:bc:65:35:5a:ad:62:59:f1:a1:
         c4:6e:7c:3d:0c:7f:05:27:42:7d:42:12:c8:71:02:d5:87:34:
         cb:1f:7b:bc:18:31:ee:2a:28:4a:01:2c:f8:68:ea:b3:56:a7:
         99:dd:c7:ad:38:b8:8d:26:4c:d2:39:5a:80:40:48:41:9c:a9:
         0d:c9:ea:c8:5e:00:79:20:7f:04:fb:ad:c1:49:45:b7:ef:ac:
         9d:8d:f0:02:a0:1d:63:ce:81:12:40:f5:33:b0:34:49:b9:ef:
         09:b0:ee:13:2f:0e:b1:8e:44:a0:24:46:75:52:a1:ee:23:c0:
         6b:16:20:69:2b:37:e4:b1:ca:01:f8:11:a5:01:23:0c:07:d5:
         df:7d:4b:20:f0:57:b3:5e:ec:27:18:f2:c1:5e:01:24:4c:bd:
         56:43:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:52:47 2026 by rpki-client