Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4566d441-1bb8-3466-b959-5989c5f1ec95.roa
File:                     4566d441-1bb8-3466-b959-5989c5f1ec95.roa (raw, json)
Hash identifier:          pgOh9IQk41oI0HKczaV0pnOFygiapI2qUvU69rBRQHE=
Subject key identifier:   4A:F9:57:EB:C9:C1:C7:A7:59:EE:7A:38:53:F3:26:D9:AD:0E:C5:51
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AAB9E6BD17242359D2C740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4566d441-1bb8-3466-b959-5989c5f1ec95.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.140.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:b9:e6:bd:17:24:23:59:d2:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=a89fe2ab-6b6a-48d2-ba22-f38399916317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:12:76:00:ef:ab:9d:96:d4:a0:f8:9b:ed:
                    51:ce:00:24:88:6a:23:cb:75:d3:8a:f3:34:48:08:
                    51:e5:1e:7a:84:e7:88:98:74:9e:52:62:c6:df:d5:
                    8b:11:44:c7:fe:e4:bd:29:6d:e8:ad:b7:38:9f:d3:
                    52:2f:61:7f:aa:05:5b:88:66:a1:00:40:d3:b9:17:
                    a7:b5:c4:6d:d7:70:f2:f0:7d:88:b3:7d:07:d7:24:
                    6a:17:c6:1b:10:ea:c8:07:6e:e3:c7:7d:a8:12:4d:
                    b3:d7:85:bf:f0:e3:14:73:27:e5:a5:b3:19:2b:bc:
                    5f:25:36:4d:d5:0d:49:b9:0d:11:f5:41:3f:09:71:
                    77:37:60:b1:45:8d:db:fc:63:de:91:0d:4d:c1:30:
                    89:71:47:c0:0b:24:f8:6f:f7:00:75:27:3e:b2:83:
                    1d:33:8a:fb:b8:ff:66:a4:e6:ac:ef:2e:58:93:f6:
                    39:b0:79:9a:c9:2d:b1:d2:4e:5e:50:9f:4c:bd:63:
                    b3:04:25:c9:9e:71:91:4a:5b:3b:47:93:32:02:e6:
                    c2:3a:90:94:2e:00:be:d6:56:27:26:2b:2c:f0:68:
                    d5:64:83:0d:7c:3d:56:1d:9c:e0:91:da:ab:50:87:
                    2d:5e:e7:ba:45:0f:47:13:63:57:4f:9b:26:11:13:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:57:EB:C9:C1:C7:A7:59:EE:7A:38:53:F3:26:D9:AD:0E:C5:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4566d441-1bb8-3466-b959-5989c5f1ec95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:32:fe:91:08:3e:0c:e8:f3:90:62:42:48:c1:96:85:0d:b0:
         c0:82:67:c6:dc:cb:19:1a:56:ad:48:28:cb:27:d1:66:83:69:
         9b:22:2c:a3:b8:e8:1a:d6:fc:32:03:c9:f1:00:b0:45:9a:d9:
         97:af:c6:d2:cd:5c:7a:39:64:19:53:e4:fa:67:96:45:cd:82:
         40:90:61:80:b6:ae:d5:6b:cc:8e:79:b6:3c:5e:a6:32:2c:7e:
         b8:86:84:98:4f:13:85:41:b3:11:84:c1:cc:93:97:88:a9:9d:
         9b:84:50:0f:ae:52:1e:96:48:8e:67:88:dd:92:66:2f:1d:ce:
         cc:1f:f8:d4:ff:f2:31:f0:d9:9c:64:3c:55:53:58:52:1d:98:
         93:d3:09:72:c1:fb:cc:73:0b:1f:13:19:c6:05:e4:af:79:1d:
         14:01:ff:35:a2:fd:f1:ae:07:74:93:9e:f8:40:f2:0d:db:f6:
         85:b4:3a:67:fa:95:a6:68:2b:7e:f1:cc:de:e0:50:53:58:81:
         fc:72:7c:31:8b:cd:a4:ce:d1:07:57:ce:0f:0f:02:6d:14:50:
         51:d6:1e:b4:ee:39:8f:cb:84:d9:b5:f5:7f:bd:f5:71:c6:70:
         dc:8b:b3:f1:21:16:89:a0:3f:f5:a1:5c:71:78:11:60:a5:ae:
         13:0d:f7:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrnmvRckI1nSx0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
YTg5ZmUyYWItNmI2YS00OGQyLWJhMjItZjM4Mzk5OTE2MzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN0SdgDvq52W1KD4m+1RzgAkiGojy3XTivM0
SAhR5R56hOeImHSeUmLG39WLEUTH/uS9KW3orbc4n9NSL2F/qgVbiGahAEDTuRen
tcRt13Dy8H2Is30H1yRqF8YbEOrIB27jx32oEk2z14W/8OMUcyflpbMZK7xfJTZN
1Q1JuQ0R9UE/CXF3N2CxRY3b/GPekQ1NwTCJcUfACyT4b/cAdSc+soMdM4r7uP9m
pOas7y5Yk/Y5sHmayS2x0k5eUJ9MvWOzBCXJnnGRSls7R5MyAubCOpCULgC+1lYn
Jiss8GjVZIMNfD1WHZzgkdqrUIctXue6RQ9HE2NXT5smERMnvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEr5V+vJwcenWe56OFPzJtmtDsVRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDU2NmQ0NDEtMWJiOC0z
NDY2LWI5NTktNTk4OWM1ZjFlYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIowQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8y/pEIPgzo85BiQkjBloUNsMCCZ8bcyxkaVq1IKMsn0WaDaZsiLKO4
6BrW/DIDyfEAsEWa2ZevxtLNXHo5ZBlT5PpnlkXNgkCQYYC2rtVrzI55tjxepjIs
friGhJhPE4VBsxGEwcyTl4ipnZuEUA+uUh6WSI5niN2SZi8dzswf+NT/8jHw2Zxk
PFVTWFIdmJPTCXLB+8xzCx8TGcYF5K95HRQB/zWi/fGuB3STnvhA8g3b9oW0Omf6
laZoK37xzN7gUFNYgfxyfDGLzaTO0QdXzg8PAm0UUFHWHrTuOY/LhNm19X+99XHG
cNyLs/EhFomgP/WhXHF4EWClrhMN9xM=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:45 2026 by rpki-client