Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c51b58-797e-32c6-a5a2-abd16dc19fa1.roa
File:                     50c51b58-797e-32c6-a5a2-abd16dc19fa1.roa (raw, json)
Hash identifier:          Lw1u/CaVEmlMvPiK4dm8QRiepoZDecL5VvV8EK3ruXQ=
Subject key identifier:   74:0C:AC:3B:4C:5B:AD:92:25:9F:A9:48:89:62:2F:31:52:C1:A0:F7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D316F78A74900F3FD4386CE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c51b58-797e-32c6-a5a2-abd16dc19fa1.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        34.136.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:78:a7:49:00:f3:fd:43:86:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=a9451932-8f7e-48ad-8f6f-111db831755e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:05:9f:2f:ad:6e:83:87:e1:4a:b2:95:15:
                    56:3a:ec:d6:eb:c6:e6:1a:b6:76:89:1f:00:8d:8f:
                    a4:f7:02:17:e6:cd:7a:62:28:1d:88:17:f3:19:39:
                    43:e7:5d:df:a2:b7:5d:22:cf:fb:9a:fa:78:67:51:
                    59:2c:ad:ca:1b:bf:a9:08:0c:9f:50:62:86:cf:9c:
                    42:4d:7b:82:55:5d:08:bb:98:cc:ea:08:d2:0f:31:
                    48:5b:f0:6c:8e:23:a4:2f:a2:64:b4:08:f3:1b:6d:
                    6d:71:be:4d:47:fc:ea:c4:22:1b:1e:8e:c6:3d:65:
                    46:db:c7:76:b8:c5:e1:32:d2:ce:8d:f9:ec:a1:57:
                    5a:19:eb:d0:8a:5c:7d:41:c2:66:03:39:25:65:83:
                    65:27:15:b4:28:71:4d:37:a1:51:3e:a2:45:39:34:
                    41:9a:b2:dd:83:12:ba:0f:a8:33:8c:f8:ec:af:7d:
                    48:a0:0f:c5:48:91:86:24:fa:f1:65:91:79:65:08:
                    a6:0e:a1:20:8c:14:a4:77:6a:46:28:b6:59:49:1b:
                    e6:ef:34:d8:b3:0c:55:7c:83:65:a3:d4:ed:e8:4a:
                    d3:3a:6b:6e:e0:57:31:05:38:e7:95:04:bd:51:f6:
                    5a:1a:f4:88:f8:81:e4:a8:2d:5f:30:8d:7d:fd:37:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0C:AC:3B:4C:5B:AD:92:25:9F:A9:48:89:62:2F:31:52:C1:A0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50c51b58-797e-32c6-a5a2-abd16dc19fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.136.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2d:f6:91:3c:f1:24:ad:ee:e4:98:97:9a:df:6a:f9:a9:6b:
         59:ab:d5:47:c5:bf:e9:d2:c1:1b:c1:7f:32:d1:d8:dd:4e:21:
         18:22:5e:3a:f3:97:54:77:04:a2:5c:3d:cf:69:a8:f7:e9:29:
         32:42:d2:6e:85:ee:2f:e4:ab:62:2e:ac:13:5c:01:87:c8:fc:
         2c:45:53:69:d8:9e:57:9f:91:3a:fc:ea:1a:72:04:32:90:3a:
         d2:92:b7:d5:76:ae:50:7d:f3:87:9c:1c:a9:1a:64:ec:2e:8b:
         fe:47:40:d6:87:28:f3:1a:ed:e6:14:58:71:ea:46:bd:3e:f1:
         a8:d1:99:fa:fc:14:91:33:8d:60:22:5e:3c:5c:bf:b5:4a:2e:
         78:e3:ba:f4:46:c4:37:35:ea:e5:e1:19:43:df:49:74:12:8c:
         97:99:5e:7b:ba:c9:75:1e:0e:58:49:97:b2:50:42:7b:b2:4f:
         c0:8d:42:c6:fc:de:f6:ef:2e:57:d3:4b:fe:bf:9f:3e:56:f7:
         f6:72:25:50:b0:ce:a0:86:6b:7c:8c:ab:85:e6:71:0d:14:0a:
         2d:66:2c:76:75:ca:b3:ec:63:2a:e9:c1:dd:43:f4:92:dc:85:
         03:8e:3f:03:c7:cf:0e:58:2a:72:07:a5:16:3c:6a:ce:53:b5:
         a6:16:6d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:53:00 2026 by rpki-client