Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4e28a3c-241d-3bfe-a5f7-7a08ebed5bcd.roa
File:                     a4e28a3c-241d-3bfe-a5f7-7a08ebed5bcd.roa (raw, json)
Hash identifier:          /W+vicp55rQt9LQl75x/X1q7jZZCu2YV3yXLXdP2Ryg=
Subject key identifier:   EA:8E:EF:6F:4E:6E:97:5F:03:FE:3A:B5:55:77:D1:DF:31:EF:56:2E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA6B3B2277A91982890D20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4e28a3c-241d-3bfe-a5f7-7a08ebed5bcd.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.43.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:6b:3b:22:77:a9:19:82:89:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=d3db3747-0408-42e5-bce1-e4a4e228a2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:ed:d9:c8:e9:5d:eb:f4:fe:bc:3c:2c:f5:
                    59:e5:db:0f:9e:0f:7b:01:58:0a:ab:fa:f6:44:fe:
                    58:35:bf:4a:6d:98:77:96:16:b9:49:a2:37:fb:48:
                    57:3b:cc:85:5c:6a:c9:fd:e9:65:86:6c:38:0f:0f:
                    5d:31:98:e4:bf:87:c4:8b:27:e7:f7:c1:38:90:27:
                    c6:8f:fa:36:6f:6f:f7:a9:c0:9f:a2:b2:a4:bb:ed:
                    2e:c8:15:45:c2:a3:3e:58:93:67:79:d8:ce:b0:62:
                    8a:f0:6e:2f:0f:00:d0:90:64:0b:15:48:56:32:57:
                    35:92:f6:42:38:77:5f:35:ac:e7:43:ef:1e:f6:77:
                    55:db:74:c8:15:4c:2d:a6:42:4c:a1:b4:74:82:c6:
                    8b:53:e1:ff:0b:df:16:db:f3:40:4e:72:82:60:fd:
                    41:10:05:f2:3b:7f:17:1b:ed:0b:bd:0d:1a:a8:cf:
                    48:3d:66:2a:31:1f:ea:e8:3e:f2:16:be:f0:cd:b9:
                    b2:48:fb:59:46:4d:d3:e0:da:47:91:42:13:43:b8:
                    58:4e:2d:2b:27:de:e7:28:0d:9d:fa:1f:11:31:ac:
                    83:be:5b:fa:75:c0:a4:07:3a:7d:00:af:ef:eb:fe:
                    af:1f:c1:5b:2e:b8:a4:5b:51:b6:50:52:ef:28:0a:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8E:EF:6F:4E:6E:97:5F:03:FE:3A:B5:55:77:D1:DF:31:EF:56:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4e28a3c-241d-3bfe-a5f7-7a08ebed5bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:db:7e:05:33:7e:71:10:99:40:1e:66:c8:df:03:6c:48:2e:
         8a:71:b4:53:6a:a9:c5:fc:cf:09:bd:db:cd:66:0c:8e:54:3e:
         36:8a:a9:90:c0:66:d4:84:63:fc:08:5e:77:f8:a8:22:74:58:
         da:59:1c:18:5d:0f:36:ea:fe:1a:11:5b:7b:0d:92:0e:46:d6:
         07:bf:ce:4e:5f:cc:75:83:cc:40:63:14:6c:55:78:bf:7c:4c:
         e8:f5:ba:c1:1a:33:1e:0a:ed:1b:70:96:ef:dc:58:88:3c:cf:
         8a:19:de:96:b9:15:f5:6e:3f:23:b2:c9:3a:11:d4:0a:ad:d6:
         7a:30:74:d3:7d:c3:05:14:f0:86:d9:a5:85:66:f7:e3:e4:05:
         20:9d:28:7e:9c:ed:10:d5:66:db:30:e5:ec:a9:8b:e8:dc:87:
         07:8c:6f:41:69:23:47:ea:b2:3d:58:f8:45:68:7d:c2:63:95:
         2e:5d:07:d6:77:93:6a:e4:ae:53:11:c0:45:69:3b:68:7b:63:
         c1:1f:fb:2f:42:79:b5:73:12:58:84:df:03:4a:08:7b:68:0f:
         74:0c:79:ef:fb:f1:4e:44:c6:7b:97:f2:d0:ba:73:4d:29:7d:
         45:9e:7a:0d:ce:f5:dd:27:2a:43:2e:cf:e5:5a:2d:38:10:cf:
         c6:31:c2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:08 2026 by rpki-client