Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a80d9ead-2a5b-3110-a9e0-44be2d845403.roa
File:                     a80d9ead-2a5b-3110-a9e0-44be2d845403.roa (raw, json)
Hash identifier:          rpA4YFrRVcMiMhYY0utFhADlF4opJ5Mga1A2eAY/w3c=
Subject key identifier:   0C:C3:44:98:28:71:01:70:FD:2F:1C:5B:6A:91:FD:37:5B:0F:89:BD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA40E5FE53B1087CA21CA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a80d9ead-2a5b-3110-a9e0-44be2d845403.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.141.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:40:e5:fe:53:b1:08:7c:a2:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=e34946d3-3e1d-4b11-be7c-129dcb9699b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:89:aa:f6:33:5a:89:7f:71:de:ca:3a:10:d0:
                    12:25:fc:fc:e7:32:e2:95:e4:ee:1a:f0:a0:08:70:
                    7c:ea:7e:52:47:61:1a:08:56:4c:2c:67:03:23:74:
                    8a:d7:59:e5:b6:34:ca:6b:4e:2e:7e:da:ed:3f:30:
                    82:95:8f:a9:3b:65:e0:12:f9:57:d4:f8:9f:65:16:
                    94:94:60:e2:35:83:71:d8:b6:07:7b:ff:ad:03:24:
                    e5:16:7d:c7:ec:58:25:45:c1:61:14:3a:00:fb:1f:
                    e7:f7:9d:15:3f:34:16:0e:39:07:d3:b8:83:12:18:
                    87:43:44:53:75:ff:a3:cf:16:bb:8b:93:4b:8d:8b:
                    01:68:ca:85:e1:17:50:42:b3:8b:a3:50:e6:60:f6:
                    aa:fd:ae:f5:ac:0e:eb:37:e7:e9:ef:bd:96:0b:a5:
                    80:05:73:e9:4c:62:25:ca:a6:94:ac:2f:c2:b9:e2:
                    14:33:60:96:a1:ed:ae:15:dd:24:ab:7b:fa:43:90:
                    29:2d:0f:0f:a6:91:eb:0c:9a:9f:d9:4c:76:58:f3:
                    27:dc:34:6f:96:4a:11:d8:21:56:f1:8c:d1:4c:7e:
                    93:18:e5:3a:67:14:62:03:35:00:1b:2e:8a:07:00:
                    5f:6e:a0:88:13:bd:eb:3f:a0:66:b2:85:c5:ca:88:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:44:98:28:71:01:70:FD:2F:1C:5B:6A:91:FD:37:5B:0F:89:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a80d9ead-2a5b-3110-a9e0-44be2d845403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.141.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:95:13:d8:92:f0:9f:6d:86:7a:54:a0:f9:9a:d1:e4:d7:
         c4:4d:57:d6:62:da:df:a8:08:70:b1:d7:27:b8:dd:05:6a:de:
         c9:19:a0:50:24:f7:e9:3c:e8:77:04:d3:78:9f:1a:ad:66:a9:
         7b:a6:d9:87:f1:04:12:1b:b5:c3:0d:93:e3:c6:17:ba:8e:93:
         27:17:5e:63:c9:31:c2:e6:e5:f6:88:84:d7:e9:eb:08:48:06:
         88:fe:cf:59:1c:b1:89:3e:40:91:eb:23:b2:8b:79:1b:c6:89:
         f7:d6:27:f8:90:0d:ec:b9:c3:ca:67:9a:12:25:f0:a6:0e:8b:
         93:f8:b4:5e:17:a3:36:ea:97:9a:be:63:79:7a:17:0d:7f:7d:
         5f:05:1f:7a:11:74:cf:e2:66:5c:fd:46:b8:4c:1a:5b:fb:63:
         ef:06:f6:fe:a7:75:9c:c1:e7:0f:e1:e9:9e:4c:28:02:20:73:
         6d:29:33:20:de:4d:c6:9b:72:dd:f9:61:b6:c0:67:0c:b9:fa:
         43:a4:86:40:55:c3:8c:a5:31:00:37:74:81:af:59:67:3e:3d:
         fc:31:bf:85:de:a9:b1:84:22:0f:de:7c:62:e2:0a:e6:49:41:
         89:e3:27:65:33:16:29:6b:2e:7b:52:07:a6:6e:2d:e5:11:4f:
         66:c6:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:53:12 2026 by rpki-client