Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e93e2-e568-3483-98ed-28d64c164239.roa
File:                     cf6e93e2-e568-3483-98ed-28d64c164239.roa (raw, json)
Hash identifier:          E9lKGGYJFsjZCljLV3GwUvmEsFZ3RyB8QpdwnF/VyUY=
Subject key identifier:   CB:55:D3:8C:80:40:43:E4:8A:5C:73:AF:C7:0D:FF:42:F5:35:3F:DA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA3FB5DF6724C86E846840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e93e2-e568-3483-98ed-28d64c164239.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.143.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:3f:b5:df:67:24:c8:6e:84:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=c8d008fd-626c-4cf1-9194-ff8ef877a1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:29:85:66:80:09:4e:70:50:c5:79:dd:32:
                    12:e9:1b:07:aa:a3:6e:f7:29:b1:77:d7:d7:0f:e0:
                    94:eb:00:a3:28:0d:94:0f:e0:21:01:55:36:1f:ef:
                    70:62:05:85:42:aa:48:2a:8a:ad:b5:43:e2:91:46:
                    a8:6e:22:49:23:ae:98:3c:cd:23:dd:59:78:b6:d4:
                    4b:27:a1:f7:6e:c0:32:60:7a:80:f0:ff:3f:94:37:
                    be:7d:24:94:cd:61:99:69:3b:ca:9a:f6:aa:bf:c7:
                    8a:0e:49:99:cd:6e:2e:1a:07:62:03:35:e4:b7:fd:
                    c4:85:6e:26:e9:9f:70:5f:a3:80:93:2e:e1:a4:f1:
                    3b:69:8c:a0:cf:bd:47:e3:1e:93:36:db:92:cd:6b:
                    aa:f0:dc:cc:db:5b:4c:31:27:74:a6:a0:73:ba:90:
                    5e:7d:85:5e:cc:7b:55:f2:f8:92:e8:96:e4:57:23:
                    20:aa:0d:6a:ca:da:4e:86:14:f2:c3:1e:e7:49:80:
                    88:c5:ff:34:d7:ca:48:e5:de:d4:77:88:5e:dc:a0:
                    63:e7:a7:95:2a:d1:ed:6f:96:82:32:cc:e7:05:f0:
                    05:be:ba:89:8f:77:69:31:19:d9:dd:2d:d3:a9:05:
                    43:a4:76:80:9d:dd:f3:23:d1:1b:3d:fd:4d:8c:3c:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:55:D3:8C:80:40:43:E4:8A:5C:73:AF:C7:0D:FF:42:F5:35:3F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e93e2-e568-3483-98ed-28d64c164239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.143.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ba:9a:94:af:03:05:15:21:e8:39:92:cd:5b:9e:6d:4d:52:
         13:ab:54:1f:c8:5c:e1:27:6d:4f:fb:a8:17:41:12:2c:0b:34:
         aa:7d:d6:e5:bd:7e:a2:8d:ff:52:70:fe:fe:30:55:da:1a:06:
         23:5b:bd:e9:5f:14:44:bd:81:71:f8:1e:65:3d:a0:d2:11:38:
         5b:74:d8:27:e0:83:44:ab:4e:05:e3:01:f3:05:5a:bf:16:f4:
         21:0a:d1:aa:08:e6:f3:94:ae:a8:95:64:98:8b:3d:78:62:db:
         75:46:8b:08:4f:af:bc:c3:94:d1:77:c6:dc:7d:e2:3d:8d:02:
         0e:bd:18:b4:0f:08:68:1a:ba:6b:97:14:b8:03:b6:52:9b:2d:
         76:fe:32:a5:26:8e:42:0c:da:0e:cb:d8:b0:31:53:22:3d:18:
         d2:29:bd:65:0f:e8:14:5f:f2:73:e7:c6:de:26:a5:57:55:db:
         b4:ec:ef:62:99:6f:74:3d:05:2f:33:94:ec:eb:7b:b9:47:2e:
         79:6a:45:57:0e:a8:f8:6a:8d:d2:29:25:4a:35:42:55:81:ab:
         14:42:a8:9f:8d:4a:25:b2:96:be:6e:da:67:7c:99:81:82:f5:
         d1:ea:25:ae:0d:54:f3:f1:da:e2:c3:62:f4:a4:ca:1b:ad:b4:
         93:ea:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:53:15 2026 by rpki-client