Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e26aa935-6e50-343c-8cad-0b125ddf422a.roa
File:                     e26aa935-6e50-343c-8cad-0b125ddf422a.roa (raw, json)
Hash identifier:          mlRqmFnqsE/SuUYvC2gC/a1rzEfXAZkhcPpwmNCO3bs=
Subject key identifier:   20:C8:E8:8C:13:7B:20:4C:3D:78:D2:B8:B9:7B:8B:E3:16:22:1D:8C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E035E1BDF4E91862A088C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e26aa935-6e50-343c-8cad-0b125ddf422a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     19527
IP address blocks:        34.1.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:35:e1:bd:f4:e9:18:62:a0:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=d72a4234-45ef-4abc-aa29-86412b5f4432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:bc:a2:bf:0d:f6:e8:10:7b:02:b0:bb:21:
                    f0:2c:72:e6:0c:71:63:ee:0d:2b:18:55:15:97:f5:
                    11:08:64:62:92:66:47:04:45:a1:59:e4:d5:24:8a:
                    8c:dd:a3:38:74:01:d6:24:4e:c3:2b:2f:3f:9f:59:
                    e5:a1:74:26:d7:c9:b1:b3:be:ab:a8:6a:5a:ab:75:
                    54:4f:02:fe:ee:ed:b6:55:80:32:34:4e:8e:e0:9a:
                    f7:cc:39:27:8c:2a:73:6e:a8:9a:99:09:6f:08:78:
                    97:dd:5f:bc:ee:6d:c6:2e:aa:dd:9f:51:67:62:13:
                    ec:62:44:30:3a:64:eb:a4:7d:15:c4:54:12:0d:79:
                    4f:f8:76:cc:49:4b:12:7a:85:86:95:58:b0:1e:34:
                    bd:c9:45:1f:e7:83:42:bd:3d:fb:92:63:cd:04:1d:
                    c9:2d:c9:d4:5a:a5:2b:0c:b0:c4:e3:7f:fe:0a:95:
                    87:ff:b0:50:26:01:3f:44:a7:81:25:b8:f1:f1:97:
                    27:d0:a7:3e:32:7e:ef:72:58:32:96:95:dd:f1:7f:
                    70:b0:62:2c:72:15:5f:b0:8a:53:3a:45:89:73:92:
                    b7:d2:d4:54:cc:b9:e7:fa:9c:60:26:cc:bc:5c:0e:
                    b9:22:9a:ba:f5:36:40:4f:d0:f9:1f:8e:58:59:ee:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C8:E8:8C:13:7B:20:4C:3D:78:D2:B8:B9:7B:8B:E3:16:22:1D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e26aa935-6e50-343c-8cad-0b125ddf422a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:67:d1:42:f9:02:d3:f5:fa:aa:b0:70:2d:47:2a:0e:96:64:
         49:d6:40:e5:61:7a:29:bc:37:01:3e:2a:32:e2:05:8a:87:ac:
         3d:97:a6:a1:ac:5c:40:bc:4c:f4:be:b5:ff:f2:70:71:b7:21:
         19:63:3e:e5:10:06:c5:b4:ce:86:9f:84:1f:0d:43:23:0f:d9:
         a0:49:bd:a1:a5:39:e1:51:56:d9:5e:80:a4:12:51:fb:03:63:
         2f:68:e6:56:f9:27:28:d5:59:01:41:4f:5b:2f:63:cf:26:33:
         c7:2c:8b:2f:23:9e:d4:b2:c9:18:22:2e:ec:c4:7e:e9:7b:f5:
         51:a0:b0:ab:98:d3:c4:40:f0:61:bb:a1:e4:6c:0e:c8:85:9e:
         b5:99:8a:e0:bb:44:bf:89:62:ef:70:bb:3a:dd:d7:11:a1:3b:
         0d:3e:67:57:9a:01:6c:c8:e5:aa:09:99:eb:72:30:2e:67:2c:
         7b:9a:be:eb:51:be:8f:1f:17:e1:56:07:a5:b2:89:73:f0:24:
         06:38:22:e3:7c:3d:ec:ea:bd:58:46:42:f2:68:30:e8:fb:7a:
         97:52:24:0a:91:f7:8e:9f:e9:80:a7:4f:72:6d:34:20:75:c9:
         11:c2:49:46:99:4b:de:e1:ab:46:2b:fd:7e:6f:7c:7c:93:41:
         2e:13:ac:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DXhvfTpGGKgiMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZDcyYTQyMzQtNDVlZi00YWJjLWFhMjktODY0MTJiNWY0NDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYS8or8N9ugQewKwuyHwLHLmDHFj7g0rGFUV
l/URCGRikmZHBEWhWeTVJIqM3aM4dAHWJE7DKy8/n1nloXQm18mxs76rqGpaq3VU
TwL+7u22VYAyNE6O4Jr3zDknjCpzbqiamQlvCHiX3V+87m3GLqrdn1FnYhPsYkQw
OmTrpH0VxFQSDXlP+HbMSUsSeoWGlViwHjS9yUUf54NCvT37kmPNBB3JLcnUWqUr
DLDE43/+CpWH/7BQJgE/RKeBJbjx8Zcn0Kc+Mn7vclgylpXd8X9wsGIschVfsIpT
OkWJc5K30tRUzLnn+pxgJsy8XA65Ipq69TZAT9D5H45YWe5aXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDI6IwTeyBMPXjSuLl7i+MWIh2MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTI2YWE5MzUtNmU1MC0z
NDNjLThjYWQtMGIxMjVkZGY0MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKFn0UL5AtP1+qqwcC1HKg6WZEnWQOVheim8NwE+KjLiBYqHrD2XpqGs
XEC8TPS+tf/ycHG3IRljPuUQBsW0zoafhB8NQyMP2aBJvaGlOeFRVtlegKQSUfsD
Yy9o5lb5JyjVWQFBT1svY88mM8csiy8jntSyyRgiLuzEful79VGgsKuY08RA8GG7
oeRsDsiFnrWZiuC7RL+JYu9wuzrd1xGhOw0+Z1eaAWzI5aoJmetyMC5nLHuavutR
vo8fF+FWB6WyiXPwJAY4IuN8PezqvVhGQvJoMOj7epdSJAqR946f6YCnT3JtNCB1
yRHCSUaZS97hq0Yr/X5vfHyTQS4TrFg=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:14 2026 by rpki-client