Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0249ee6-29d4-3c15-904b-fcabf5e7ca71.roa
File:                     f0249ee6-29d4-3c15-904b-fcabf5e7ca71.roa (raw, json)
Hash identifier:          1t/2tOsSw4hFEXw5cMycexSqS4C8ltW7HYdzpMnJiNo=
Subject key identifier:   67:16:13:0C:68:BA:35:46:E2:D7:BA:1F:78:12:23:A7:99:21:24:07
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA88964BF3F19C6C714600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0249ee6-29d4-3c15-904b-fcabf5e7ca71.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     139070
IP address blocks:        34.64.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:88:96:4b:f3:f1:9c:6c:71:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=e50582b2-473e-4343-889e-c86d2be6ea10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d8:53:d3:4c:8a:d4:68:cf:3e:24:d6:10:af:
                    70:f5:b3:7c:56:2d:87:93:4d:7e:9e:ae:3f:90:70:
                    91:52:ab:2e:a1:5c:28:0e:f8:12:47:25:36:86:76:
                    67:8b:5a:b8:05:96:9e:7d:9a:ea:74:9e:40:47:e1:
                    55:82:f3:9e:6a:0a:49:3d:01:72:01:6c:4f:d5:9d:
                    66:db:31:5b:f3:88:23:8b:c7:b9:d7:2f:6b:5b:d2:
                    67:1d:bf:94:f6:a3:92:55:48:8d:01:da:a1:c3:36:
                    91:9d:f2:22:1c:d7:a1:d5:cd:7d:c9:ce:b5:d4:f1:
                    35:bb:be:d8:be:65:fb:de:d2:6d:21:15:81:30:9f:
                    63:ac:ad:b1:ef:b8:06:ad:2e:7f:e7:d2:49:65:7e:
                    b4:2f:8e:12:f7:72:c1:5d:ce:47:90:f1:38:f4:ac:
                    cc:97:8c:cd:78:82:4c:54:68:2c:e2:a2:de:5f:da:
                    1f:21:65:bc:36:2b:b2:33:8c:69:8d:1b:58:21:51:
                    69:be:fd:f2:29:fd:8c:c9:c2:be:eb:01:c3:93:85:
                    5c:dd:8d:b8:57:39:f4:08:28:78:90:88:f7:7b:f3:
                    8b:8f:48:e5:ac:be:44:15:ba:e0:a4:6b:8d:38:2c:
                    32:1b:d4:1e:3e:84:9d:2b:16:ee:a3:b3:21:86:8d:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:16:13:0C:68:BA:35:46:E2:D7:BA:1F:78:12:23:A7:99:21:24:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0249ee6-29d4-3c15-904b-fcabf5e7ca71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f5:32:b1:bd:41:3a:41:cd:29:f5:dd:4d:74:8f:09:1b:50:
         6f:d5:35:fe:ba:8c:ab:48:6b:54:54:5c:ae:56:65:fd:cf:4f:
         a0:bf:54:fa:f4:05:d2:d8:1b:cf:26:da:71:a3:82:94:5a:72:
         5e:9d:f3:6f:1f:ca:6b:ef:cb:06:61:df:89:b2:69:79:02:c7:
         3e:2b:3a:ac:cf:45:f8:97:ea:87:1f:68:7c:62:c9:7d:9f:e8:
         3a:55:4e:79:e5:5c:fb:9b:fd:99:7f:bd:a7:34:79:c8:18:a2:
         ca:29:77:8d:ea:5d:99:2c:15:d4:a1:f4:3f:f9:f6:31:4b:f7:
         15:0c:36:53:d3:62:b5:8e:88:31:8f:2b:99:55:b4:cd:60:e3:
         5d:2c:d6:5d:9e:3f:47:13:a7:34:6e:9a:2e:d9:f2:ba:66:8e:
         a4:f0:e4:85:b1:df:7d:a2:11:88:21:02:e0:5f:26:48:bc:bf:
         b6:7c:e6:c7:8c:9a:2d:3f:f9:51:a3:b9:9c:76:84:11:6e:f1:
         b5:71:fb:5f:e8:66:09:34:a1:e9:98:6f:9e:b2:a2:d5:79:88:
         71:c9:34:25:46:b3:d4:62:45:b2:c1:61:91:e6:de:c6:ef:3f:
         ef:b5:f5:65:de:55:9d:c8:18:a1:c5:78:a9:df:b8:3c:38:01:
         4b:36:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:16 2026 by rpki-client