Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2df656b6-f0d0-30d1-8b51-75a9b9e0d04f.roa
File:                     2df656b6-f0d0-30d1-8b51-75a9b9e0d04f.roa (raw, json)
Hash identifier:          1mMZD/v3zrXxJv689oDBZxQXLHHtjlTDeWDtUM1j2K0=
Subject key identifier:   D0:63:DA:87:E3:C0:FA:9B:F7:A8:0A:FF:98:2F:B3:1D:65:93:BA:45
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EC7A1E8CF35D44E582E44F500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2df656b6-f0d0-30d1-8b51-75a9b9e0d04f.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     15169
IP address blocks:        34.190.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e8:cf:35:d4:4e:58:2e:44:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=c36d0c7f-12c2-4c38-bcbb-62630c9aefde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:ee:cd:14:ee:a5:8e:44:68:c1:82:f7:dc:
                    90:cf:73:a3:ac:8e:65:f8:98:07:7c:b4:8d:ff:8e:
                    cf:9b:09:50:86:d9:b7:db:0f:06:2b:93:5f:02:a3:
                    97:e0:e3:9e:ed:c9:7c:df:c6:06:9a:1c:46:6f:ae:
                    eb:7a:83:0e:1e:cb:4e:b6:57:f7:b9:31:ed:d7:9a:
                    fb:d3:f9:cb:16:0b:49:9e:47:27:79:e8:54:83:31:
                    85:59:28:5a:bb:d2:30:60:69:c2:d3:10:5b:bb:b3:
                    74:5b:05:e4:8a:dc:7e:73:d7:66:82:e0:87:6c:44:
                    94:c8:ae:61:8d:79:6c:24:45:db:06:97:a7:12:17:
                    b1:e1:33:9b:c2:92:01:b1:c6:9a:23:66:70:ee:df:
                    54:42:f6:c6:6d:74:54:c6:96:c9:e1:e6:8d:ad:32:
                    43:3a:9d:ba:7c:dd:d8:ef:af:fa:09:6c:89:d6:b4:
                    ac:fa:5a:e9:ab:6c:36:9f:ea:cf:a6:ea:30:05:50:
                    6d:f7:9b:88:c5:4a:78:0c:33:c9:1a:e5:00:a6:d1:
                    af:70:e9:bb:1b:9e:52:46:e3:dc:5b:15:61:b8:0b:
                    42:b3:d7:bd:87:9e:a5:90:00:96:18:48:44:30:48:
                    e4:d0:21:0f:06:0e:fb:67:d8:ff:2d:99:95:7c:da:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:DA:87:E3:C0:FA:9B:F7:A8:0A:FF:98:2F:B3:1D:65:93:BA:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2df656b6-f0d0-30d1-8b51-75a9b9e0d04f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:af:39:20:7b:da:75:2f:6d:b1:10:8a:ea:22:65:55:11:d4:
         de:aa:73:d0:79:99:fc:84:cd:45:01:f0:c8:b3:a8:74:e7:98:
         9c:97:36:37:4f:ab:6c:1b:e1:7a:57:9d:cf:8f:51:a4:4b:f4:
         48:22:dd:26:84:c2:55:f6:9e:c0:67:01:84:6d:2a:de:b4:59:
         8c:b1:59:58:e6:3b:2d:d1:ab:79:6d:c7:2e:e8:d2:f3:02:d0:
         0d:86:a9:28:e0:cf:7a:c4:1c:78:99:d5:c0:0a:21:f5:f6:68:
         63:67:59:46:55:b0:b9:2b:ae:8a:d4:ce:53:ad:e9:cb:c9:6b:
         0c:eb:ca:b4:09:69:2c:94:41:59:38:91:b9:12:48:47:8c:b4:
         cc:d1:50:3d:ac:aa:df:8d:4b:9b:a8:aa:b8:7e:4a:88:b0:14:
         c5:89:2d:07:09:5c:e1:a7:26:be:9a:59:d9:d5:e1:0a:62:5d:
         1f:a2:fc:16:e5:8c:79:e4:d5:49:cd:ce:aa:5f:02:d8:4f:fa:
         fc:a9:35:7c:e0:56:f4:45:ac:c0:17:2c:12:ce:c7:3d:5d:a5:
         87:39:93:f8:77:e3:62:02:bf:e6:60:eb:63:ff:5d:b3:d4:12:
         1a:f7:1c:59:77:4b:5f:4d:58:c0:f8:ee:e8:ba:2e:ff:94:f8:
         4d:9f:91:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:25:50 2026 by rpki-client