Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b48510f-908c-3678-a6db-3c42062bdb72.roa
File:                     4b48510f-908c-3678-a6db-3c42062bdb72.roa (raw, json)
Hash identifier:          cZ8qqBMlQxkLwY3Blb4MRz8FlfyU99qoFFzoeyXbhDw=
Subject key identifier:   6C:34:EF:5E:55:33:8A:FA:3A:03:F3:B2:A5:6A:EA:DB:C7:AF:31:18
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F2501D357487C374BDC74C200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b48510f-908c-3678-a6db-3c42062bdb72.roa
Signing time:             Fri 11 Sep 2026 23:44:02 +0000
ROA not before:           Fri 11 Sep 2026 23:44:02 +0000
ROA not after:            Fri 11 Dec 2026 00:44:02 +0000
asID:                     396982
IP address blocks:        34.56.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:01:d3:57:48:7c:37:4b:dc:74:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 11 23:44:02 2026 GMT
            Not After : Dec 11 00:44:02 2026 GMT
        Subject: CN=e53c2810-9d65-4c9c-9b6f-48c3641913b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:cf:f2:cf:92:52:7f:cd:c3:0a:69:b7:a0:
                    b7:31:50:50:91:02:f3:fd:46:1d:1e:7b:c4:9b:77:
                    c3:f0:55:b1:fb:c9:57:c1:f1:67:b0:10:bc:8d:97:
                    2f:e9:df:ba:7d:09:79:45:90:a5:bd:6d:14:d6:5b:
                    a5:d3:1b:a6:1a:d8:83:13:d3:32:8d:c4:42:99:70:
                    a4:28:eb:2c:09:0d:85:50:21:38:d4:f1:76:92:24:
                    ab:e5:a5:f6:e4:e3:f8:0d:09:2b:bb:e2:59:fa:e2:
                    b8:ff:98:1a:12:71:ce:08:2b:b4:c6:e7:40:44:ae:
                    5d:1c:0e:5d:82:b5:f3:64:ca:75:98:d9:f9:9e:6e:
                    9c:83:10:91:af:4f:a3:2e:25:fd:ff:da:01:90:41:
                    69:fc:26:5e:8f:29:08:5a:8a:00:d1:5b:6a:06:b8:
                    0d:67:56:51:0d:5e:d7:df:ca:4c:8c:a8:e5:57:e0:
                    be:8b:6b:fe:fb:56:e9:d9:51:62:f8:18:68:87:83:
                    d2:bd:a5:c1:4a:d1:62:41:26:35:f8:90:33:b0:ea:
                    49:4e:8b:01:e7:64:59:a8:d8:71:63:65:63:7e:ad:
                    5a:fc:5e:cf:ac:9c:72:74:96:78:40:c4:52:f9:47:
                    36:1c:12:67:35:f0:fa:3b:96:46:40:92:31:46:59:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:34:EF:5E:55:33:8A:FA:3A:03:F3:B2:A5:6A:EA:DB:C7:AF:31:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b48510f-908c-3678-a6db-3c42062bdb72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.56.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:d5:92:2d:d3:dc:17:f7:02:57:7c:1b:4c:91:95:f0:af:
         ab:da:e6:d7:23:79:51:f5:36:73:1d:e4:d5:57:2e:7f:55:e4:
         ce:2e:dc:b3:b7:2e:d5:c8:84:e6:ec:de:f1:7f:ae:c2:10:63:
         33:b7:f6:87:12:ea:ae:fe:0d:6e:3a:0f:51:1a:23:0c:48:21:
         89:b2:a2:e9:1b:2c:55:68:9c:49:ca:67:97:35:fb:b8:96:8b:
         c7:06:89:73:58:46:7d:9b:0a:e0:22:f7:51:53:36:8d:20:1a:
         5f:a0:0e:13:dc:ef:1f:25:64:50:2f:0f:d2:e2:44:f0:9a:1a:
         2c:fb:27:b3:04:7d:2d:a2:5e:65:37:ce:06:4d:29:73:9b:ae:
         94:a7:51:45:1b:f0:4e:25:58:75:04:fd:45:9d:82:82:18:53:
         2c:51:0f:8e:d8:87:9a:62:a0:a9:7f:8a:ad:c0:49:48:86:24:
         1f:93:2c:8a:22:25:34:e1:7c:88:f3:26:41:cb:9b:a0:03:15:
         71:82:9a:f0:d6:5b:5f:4b:6c:1e:5f:3f:2e:17:37:1a:8c:4b:
         0b:1f:2a:9d:67:e3:aa:7a:bc:08:d6:da:71:ca:00:e4:60:e9:
         1b:ba:2b:53:d3:3c:1e:1c:51:fc:13:f6:ff:55:66:7a:43:8a:
         05:ba:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:45:34 2026 by rpki-client