Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e1f6265-31a9-31c3-9eac-4839c96a7099.roa
File:                     8e1f6265-31a9-31c3-9eac-4839c96a7099.roa (raw, json)
Hash identifier:          MUqpVTqgU54JzpeXKjxtQUYZyi7EcZRJvM/zy7fXrm4=
Subject key identifier:   BC:51:A2:DE:DE:80:71:B7:4E:80:CE:D6:DE:93:4C:AA:4B:74:8A:6D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F498522053FE3D14EF1081340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e1f6265-31a9-31c3-9eac-4839c96a7099.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        34.106.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:22:05:3f:e3:d1:4e:f1:08:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=460509ee-a50f-4aa4-a874-87db10b5eaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:4a:b4:f5:bf:81:b6:40:f9:8b:e4:85:42:
                    0a:67:39:ae:29:16:58:f9:46:fa:91:72:4c:2e:96:
                    52:2d:9e:a5:b6:2e:10:4b:c9:c2:a5:71:fb:a6:d2:
                    1a:28:00:54:6d:cc:8b:53:03:ea:21:f9:43:dd:2d:
                    b7:89:68:35:a7:2b:d3:af:c5:88:48:c9:a5:4f:df:
                    f3:6d:02:31:8f:f0:06:a4:46:0c:e4:7c:d5:11:52:
                    ac:c3:0f:78:47:50:ea:df:44:32:bc:6c:38:94:54:
                    e0:cf:13:a6:df:53:a4:ea:50:80:16:ea:46:e8:df:
                    b9:8f:c4:33:f3:86:cf:24:5b:2c:d8:ab:8a:92:ee:
                    1e:86:f9:e9:85:b2:08:17:a8:8a:78:4c:dc:30:c8:
                    f6:31:63:43:7a:02:90:01:64:73:31:b6:d5:69:1c:
                    27:7a:35:20:c7:d3:71:f0:7d:5e:73:88:7f:45:d2:
                    cc:c0:d3:24:e6:ef:6a:b6:05:a3:ff:41:a5:a9:70:
                    ed:3c:e6:ab:fc:10:a3:c5:69:67:fd:c2:1d:c8:7a:
                    7d:c4:2b:ac:c5:8f:a4:2a:c7:f9:d1:f4:35:f3:19:
                    72:6f:de:88:6d:2c:5b:8f:70:07:3c:58:53:7a:23:
                    d2:6a:4c:04:5a:a5:13:77:e7:13:88:43:41:4e:f4:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:51:A2:DE:DE:80:71:B7:4E:80:CE:D6:DE:93:4C:AA:4B:74:8A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e1f6265-31a9-31c3-9eac-4839c96a7099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.106.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:0c:39:d9:5c:2b:08:af:c1:a7:14:a3:8c:4b:65:87:4f:
         e2:13:22:24:d0:73:bc:b8:1a:19:55:d3:b1:55:75:d6:41:aa:
         f6:65:72:67:8b:28:1e:3f:a2:ab:80:e5:2f:fb:ba:cf:ba:9d:
         0a:68:8d:cd:13:30:98:61:4b:60:23:dd:64:4a:da:b9:dd:d6:
         72:f4:6a:f3:ed:2b:f8:17:59:cd:70:df:8c:ac:9e:5d:2a:82:
         47:c5:07:7c:bd:f0:02:00:33:f6:fa:41:c3:b2:b4:43:c4:2f:
         06:39:5f:85:01:6d:4c:f3:3d:5b:25:77:c2:2b:83:ec:8c:0c:
         14:e8:42:1d:a5:10:7d:a2:92:96:fe:1f:50:e3:e9:d6:7b:97:
         11:a2:9e:7c:57:36:0a:76:6e:a3:14:4d:d0:83:11:9b:e7:65:
         13:eb:44:fa:aa:f3:1b:19:b2:22:dc:29:36:b5:21:bf:00:ac:
         dc:30:0f:6e:48:39:10:44:f7:82:58:a9:c4:dc:0b:e8:a7:09:
         63:50:22:d9:32:60:12:74:05:15:94:12:e3:6f:dc:9d:ca:45:
         7e:9c:e6:b1:91:84:e8:08:66:3c:88:a2:f1:5a:ca:05:da:1e:
         18:10:36:f8:a6:35:d2:56:1c:6a:0f:9b:88:18:5b:74:b6:aa:
         b0:f2:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:13:03 2026 by rpki-client