Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5e0edf3-4a9e-3035-8292-c043825a0c27.roa
File:                     c5e0edf3-4a9e-3035-8292-c043825a0c27.roa (raw, json)
Hash identifier:          CFmphDO5nC9GH6OfSgv3VhsTzfGh7J1OOwqnnfwVesg=
Subject key identifier:   53:2B:19:D7:C9:EC:7E:AE:89:1E:C2:96:4E:12:18:D0:24:33:2F:25
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DB1CA1BE7D2F446F3DA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5e0edf3-4a9e-3035-8292-c043825a0c27.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.69.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:b1:ca:1b:e7:d2:f4:46:f3:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=ae21a02c-9b95-4d6d-a294-92c36a843a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:da:32:ed:f3:e6:7f:73:f3:69:dd:1d:df:
                    fa:7d:19:c7:bd:93:89:7c:28:54:c3:f7:60:94:79:
                    8c:b6:46:5e:4a:d7:f5:3b:dc:20:cb:4d:ac:c6:7e:
                    53:c3:3d:12:f6:97:8e:d8:c7:97:77:a5:54:27:1d:
                    ac:21:9b:6a:65:d1:1e:9e:00:b0:f9:31:e8:c6:a0:
                    a1:d6:ad:f3:88:2d:e6:c4:9f:22:09:1b:de:66:e6:
                    73:b6:07:76:90:f0:72:ce:14:bb:af:e2:3d:da:f0:
                    c8:f0:9f:39:80:be:9b:84:9f:10:90:9e:15:ba:7b:
                    8b:82:c9:97:33:30:18:b1:3e:77:fb:c6:ab:42:05:
                    52:eb:ef:ae:3a:a1:b9:66:f8:4a:1c:df:4b:96:16:
                    f7:1b:b5:e8:7d:ce:0b:30:d9:0e:a3:d9:92:50:60:
                    e5:6f:94:ef:7d:15:40:09:7e:fc:44:b2:46:c5:58:
                    32:1b:22:15:02:2c:b9:d7:0c:ce:00:73:24:c4:45:
                    ad:09:2a:00:77:eb:7b:72:87:d2:96:2f:32:de:39:
                    5e:2c:d8:ce:70:c2:4b:66:a1:f4:42:ac:35:03:a8:
                    f9:ca:e5:a5:6b:ef:86:46:fa:51:70:2e:3d:53:de:
                    84:dd:25:6a:af:07:35:43:bb:a0:00:3d:44:0b:f8:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2B:19:D7:C9:EC:7E:AE:89:1E:C2:96:4E:12:18:D0:24:33:2F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5e0edf3-4a9e-3035-8292-c043825a0c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.69.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:72:84:f4:5d:70:33:48:b1:16:7d:19:c1:3a:4b:50:35:
         24:fc:5e:79:c3:d6:7c:ac:80:02:e1:6d:c5:b1:ee:a5:24:83:
         53:6e:0f:15:4f:ae:15:12:34:d5:9f:e7:d8:0b:06:95:06:85:
         2a:c3:90:8e:20:ce:bd:11:b7:33:6c:ff:4f:6f:38:a5:9f:5e:
         06:5a:99:c4:68:16:5f:fb:6c:a8:bb:24:cf:1f:64:47:a9:0c:
         b0:04:8a:02:2b:19:f1:4b:8c:ac:d7:7f:f8:0b:5a:27:aa:60:
         2e:80:d4:7d:90:92:c0:1f:c5:f6:a6:cd:f8:ff:34:d6:91:2e:
         2d:50:ba:07:b7:ba:9f:6a:a6:07:54:29:54:7f:d2:75:3c:f6:
         0f:be:85:d5:80:ef:e1:c9:df:73:9f:45:25:7b:c5:70:59:df:
         e8:26:cd:30:64:7e:4a:d3:49:89:1b:f1:b6:b8:54:7b:4b:48:
         bc:86:43:ec:c7:83:0d:a8:19:82:67:05:a3:ad:c2:c6:26:a7:
         79:ca:c3:2e:1b:f4:68:93:05:bb:fb:c6:e4:f7:46:f2:47:c2:
         55:8a:f9:cc:49:d4:8b:5a:b3:02:eb:4c:f9:af:94:db:d6:ba:
         4f:85:98:10:24:fd:76:af:09:4a:aa:bc:bc:4c:f0:19:58:7c:
         cc:96:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:53:07 2026 by rpki-client