Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccc4da9f-95d0-3520-bd88-04676c11564b.roa
File:                     ccc4da9f-95d0-3520-bd88-04676c11564b.roa (raw, json)
Hash identifier:          pMIB6jD8YC+IfwDlh3+9Nv/iwqBAXMhWBYwRUxhdlH8=
Subject key identifier:   E5:EB:AA:CE:3D:18:5C:DE:DF:50:59:17:77:85:BF:4F:4C:CE:1D:05
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D97913DD0E1FB1C976800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccc4da9f-95d0-3520-bd88-04676c11564b.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.144.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:97:91:3d:d0:e1:fb:1c:97:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=2127f1ff-6561-456b-88cf-a161349da5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:41:a4:64:7d:f6:6b:72:ec:9a:5c:3c:5e:12:
                    c3:2f:ab:ea:2a:02:bd:22:51:30:4d:24:f1:1b:44:
                    1b:6b:4d:47:aa:27:58:c5:3b:38:58:50:1a:5e:1e:
                    7f:fb:cf:9c:6b:64:73:7f:b3:9a:25:3a:0a:d1:80:
                    bc:79:c0:12:71:a3:44:2a:f7:51:24:76:6f:0a:ca:
                    dc:8e:07:74:9a:64:b9:d1:cb:8c:20:11:b9:4d:28:
                    76:1b:94:7b:7b:d4:50:0b:dd:3a:d6:4c:7b:d0:52:
                    50:58:40:76:c9:5d:0b:77:cf:69:ff:4f:8f:5c:9e:
                    d0:15:a8:21:c5:31:ed:a0:de:05:1c:0e:e3:24:f8:
                    d4:f4:f2:57:33:de:04:02:d6:8c:ee:84:b6:bc:f5:
                    1c:a5:95:25:09:06:02:c2:5a:ff:75:84:a0:9b:17:
                    d4:da:b3:10:35:f8:76:19:d0:8a:97:a7:ff:9d:41:
                    6d:dc:ce:23:85:8a:af:55:b2:a4:83:c3:2a:c6:7e:
                    d0:a8:df:f4:99:c9:90:ae:ab:7f:e8:1f:8a:6a:4f:
                    9b:72:a8:8d:d7:d8:95:d4:43:a1:dd:b1:eb:0a:06:
                    d1:34:02:06:38:bb:93:e4:95:49:9f:d1:23:e7:6e:
                    7b:3c:f7:0a:49:77:a8:49:9e:a7:c1:e6:07:09:ba:
                    94:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:AA:CE:3D:18:5C:DE:DF:50:59:17:77:85:BF:4F:4C:CE:1D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccc4da9f-95d0-3520-bd88-04676c11564b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:b8:66:f9:cb:61:94:dd:1c:84:63:86:95:db:ac:8d:a5:
         ab:90:9d:ee:ef:7c:28:b1:c2:9d:d9:4f:ce:0b:c7:cd:2d:03:
         e6:50:a5:99:84:fb:ce:8b:55:d1:b3:6f:5c:fc:34:f5:5e:ea:
         3b:5a:87:ac:3b:5e:e6:c5:47:b5:94:89:71:f9:fa:a9:0e:c4:
         22:60:fb:a1:99:cf:3d:13:cd:83:48:07:d8:51:41:8d:99:4f:
         31:2c:6d:8c:a7:77:d2:47:18:08:93:19:02:45:58:c8:19:13:
         46:78:63:9c:22:23:d1:f9:3a:ec:32:7b:94:02:88:15:31:5d:
         ad:17:20:d2:2e:5f:6f:be:a9:a4:64:a4:fd:8c:8d:0c:53:95:
         9d:3b:32:0a:3d:c7:9a:50:40:36:4b:77:e5:ce:6e:66:f7:3f:
         92:85:8c:1f:0c:4e:47:0e:1a:ff:ae:db:42:50:dc:85:e3:09:
         16:35:97:56:1a:84:11:b5:b2:1f:35:2b:42:45:08:22:e1:4c:
         e8:a7:0f:31:55:c6:90:57:31:12:bc:a8:22:f9:03:2b:ea:0d:
         eb:a4:16:34:fd:08:c3:18:d3:31:61:60:a8:ec:df:2a:5c:47:
         91:32:0f:1d:9f:4e:cb:28:4e:25:f7:13:22:3b:fa:6b:6b:a5:
         87:18:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:07:10 2026 by rpki-client