Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea6b70c3-4c2c-340e-8a7b-c1ad8ff4c912.roa
File:                     ea6b70c3-4c2c-340e-8a7b-c1ad8ff4c912.roa (raw, json)
Hash identifier:          CW16Qo4TP4S5oFiczs833vTMXNrrWm1VKcn+aBtiwYY=
Subject key identifier:   95:D9:C5:CE:3D:6E:8C:84:E7:01:5D:15:F4:13:D0:1B:99:86:A8:37
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DDC4EEEAF9896550E6EC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea6b70c3-4c2c-340e-8a7b-c1ad8ff4c912.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.133.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:dc:4e:ee:af:98:96:55:0e:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=1691a1c4-93d0-41c0-b08d-dedcb5476f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:99:3b:69:b4:5b:aa:81:db:33:60:71:16:
                    41:aa:14:0c:4d:17:6f:ec:e4:09:39:0c:81:52:a5:
                    5d:78:c3:81:56:d9:10:31:05:b1:31:07:22:01:11:
                    6e:36:c4:9b:f5:93:dc:e0:ef:35:40:3c:5a:c8:10:
                    d5:a4:e7:17:2b:4a:97:0b:db:12:21:3d:75:a8:8a:
                    7c:2f:bc:61:52:2e:fb:a1:d0:6f:78:6e:16:a2:fa:
                    22:58:35:bd:01:6c:2c:21:60:d0:c2:6d:6c:a9:99:
                    bb:cc:59:30:7f:3b:ab:29:46:cf:62:6b:76:d5:14:
                    1f:7c:6e:04:6e:a1:9d:3d:aa:73:b1:c0:19:a8:da:
                    6f:13:63:23:75:4b:46:60:08:7f:df:6e:2c:de:91:
                    86:29:d7:eb:f8:4a:2b:3d:71:a4:82:3d:4b:80:49:
                    a9:ac:22:81:31:d3:2e:f2:d3:8e:de:63:3a:a0:58:
                    43:ad:c7:7a:eb:fe:00:67:8d:5a:02:cf:e8:67:3b:
                    e9:6d:a5:c9:4f:ce:8d:b1:8b:e2:cf:7c:6b:9d:f0:
                    b2:d5:50:71:fb:d0:d5:53:12:0d:95:08:a2:1f:2b:
                    b4:3f:70:4a:fc:d3:2a:cb:db:b3:75:61:8f:48:67:
                    21:aa:35:2c:64:74:1c:de:aa:44:f4:44:33:8e:da:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D9:C5:CE:3D:6E:8C:84:E7:01:5D:15:F4:13:D0:1B:99:86:A8:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea6b70c3-4c2c-340e-8a7b-c1ad8ff4c912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.133.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:b2:43:50:7f:ff:15:a6:b9:9d:1e:ab:34:59:4f:42:f9:
         50:7f:20:60:12:47:f3:2e:24:8d:9d:fd:4c:40:a7:eb:71:b1:
         1f:18:88:16:c1:be:30:41:b3:14:ea:58:14:77:27:2c:de:48:
         45:08:67:9f:e5:32:1a:fc:eb:d5:8e:2d:17:bc:33:48:e3:b3:
         ae:b2:46:da:2f:b3:6b:c4:7e:b7:ba:21:5e:f2:76:f7:01:2e:
         8c:98:f3:95:82:49:e5:00:43:4d:51:f1:63:41:ad:5b:ce:dd:
         ab:75:4c:22:6b:ab:ec:d2:1a:06:5d:33:3b:11:42:00:ed:03:
         ba:27:2b:60:0a:c0:d0:bf:56:43:d3:ce:b4:3b:33:b0:a8:a5:
         74:43:60:4a:44:56:73:1c:da:f6:a9:9c:f1:34:93:51:dc:05:
         2c:f1:8a:a9:ba:ef:15:7f:90:93:56:81:4d:9b:2a:0d:fd:82:
         1f:00:45:ba:85:cc:53:8b:c4:d5:63:36:cd:dd:47:d8:fb:6e:
         96:60:f8:91:10:a5:89:52:c9:01:a4:ee:74:72:dc:c5:cf:06:
         24:79:30:bc:f8:bc:2a:e7:cb:bf:63:3c:e6:be:6c:6d:b7:4c:
         a8:be:51:2b:4d:a1:3d:2e:17:da:d8:6b:72:b3:37:99:83:6f:
         17:2b:18:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdxO7q+YllUObsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
MTY5MWExYzQtOTNkMC00MWMwLWIwOGQtZGVkY2I1NDc2ZjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum2ZO2m0W6qB2zNgcRZBqhQMTRdv7OQJOQyB
UqVdeMOBVtkQMQWxMQciARFuNsSb9ZPc4O81QDxayBDVpOcXK0qXC9sSIT11qIp8
L7xhUi77odBveG4WovoiWDW9AWwsIWDQwm1sqZm7zFkwfzurKUbPYmt21RQffG4E
bqGdPapzscAZqNpvE2MjdUtGYAh/324s3pGGKdfr+EorPXGkgj1LgEmprCKBMdMu
8tOO3mM6oFhDrcd66/4AZ41aAs/oZzvpbaXJT86NsYviz3xrnfCy1VBx+9DVUxIN
lQiiHyu0P3BK/NMqy9uzdWGPSGchqjUsZHQc3qpE9EQzjtqctwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXZxc49boyE5wFdFfQT0BuZhqg3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWE2YjcwYzMtNGMyYy0z
NDBlLThhN2ItYzFhZDhmZjRjOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2uskNQf/8VprmdHqs0WU9C+VB/IGASR/MuJI2d/UxAp+txsR8YiBbB
vjBBsxTqWBR3JyzeSEUIZ5/lMhr869WOLRe8M0jjs66yRtovs2vEfre6IV7ydvcB
LoyY85WCSeUAQ01R8WNBrVvO3at1TCJrq+zSGgZdMzsRQgDtA7onK2AKwNC/VkPT
zrQ7M7CopXRDYEpEVnMc2vapnPE0k1HcBSzxiqm67xV/kJNWgU2bKg39gh8ARbqF
zFOLxNVjNs3dR9j7bpZg+JEQpYlSyQGk7nRy3MXPBiR5MLz4vCrny79jPOa+bG23
TKi+UStNoT0uF9rYa3KzN5mDbxcrGOA=
-----END CERTIFICATE-----
Generated at Mon Sep 28 17:59:58 2026 by rpki-client