Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbfc830d-05c3-3f3e-9e8a-2cd4c750ba97.roa
File:                     fbfc830d-05c3-3f3e-9e8a-2cd4c750ba97.roa (raw, json)
Hash identifier:          uwD5ReAXDWQpKJMrNoqKLp9urHiy/N/pLmO0tV8EonE=
Subject key identifier:   99:34:17:0A:56:78:32:44:14:4C:BB:8A:35:CD:C8:E6:B7:BA:12:B9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B9EEE8492B237A38DA0C07FC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbfc830d-05c3-3f3e-9e8a-2cd4c750ba97.roa
Signing time:             Thu 23 Oct 2025 20:46:00 +0000
ROA not before:           Thu 23 Oct 2025 20:46:00 +0000
ROA not after:            Wed 21 Jan 2026 21:46:00 +0000
asID:                     396982
IP address blocks:        34.188.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:ee:84:92:b2:37:a3:8d:a0:c0:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 23 20:46:00 2025 GMT
            Not After : Jan 21 21:46:00 2026 GMT
        Subject: CN=aad12e6c-04d5-40d8-8f82-18786fd62443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d2:15:97:b0:fe:3c:65:8f:5d:5f:1a:0a:e5:
                    a2:2c:ff:93:d8:c7:bc:c1:2a:3e:cc:79:43:3c:b2:
                    91:00:31:26:18:ff:71:58:d4:df:29:f9:4c:1a:ed:
                    71:ba:78:57:e3:ef:6b:3e:52:af:fc:a3:5c:c7:19:
                    eb:f6:c3:58:1b:ae:7d:f5:18:5a:8d:19:22:dc:35:
                    97:41:a0:66:fc:35:9b:b8:67:7d:de:f4:13:6f:c4:
                    15:24:c7:aa:56:56:f7:d5:63:01:80:66:6b:3d:5f:
                    41:38:78:60:7d:43:44:b0:c4:2a:6f:7c:7a:a2:3b:
                    d5:91:60:20:0c:31:38:f8:12:9c:ab:6f:be:c1:ba:
                    a9:41:94:16:38:d3:17:68:fc:fc:cf:83:2a:9c:bb:
                    51:26:c3:a9:2b:0e:f4:46:6f:77:59:34:13:f2:8b:
                    32:82:d1:b7:5d:29:5e:c4:8f:35:36:25:10:5e:41:
                    ea:83:1d:2d:05:f3:ec:ca:c9:70:6d:83:c3:ae:6a:
                    1b:37:b6:c0:98:9b:98:2b:8f:1b:fa:74:10:4b:04:
                    75:36:e5:e3:e0:8b:74:18:07:d1:40:62:26:f3:e6:
                    17:97:f1:b1:37:eb:84:c8:9b:23:47:56:67:d8:4a:
                    45:95:7a:9e:8c:5c:34:0b:b3:9c:89:de:0c:3a:2d:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:34:17:0A:56:78:32:44:14:4C:BB:8A:35:CD:C8:E6:B7:BA:12:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbfc830d-05c3-3f3e-9e8a-2cd4c750ba97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ff:e6:af:93:74:15:47:a6:b9:18:32:26:cd:49:ea:f5:63:
         16:1c:c3:45:b2:0f:ea:de:97:f4:1c:04:9e:0d:7b:ce:70:5f:
         82:8f:67:c6:85:06:ca:d1:53:f2:2f:2f:b7:bc:f1:5f:cf:a2:
         45:fb:d3:bd:49:a0:88:9c:51:02:65:32:be:d1:fc:19:3b:1c:
         1b:f9:3a:fe:06:21:5f:2e:35:89:b9:96:59:a2:7a:16:2c:39:
         3b:59:e2:9b:b5:14:6a:d7:d9:f8:9c:37:67:c5:b3:dd:99:e1:
         ff:54:34:a4:4e:da:43:d2:49:fa:62:ef:06:cb:a0:da:40:26:
         7a:df:af:65:a5:a2:be:a4:6e:41:19:65:44:54:a8:10:95:bf:
         19:b9:2a:64:9d:06:8e:79:82:20:d8:7a:48:01:df:44:77:ff:
         10:60:8e:4d:dc:e5:70:d0:6b:73:43:f6:44:44:99:be:e6:69:
         c1:16:f3:9e:fa:91:cb:91:6d:77:f0:4c:b4:eb:62:3c:53:47:
         8b:a4:71:c9:0d:c0:81:22:98:ad:c3:20:b4:46:d9:85:01:81:
         27:12:a7:4f:f5:42:ee:f2:fa:50:68:a0:93:8b:7c:95:31:e5:
         4f:27:b2:5a:47:0f:24:d5:bb:0c:e3:a1:eb:25:64:07:cc:6a:
         10:ae:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:51:00 2025 by rpki-client