Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/3dc81cc0-b765-326f-8ed7-7ae65edd39e3.roa
File:                     3dc81cc0-b765-326f-8ed7-7ae65edd39e3.roa (raw, json)
Hash identifier:          auMREFQbSF7bOSwBGxRX9BPtjSpYFYLA8B1BJ+oz7qg=
Subject key identifier:   2C:29:F3:E0:5F:15:9D:8F:5E:3F:06:43:AC:48:21:9E:EF:6A:ED:B8
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328584EE4235DC0F989ED2782BCB780
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/3dc81cc0-b765-326f-8ed7-7ae65edd39e3.roa
Signing time:             Wed 19 Aug 2026 18:04:04 +0000
ROA not before:           Wed 19 Aug 2026 18:04:04 +0000
ROA not after:            Sun 09 Jun 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        134.170.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:5d:c0:f9:89:ed:27:82:bc:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Aug 19 18:04:04 2026 GMT
            Not After : Jun  9 04:00:00 2030 GMT
        Subject: CN=de098946-4224-4a17-9c65-d66f2228bcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:dd:c5:89:47:2f:d2:d4:e7:3c:b0:81:bb:
                    0c:01:52:8a:42:53:cd:23:b8:97:e2:37:84:be:2c:
                    9c:8e:aa:64:5e:62:f4:3f:f8:bb:be:94:94:2e:e8:
                    74:aa:de:c7:94:57:eb:bb:aa:76:f4:92:d8:d6:f9:
                    0a:8e:37:42:8c:32:6a:83:1c:10:61:a6:99:ac:7d:
                    a6:e3:86:8e:f1:b0:a8:1f:dc:10:6e:59:2b:77:d1:
                    d6:3a:45:b7:19:a1:75:4e:6e:14:38:f1:ab:bb:1f:
                    10:54:57:02:60:7f:aa:80:10:76:09:34:b5:16:4c:
                    41:7c:72:56:56:fa:90:8f:e4:b9:44:20:b0:83:00:
                    d6:fa:ae:68:81:ea:35:20:79:41:d2:0f:1c:46:03:
                    37:f0:a0:ec:e2:04:60:05:21:ed:9f:56:a7:37:d1:
                    27:39:7b:86:c5:db:cb:36:3c:87:0f:d6:79:74:6b:
                    c6:b7:4f:ee:63:95:6a:62:d0:fb:bf:ce:5e:80:c6:
                    77:cc:bb:65:c7:75:dc:c5:6e:fa:11:34:47:6e:2c:
                    d2:20:e6:1d:7d:e6:cb:60:26:81:7b:6f:fa:09:a2:
                    c0:ba:ac:44:96:53:b9:9c:f2:93:13:9b:8f:57:d6:
                    7b:e3:4f:56:c5:5d:ce:e7:07:a8:16:67:3c:95:d5:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:F3:E0:5F:15:9D:8F:5E:3F:06:43:AC:48:21:9E:EF:6A:ED:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/3dc81cc0-b765-326f-8ed7-7ae65edd39e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2a:1f:62:83:af:ce:1e:ef:bc:ba:e4:e2:19:ba:ea:40:53:
         51:a1:f7:f3:85:f6:d1:1d:05:b9:c3:58:64:22:27:e9:8e:ae:
         39:b4:6f:c1:e6:f8:d1:48:c2:27:c6:66:d6:2b:88:9e:52:4c:
         3e:27:d2:79:45:78:92:bc:78:33:19:98:58:dd:24:7b:07:b9:
         10:b2:42:5e:0f:40:31:1e:55:cb:35:0f:c1:41:79:aa:74:1d:
         8f:df:6d:e8:e4:2f:56:26:25:e6:77:d2:71:f2:f9:62:30:49:
         7b:7b:e1:84:b8:a0:91:a8:7b:4c:25:de:40:c9:9a:6b:aa:ee:
         75:45:f4:d6:34:87:7d:07:48:b9:15:56:18:14:2d:eb:89:5a:
         07:8b:0b:83:a4:a8:63:5c:df:25:16:95:72:41:5a:c9:f8:fc:
         2c:1a:b1:94:d3:7c:aa:6d:1c:7b:80:ae:dd:8f:dc:fc:71:48:
         ef:6f:b6:23:b9:15:c5:50:6f:d1:bb:0a:95:cb:5e:11:d8:95:
         dc:1e:33:4f:fa:ca:63:11:74:91:d8:4a:47:b6:04:c1:75:4f:
         50:26:7d:c4:47:9c:c8:1e:0c:41:78:d5:2d:de:e2:23:67:dc:
         29:5c:62:0b:7d:3f:82:42:5a:ff:c5:c6:79:a0:e6:82:6c:2e:
         c2:d1:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:51:19 2026 by rpki-client