Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f50d5fc-de18-39dc-b740-69efb2b9e4c5.roa
File:                     0f50d5fc-de18-39dc-b740-69efb2b9e4c5.roa (raw, json)
Hash identifier:          6sfmeNCv8wnx31ac3OgwoZn7hxls3p6sgDrkaSq5IPk=
Subject key identifier:   FF:31:24:AA:4C:80:A8:ED:47:A0:E7:53:F6:F6:BB:EB:A1:C5:4A:A2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA3C634FD7456EEA042030
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f50d5fc-de18-39dc-b740-69efb2b9e4c5.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.96.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:3c:63:4f:d7:45:6e:ea:04:20:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=b4b8e167-b247-4999-8904-bf299b4a240c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:84:b8:7b:db:80:96:81:ee:e7:b0:07:b1:
                    98:e4:03:51:e2:be:7b:46:cb:73:f7:c9:26:2f:c5:
                    c6:43:db:8b:f7:c3:e3:fe:11:c4:77:85:96:6e:42:
                    72:c9:35:bb:47:f6:0b:b1:64:06:01:5e:18:c3:82:
                    f6:91:6f:80:e0:c9:a3:cb:c7:9e:53:b8:25:ae:25:
                    27:3c:43:1a:f6:d1:76:9f:81:79:bf:74:0f:6f:b4:
                    e2:2e:ef:0f:5a:59:11:c2:e5:0f:90:00:84:8d:82:
                    b5:66:c8:39:5b:33:5b:c7:31:03:2c:2e:83:3c:92:
                    a0:e6:38:2e:0e:69:39:5c:34:cf:98:8b:56:0b:59:
                    d6:41:3f:fe:a5:14:5e:ee:ac:2e:5c:b6:0e:60:32:
                    cc:ba:87:6d:24:c0:8d:39:af:22:7e:82:94:e8:d4:
                    39:64:fd:64:71:a3:66:d4:91:a9:74:29:25:d0:72:
                    9e:1e:d6:eb:1f:47:19:db:64:25:08:e1:24:bb:52:
                    94:c3:7e:ab:b4:91:2f:63:5d:0d:db:8c:ec:07:b0:
                    59:e2:36:bd:04:d5:4b:0c:25:1d:29:6a:b8:7a:2e:
                    b3:b3:26:34:8e:55:27:0c:f4:24:1d:c6:2a:dd:1b:
                    db:25:b9:96:32:56:ba:66:16:bb:2b:95:11:90:b3:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:31:24:AA:4C:80:A8:ED:47:A0:E7:53:F6:F6:BB:EB:A1:C5:4A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f50d5fc-de18-39dc-b740-69efb2b9e4c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.96.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:98:34:bd:e2:00:72:44:3c:3f:cc:90:7a:d9:5c:a9:6e:7f:
         49:b1:70:f4:f4:2e:ad:9d:dd:1f:cb:d3:f7:a5:b4:3b:72:e6:
         6d:14:4d:77:36:0a:29:7c:59:91:f5:ba:4e:de:89:44:f5:73:
         62:f5:79:b8:f7:aa:84:1c:97:73:ca:4b:44:86:85:0a:b6:a1:
         7f:f0:45:bc:0b:4b:48:e3:d4:3b:89:16:de:62:ea:d2:f4:fe:
         fd:40:83:a4:19:d2:0d:0f:b1:16:59:22:72:b5:00:d4:34:82:
         d0:94:0c:fe:cb:e3:db:21:dc:c2:03:21:c6:d9:b7:be:8a:bb:
         51:33:6e:98:79:d1:80:86:68:f6:d2:34:1b:23:65:5c:3d:d5:
         a8:51:da:a2:5d:95:34:1c:0b:35:72:ce:40:40:92:02:b0:c6:
         aa:1c:22:08:c6:dd:c0:21:38:fc:7c:ca:d9:91:9a:25:c0:5c:
         f2:67:8a:a1:e2:1e:96:f7:03:5a:f9:e6:21:85:f5:86:04:15:
         81:ea:37:aa:e9:71:1e:fa:57:2d:5e:d0:c5:75:a3:ac:7c:c3:
         6c:44:8c:0a:54:ca:45:97:ae:0f:a0:7a:59:97:b9:5a:a7:77:
         78:60:8a:d9:62:6d:0c:55:04:30:04:4b:fb:2c:73:ff:e1:2f:
         af:b1:3b:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjxjT9dFbuoEIDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
YjRiOGUxNjctYjI0Ny00OTk5LTg5MDQtYmYyOTliNGEyNDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOSEuHvbgJaB7uewB7GY5ANR4r57Rstz98km
L8XGQ9uL98Pj/hHEd4WWbkJyyTW7R/YLsWQGAV4Yw4L2kW+A4Mmjy8eeU7glriUn
PEMa9tF2n4F5v3QPb7TiLu8PWlkRwuUPkACEjYK1Zsg5WzNbxzEDLC6DPJKg5jgu
Dmk5XDTPmItWC1nWQT/+pRRe7qwuXLYOYDLMuodtJMCNOa8ifoKU6NQ5ZP1kcaNm
1JGpdCkl0HKeHtbrH0cZ22QlCOEku1KUw36rtJEvY10N24zsB7BZ4ja9BNVLDCUd
KWq4ei6zsyY0jlUnDPQkHcYq3RvbJbmWMla6Zha7K5URkLNwhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8xJKpMgKjtR6DnU/b2u+uhxUqiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY1MGQ1ZmMtZGUxOC0z
OWRjLWI3NDAtNjllZmIyYjllNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyYNL3iAHJEPD/MkHrZXKluf0mxcPT0Lq2d3R/L0/eltDty5m0UTXc2
Cil8WZH1uk7eiUT1c2L1ebj3qoQcl3PKS0SGhQq2oX/wRbwLS0jj1DuJFt5i6tL0
/v1Ag6QZ0g0PsRZZInK1ANQ0gtCUDP7L49sh3MIDIcbZt76Ku1Ezbph50YCGaPbS
NBsjZVw91ahR2qJdlTQcCzVyzkBAkgKwxqocIgjG3cAhOPx8ytmRmiXAXPJniqHi
Hpb3A1r55iGF9YYEFYHqN6rpcR76Vy1e0MV1o6x8w2xEjApUykWXrg+gelmXuVqn
d3hgitlibQxVBDAES/ssc//hL6+xOy4=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:48:20 2026 by rpki-client