Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5234ca18-f730-3fd8-85f2-c57f13d93444.roa
File:                     5234ca18-f730-3fd8-85f2-c57f13d93444.roa (raw, json)
Hash identifier:          eH80oUEqfD3GevM6mZpdpffhQqz3N8tygBhYBfWnbIo=
Subject key identifier:   35:3B:43:82:E8:AD:B9:76:9F:F3:2F:3A:57:DE:64:56:02:94:E1:68
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AAB00891ABBAF5B857E280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5234ca18-f730-3fd8-85f2-c57f13d93444.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.150.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:b0:08:91:ab:ba:f5:b8:57:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=66d7bf9c-f87c-44fe-bf70-fe557670279a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:b3:56:a9:70:59:66:ba:9d:a5:e4:32:b6:
                    7a:45:6e:2a:d5:12:7d:27:70:fe:55:24:e6:ff:db:
                    12:cf:dd:82:a9:08:90:a8:94:8a:36:af:78:0e:32:
                    5b:19:db:dc:b2:fc:6d:bf:1f:4a:28:8c:d5:27:67:
                    7d:5f:b4:00:5f:56:66:a6:36:59:57:94:5c:4f:93:
                    a0:53:9f:70:10:fd:c7:ff:20:db:05:1e:c1:f5:ef:
                    37:55:21:33:66:07:ca:f5:d3:f0:d2:60:a3:8b:d2:
                    a2:31:92:fa:1b:a7:ca:d8:1f:78:a2:6b:c1:53:17:
                    46:6e:c4:8f:be:60:03:5d:59:de:2f:22:e1:29:15:
                    73:b7:13:ce:05:ce:a4:5c:36:05:32:53:08:c9:2e:
                    1b:3c:5b:6a:93:65:af:bb:c4:3b:fa:24:c6:bd:51:
                    01:ac:81:b7:14:7f:06:e8:a1:87:48:16:ca:f1:98:
                    ef:f2:a0:10:e8:dc:3c:e0:33:03:9d:77:f1:51:19:
                    d1:64:b4:39:fb:5b:a4:bd:97:bd:c7:c2:e2:e2:90:
                    1d:44:c5:1f:6d:1c:90:8a:b4:4f:f6:69:fc:78:21:
                    8a:0c:80:9e:e7:59:d3:d1:5d:f8:61:b7:4c:ef:d9:
                    f0:3b:72:88:11:57:7a:8d:a1:ac:54:a8:f2:7c:a9:
                    b9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3B:43:82:E8:AD:B9:76:9F:F3:2F:3A:57:DE:64:56:02:94:E1:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5234ca18-f730-3fd8-85f2-c57f13d93444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.150.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:dc:2a:12:a4:24:c2:f5:8c:96:76:fb:2c:a9:3a:34:00:6e:
         8a:b2:58:03:54:4c:11:c2:29:c4:55:e5:da:d4:fb:95:72:82:
         cd:b1:ce:5c:2c:52:20:23:18:35:3f:a8:d3:bc:8c:d3:af:ed:
         73:5e:b1:5e:32:d8:f3:95:b6:29:af:d8:17:f0:ed:4b:d5:d0:
         fd:49:6f:d7:2a:de:26:ba:b4:e0:7a:6b:bc:92:33:c3:05:7e:
         e4:7a:34:b5:83:1d:3d:d5:2d:c8:2c:9a:1a:76:41:3d:68:48:
         5e:c3:a9:9e:73:b5:0f:ae:cd:2e:4c:43:bd:19:20:b3:2b:c1:
         58:03:f9:45:4c:ec:07:a9:d7:c0:45:84:5b:93:48:c6:db:0e:
         8c:6c:0b:75:81:c7:71:f8:37:66:65:84:c7:4a:3a:0e:1c:5b:
         d8:b5:8a:3a:aa:e2:b5:8f:7b:72:ec:7c:34:e1:a8:4e:00:66:
         b0:2f:f9:a6:73:47:7f:c3:75:30:96:d7:8f:bc:fc:a1:cd:db:
         80:16:78:6e:9b:68:31:0f:10:a4:ef:74:25:5f:73:73:b5:1a:
         66:c1:d6:27:7f:6f:bc:38:e7:2c:77:34:d2:b3:da:3d:3e:0a:
         45:17:96:1b:29:70:d0:55:56:61:36:41:89:8b:7e:34:b8:37:
         98:4c:73:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrAIkau69bhX4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
NjZkN2JmOWMtZjg3Yy00NGZlLWJmNzAtZmU1NTc2NzAyNzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4izVqlwWWa6naXkMrZ6RW4q1RJ9J3D+VSTm
/9sSz92CqQiQqJSKNq94DjJbGdvcsvxtvx9KKIzVJ2d9X7QAX1ZmpjZZV5RcT5Og
U59wEP3H/yDbBR7B9e83VSEzZgfK9dPw0mCji9KiMZL6G6fK2B94omvBUxdGbsSP
vmADXVneLyLhKRVztxPOBc6kXDYFMlMIyS4bPFtqk2Wvu8Q7+iTGvVEBrIG3FH8G
6KGHSBbK8Zjv8qAQ6Nw84DMDnXfxURnRZLQ5+1ukvZe9x8Li4pAdRMUfbRyQirRP
9mn8eCGKDICe51nT0V34YbdM79nwO3KIEVd6jaGsVKjyfKm5UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDU7Q4Lorbl2n/MvOlfeZFYClOFoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTIzNGNhMTgtZjczMC0z
ZmQ4LTg1ZjItYzU3ZjEzZDkzNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLcKhKkJML1jJZ2+yypOjQAboqyWANUTBHCKcRV5drU+5Vygs2xzlws
UiAjGDU/qNO8jNOv7XNesV4y2POVtimv2Bfw7UvV0P1Jb9cq3ia6tOB6a7ySM8MF
fuR6NLWDHT3VLcgsmhp2QT1oSF7DqZ5ztQ+uzS5MQ70ZILMrwVgD+UVM7Aep18BF
hFuTSMbbDoxsC3WBx3H4N2ZlhMdKOg4cW9i1ijqq4rWPe3LsfDThqE4AZrAv+aZz
R3/DdTCW14+8/KHN24AWeG6baDEPEKTvdCVfc3O1GmbB1id/b7w45yx3NNKz2j0+
CkUXlhspcNBVVmE2QYmLfjS4N5hMc3E=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:13 2026 by rpki-client