Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa
File:                     8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa (raw, json)
Hash identifier:          5JcounW2Af0Jqh/thpmlo0r8r/BmGaGZh1F0F5R4qCE=
Subject key identifier:   20:A8:F5:0F:A8:7E:4D:BA:71:43:9F:42:78:18:86:F6:EB:84:D0:DE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D316F7125897C74BD27487F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     19527
IP address blocks:        34.0.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:71:25:89:7c:74:bd:27:48:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=7a9db4ea-6891-44f6-8fa5-5a7217f585ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:d2:c2:b7:54:e8:2f:99:e3:04:38:54:27:
                    f7:56:ae:c5:39:a8:fd:2f:63:e5:a4:9a:70:1e:f0:
                    71:09:5e:88:98:23:64:0a:1b:6f:f7:fd:2b:1b:44:
                    63:d3:70:99:60:ad:27:0d:07:1a:9c:05:26:29:6f:
                    8f:6d:d1:bc:e5:6e:19:a5:7b:d4:6d:30:af:d9:52:
                    ec:8f:25:1f:03:2b:4e:a5:8b:d8:9b:28:41:9a:73:
                    e3:10:d8:77:66:e2:3e:7c:79:14:f7:8e:c0:b7:5a:
                    07:6b:94:e2:b3:34:cb:90:42:39:b9:4d:12:d3:f5:
                    63:a1:86:78:f7:74:c6:0d:d5:c7:74:05:e1:5a:d7:
                    f1:bc:0b:9c:b7:b2:d3:b4:e6:77:73:e6:cf:33:e8:
                    7a:9c:1a:1c:be:a0:32:9e:a2:cf:f4:5f:c6:ae:0c:
                    ad:d5:87:98:9b:9e:70:fa:0a:d2:0a:8d:16:ba:b2:
                    09:8e:05:f8:a1:ea:79:02:26:d5:49:c7:de:db:af:
                    f7:f7:99:5a:0e:07:c5:9e:db:e5:29:a0:e3:49:35:
                    cc:cf:6f:20:36:12:6a:fd:5e:b4:f6:e2:4a:44:7c:
                    66:e8:c4:62:a8:c3:18:33:96:80:03:3f:45:43:00:
                    b4:10:a4:9b:99:bd:86:82:8a:9d:11:c9:2b:14:04:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A8:F5:0F:A8:7E:4D:BA:71:43:9F:42:78:18:86:F6:EB:84:D0:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:46:60:4c:40:c7:33:7f:64:e2:1e:8e:ad:ad:b2:be:e0:a8:
         18:f2:c4:17:3c:ad:45:bf:73:2a:da:61:ff:86:f6:77:cd:08:
         17:90:09:1e:88:e6:18:40:9f:34:65:10:44:f2:fe:69:b4:99:
         c0:6b:8f:94:70:c2:f7:73:47:84:a2:96:ae:d1:45:46:ad:c3:
         40:2c:67:a0:22:8f:44:f3:d4:d2:38:fd:cb:f3:f1:3f:5a:1b:
         4b:80:25:87:05:69:c7:dd:cd:20:e1:7d:05:b5:fa:4e:26:58:
         0e:8b:c7:56:ca:57:fc:12:5a:26:87:1c:33:f5:40:8e:1a:cf:
         dd:1c:1b:85:a4:22:ba:a9:66:35:3d:25:00:9b:8e:93:fc:1a:
         03:05:f0:36:3a:16:96:ae:32:4e:ae:41:c5:43:94:f1:6a:68:
         1b:b9:2d:2a:9d:23:56:c7:cc:cf:d7:7b:53:52:03:72:cc:3a:
         0f:af:49:90:ce:77:4c:21:fc:80:94:43:49:24:c5:38:a7:12:
         67:32:09:b3:1e:75:83:f0:c5:09:be:bf:a7:b8:cc:f8:ca:7c:
         cf:79:80:28:75:b4:44:86:d7:f5:c3:11:72:f4:18:7c:75:46:
         49:d3:6d:f1:9b:26:2d:f5:10:fd:36:f9:93:d2:5e:52:f5:b7:
         f7:72:e1:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3EliXx0vSdIfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk
N2E5ZGI0ZWEtNjg5MS00NGY2LThmYTUtNWE3MjE3ZjU4NWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggfSwrdU6C+Z4wQ4VCf3Vq7FOaj9L2PlpJpw
HvBxCV6ImCNkChtv9/0rG0Rj03CZYK0nDQcanAUmKW+PbdG85W4ZpXvUbTCv2VLs
jyUfAytOpYvYmyhBmnPjENh3ZuI+fHkU947At1oHa5TiszTLkEI5uU0S0/VjoYZ4
93TGDdXHdAXhWtfxvAuct7LTtOZ3c+bPM+h6nBocvqAynqLP9F/Grgyt1YeYm55w
+grSCo0WurIJjgX4oep5AibVScfe26/395laDgfFntvlKaDjSTXMz28gNhJq/V60
9uJKRHxm6MRiqMMYM5aAAz9FQwC0EKSbmb2GgoqdEckrFAS0/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCCo9Q+ofk26cUOfQngYhvbrhNDeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGI2NzdkMmYtN2QyZi0z
ZjQwLWI4MDYtN2JmNDFmZjFkMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgDsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9GYExAxzN/ZOIejq2tsr7gqBjyxBc8rUW/cyraYf+G9nfNCBeQCR6I
5hhAnzRlEETy/mm0mcBrj5RwwvdzR4Silq7RRUatw0AsZ6Aij0Tz1NI4/cvz8T9a
G0uAJYcFacfdzSDhfQW1+k4mWA6Lx1bKV/wSWiaHHDP1QI4az90cG4WkIrqpZjU9
JQCbjpP8GgMF8DY6FpauMk6uQcVDlPFqaBu5LSqdI1bHzM/Xe1NSA3LMOg+vSZDO
d0wh/ICUQ0kkxTinEmcyCbMedYPwxQm+v6e4zPjKfM95gCh1tESG1/XDEXL0GHx1
RknTbfGbJi31EP02+ZPSXlL1t/dy4S8=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:21 2026 by rpki-client