Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3632ceb-e9c8-3851-8023-c4e3e02ba03a.roa
File:                     b3632ceb-e9c8-3851-8023-c4e3e02ba03a.roa (raw, json)
Hash identifier:          Z5qv/1XrsMIX5ww46O4hQuqrKRPAqf6wL6lQP7kr7GI=
Subject key identifier:   78:43:53:04:65:97:60:AD:3F:D7:5E:69:28:BA:40:FF:90:72:D7:14
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E0FBF29CD04BFB714516C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3632ceb-e9c8-3851-8023-c4e3e02ba03a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     19527
IP address blocks:        34.0.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:fb:f2:9c:d0:4b:fb:71:45:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=dc31e314-2efe-4a81-8348-c82e76f42133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cd:4b:ad:3a:cc:34:c1:7c:67:06:7e:e8:ad:
                    09:7b:c0:48:a9:27:4f:27:78:4e:a6:e4:30:e3:ff:
                    07:c7:1c:a3:e3:95:22:0c:c6:e5:37:f6:b7:e7:d4:
                    9b:e7:03:52:ea:54:1a:13:37:a8:cd:2d:f0:e1:e3:
                    4e:24:02:b8:33:9a:ed:92:db:eb:5c:f3:9a:41:23:
                    bb:e0:b9:ad:17:20:72:de:78:a6:81:e8:d0:4f:42:
                    b1:8d:99:b7:c0:20:19:6f:d6:e5:29:3f:a2:47:1e:
                    19:af:6f:08:86:a7:12:d4:cb:e8:11:da:41:3d:14:
                    37:76:5f:05:44:60:4e:5d:90:ad:0b:56:4c:60:a0:
                    a7:47:79:bc:42:e7:25:d6:bb:14:a8:ce:24:0c:3e:
                    e3:58:13:4c:74:80:96:e5:7a:bf:5f:d2:c5:60:75:
                    10:ff:a6:20:b7:02:ac:69:d9:4f:b3:e1:81:bf:e1:
                    19:10:87:47:ee:08:2b:b2:8d:92:ad:23:18:e7:fa:
                    8a:4d:86:bd:10:7b:94:bb:10:0f:d4:01:c2:26:e4:
                    18:c3:c1:fe:03:ef:c1:70:5e:fe:1e:90:55:9c:28:
                    66:c4:ac:21:63:78:0f:45:92:76:1b:10:33:72:6e:
                    ef:d3:a2:28:65:bd:08:30:65:cc:b1:02:42:bf:c2:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:43:53:04:65:97:60:AD:3F:D7:5E:69:28:BA:40:FF:90:72:D7:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3632ceb-e9c8-3851-8023-c4e3e02ba03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:e3:52:cd:fb:0b:e2:bb:93:47:c5:a0:94:1e:00:13:f1:
         15:74:5e:d0:fa:f6:9f:ec:58:f7:40:15:34:57:cc:8e:1e:3d:
         89:35:c9:93:a4:9c:55:85:ff:13:aa:8d:d5:55:92:8d:91:e2:
         23:31:1d:d5:ad:9b:48:aa:d4:7d:78:09:5e:8e:36:b2:b8:91:
         f3:dc:ee:d8:84:9f:7d:26:05:a7:9e:f5:9d:b8:2e:73:24:ae:
         db:c9:10:da:6c:8d:bf:3c:a7:c8:54:eb:82:b4:c0:ff:9c:ba:
         f0:9e:9e:60:0a:e0:60:61:9b:4a:2f:82:bb:17:a6:d0:ca:8d:
         7b:3d:4e:09:09:e8:24:47:b0:1b:a7:37:b6:84:2b:4e:0b:9b:
         1d:4a:16:43:10:12:3a:74:da:1d:7d:fa:94:03:8c:fc:97:6d:
         2d:9e:18:23:18:65:86:2d:53:f4:13:49:35:cf:bb:af:50:1a:
         0c:f5:08:75:80:d0:67:d4:18:7b:d0:d6:06:3b:66:6f:91:17:
         b2:28:ca:41:ad:24:68:c4:64:01:bc:af:2d:55:3d:68:a0:05:
         f2:70:08:0c:f9:1c:7b:c2:14:c8:0c:ef:cc:33:e6:a1:0a:01:
         ba:42:38:b9:3f:4a:a1:6c:b2:2c:c7:ae:7f:60:2a:1b:4c:90:
         30:5c:1e:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PvynNBL+3FFFsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZGMzMWUzMTQtMmVmZS00YTgxLTgzNDgtYzgyZTc2ZjQyMTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM1LrTrMNMF8ZwZ+6K0Je8BIqSdPJ3hOpuQw
4/8Hxxyj45UiDMblN/a359Sb5wNS6lQaEzeozS3w4eNOJAK4M5rtktvrXPOaQSO7
4LmtFyBy3nimgejQT0KxjZm3wCAZb9blKT+iRx4Zr28IhqcS1MvoEdpBPRQ3dl8F
RGBOXZCtC1ZMYKCnR3m8Qucl1rsUqM4kDD7jWBNMdICW5Xq/X9LFYHUQ/6YgtwKs
adlPs+GBv+EZEIdH7ggrso2SrSMY5/qKTYa9EHuUuxAP1AHCJuQYw8H+A+/BcF7+
HpBVnChmxKwhY3gPRZJ2GxAzcm7v06IoZb0IMGXMsQJCv8KSBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHhDUwRll2CtP9deaSi6QP+QctcUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjM2MzJjZWItZTljOC0z
ODUxLTgwMjMtYzRlM2UwMmJhMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgAgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvq41LN+wviu5NHxaCUHgAT8RV0XtD69p/sWPdAFTRXzI4ePYk1yZOk
nFWF/xOqjdVVko2R4iMxHdWtm0iq1H14CV6ONrK4kfPc7tiEn30mBaee9Z24LnMk
rtvJENpsjb88p8hU64K0wP+cuvCenmAK4GBhm0ovgrsXptDKjXs9TgkJ6CRHsBun
N7aEK04Lmx1KFkMQEjp02h19+pQDjPyXbS2eGCMYZYYtU/QTSTXPu69QGgz1CHWA
0GfUGHvQ1gY7Zm+RF7IoykGtJGjEZAG8ry1VPWigBfJwCAz5HHvCFMgM78wz5qEK
AbpCOLk/SqFssizHrn9gKhtMkDBcHsQ=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:06 2026 by rpki-client