Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa
File:                     b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa (raw, json)
Hash identifier:          6To1gDHFnkF78ENgRRliXndTDjbPBIz5ynCEFzD0k9E=
Subject key identifier:   56:13:D0:02:06:1E:F6:43:5A:9D:4D:41:1C:D2:97:39:9C:09:E9:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA8F92B4C3229BCAAC5880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.98.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:8f:92:b4:c3:22:9b:ca:ac:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=fc8c1ade-73fb-44ec-b668-9eca3115c5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:12:b7:ca:99:9e:bc:a7:41:e1:42:9d:30:5a:
                    f9:1a:78:47:53:05:28:d9:92:2e:f0:f2:0e:d7:95:
                    35:52:fe:60:fa:5d:27:61:fd:db:99:82:6d:27:c2:
                    ff:2d:aa:ca:69:97:69:e4:c4:ea:14:c5:f1:18:bf:
                    48:61:21:4d:1c:32:43:b9:3d:7a:fd:59:8d:7f:d3:
                    55:38:5e:6d:c9:1e:26:e1:24:01:de:42:eb:22:25:
                    06:78:59:4b:a4:b7:07:d3:53:bf:53:b2:b3:11:21:
                    2e:c8:b9:32:5b:47:a3:ff:9a:41:8d:8b:ee:53:f9:
                    7c:f0:7d:2d:48:af:b1:59:89:4f:7c:ee:f8:0a:31:
                    20:34:13:b0:68:ff:83:0e:90:2f:3c:44:9c:3f:e1:
                    95:38:12:db:b3:0f:5b:57:bc:e1:78:05:79:46:58:
                    1c:c1:e3:2f:2a:bf:80:1e:7e:c7:86:38:0f:a2:8e:
                    ae:a5:65:4b:66:7b:4c:9c:f9:26:18:2e:cd:3a:dd:
                    d1:bf:73:f1:32:36:3d:56:c4:95:28:19:ca:57:9c:
                    f1:11:52:b4:da:dc:76:e0:28:7e:60:66:81:34:63:
                    88:9c:00:60:0e:58:06:90:54:21:27:25:32:45:d5:
                    58:70:e8:2d:20:f0:d9:c6:47:5c:9f:47:11:d4:5f:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:13:D0:02:06:1E:F6:43:5A:9D:4D:41:1C:D2:97:39:9C:09:E9:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4c:2a:b8:e4:1f:69:db:e7:a5:49:e9:8c:af:e5:f4:15:d4:
         ff:bc:17:0f:1a:44:e6:cd:a2:a1:12:d2:46:c4:13:fe:bd:af:
         25:34:5b:cb:4f:1e:83:8d:e1:52:4f:99:8a:04:69:60:36:6a:
         44:fd:a6:3d:cc:08:7f:16:ae:58:47:77:02:1b:4b:fb:05:22:
         2a:28:c4:59:79:c4:b5:9f:2a:13:8b:3a:90:bb:6d:f4:15:7c:
         f1:53:75:b0:f3:1c:73:cf:9a:65:a5:27:b3:aa:5d:77:7e:e7:
         2a:de:1b:ac:23:ba:d4:61:c0:03:02:42:07:66:dd:db:e7:41:
         de:f2:cd:84:80:c9:24:30:e7:b5:b1:3a:ec:3d:a6:96:65:d2:
         d9:7c:f1:29:6e:00:cd:9f:bf:dc:3a:cd:9c:f6:f7:47:c4:3c:
         02:ee:a2:ae:1d:ac:e6:31:eb:5d:73:66:61:fa:5f:c7:5f:7d:
         6b:bc:0b:85:4b:e9:8a:b5:2e:bd:f5:40:14:d3:da:ea:fc:f0:
         f0:13:9a:c4:cb:01:fb:c7:a7:97:cf:54:20:38:7a:44:28:1d:
         e2:14:d7:2e:ad:99:5c:51:cc:d7:ef:6c:59:4e:17:8e:a2:49:
         34:77:65:c1:e1:91:ea:08:dc:b9:0b:b5:e2:1e:ee:e2:6f:f9:
         b2:f6:d7:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqo+StMMim8qsWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
ZmM4YzFhZGUtNzNmYi00NGVjLWI2NjgtOWVjYTMxMTVjNWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBK3ypmevKdB4UKdMFr5GnhHUwUo2ZIu8PIO
15U1Uv5g+l0nYf3bmYJtJ8L/LarKaZdp5MTqFMXxGL9IYSFNHDJDuT16/VmNf9NV
OF5tyR4m4SQB3kLrIiUGeFlLpLcH01O/U7KzESEuyLkyW0ej/5pBjYvuU/l88H0t
SK+xWYlPfO74CjEgNBOwaP+DDpAvPEScP+GVOBLbsw9bV7zheAV5RlgcweMvKr+A
Hn7HhjgPoo6upWVLZntMnPkmGC7NOt3Rv3PxMjY9VsSVKBnKV5zxEVK02tx24Ch+
YGaBNGOInABgDlgGkFQhJyUyRdVYcOgtIPDZxkdcn0cR1F8+bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYT0AIGHvZDWp1NQRzSlzmcCemTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjM4ZGM5ZGYtODdlNi0z
NmUxLWJiNjctYmQwYzYwOGEzM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVMKrjkH2nb56VJ6Yyv5fQV1P+8Fw8aRObNoqES0kbEE/69ryU0W8tP
HoON4VJPmYoEaWA2akT9pj3MCH8WrlhHdwIbS/sFIiooxFl5xLWfKhOLOpC7bfQV
fPFTdbDzHHPPmmWlJ7OqXXd+5yreG6wjutRhwAMCQgdm3dvnQd7yzYSAySQw57Wx
Ouw9ppZl0tl88SluAM2fv9w6zZz290fEPALuoq4drOYx611zZmH6X8dffWu8C4VL
6Yq1Lr31QBTT2ur88PATmsTLAfvHp5fPVCA4ekQoHeIU1y6tmVxRzNfvbFlOF46i
STR3ZcHhkeoI3LkLteIe7uJv+bL21/U=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:48:18 2026 by rpki-client