Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dada5784-94e0-39a8-ab44-d2270251ff7d.roa
File:                     dada5784-94e0-39a8-ab44-d2270251ff7d.roa (raw, json)
Hash identifier:          C9DvJobdG2B/noVTVLBcK6v0tqjmUNvNjJQQRSB2pnY=
Subject key identifier:   BD:24:91:AE:43:4B:0D:C4:2E:88:5E:D8:66:18:E5:44:8C:80:AA:90
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA746E0B6745F819E23E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dada5784-94e0-39a8-ab44-d2270251ff7d.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.91.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:74:6e:0b:67:45:f8:19:e2:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=fdad75ff-d494-4cee-8fb0-28d1c2ba25a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:14:ac:5c:23:72:9e:75:ae:23:25:d8:26:14:
                    8d:78:d3:3b:c3:64:90:05:98:9e:65:53:b0:19:99:
                    09:73:0c:b0:b5:0d:80:b4:d0:b0:a9:16:56:ba:e3:
                    f3:24:32:f1:de:85:5a:d7:e6:cc:7c:4a:23:41:c9:
                    89:ce:7b:b0:87:8a:f3:e8:05:23:a6:0b:fe:55:bc:
                    8c:fc:f5:b1:56:f5:ef:f8:e6:ea:de:26:4a:dc:ab:
                    99:2f:50:50:12:63:9f:75:8b:55:39:2d:ed:ba:8e:
                    07:60:39:d5:ad:a8:42:45:db:9f:67:a7:78:8e:07:
                    ac:dc:9f:66:59:de:60:49:8e:6b:da:ad:3b:f7:b3:
                    3e:21:ba:77:02:76:6a:62:e9:ba:3c:d9:61:a5:44:
                    b7:26:b3:11:93:eb:14:63:6b:4e:17:51:37:d9:e1:
                    0c:3c:7a:90:d6:23:48:a4:e0:b8:22:94:9f:53:4b:
                    2c:9f:e5:1a:20:1d:e3:2d:b8:42:f6:24:66:b9:fc:
                    40:da:ec:c0:96:99:c1:8d:e9:5a:69:c8:9a:eb:84:
                    01:ca:fe:17:6e:f2:ea:7e:7d:17:37:3e:79:1e:ea:
                    7e:41:2b:7b:ab:dd:d2:7f:03:bb:ff:26:02:f6:12:
                    47:95:f6:69:71:5b:26:c5:83:ac:1c:e7:ab:59:71:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:91:AE:43:4B:0D:C4:2E:88:5E:D8:66:18:E5:44:8C:80:AA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dada5784-94e0-39a8-ab44-d2270251ff7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.91.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:72:e8:7a:b0:1f:76:81:fa:2f:84:80:02:d1:91:7b:30:36:
         b7:3c:67:83:8e:2e:24:cc:aa:ab:85:32:07:e6:8a:a6:0c:94:
         7c:dd:44:db:98:f1:14:da:88:25:93:83:65:03:4e:48:22:db:
         48:62:e4:87:b0:79:1b:28:96:f6:96:b1:31:80:7f:1b:90:b0:
         b5:ce:8f:27:70:8a:2c:d4:f9:38:fd:c5:53:a2:f8:fe:c4:22:
         2c:60:ad:53:81:ea:4e:ec:3f:00:7d:8d:94:95:36:1e:43:52:
         34:bf:fd:1a:12:48:23:1e:c9:3c:90:2a:52:50:b1:13:2d:9d:
         ad:df:86:99:77:78:ed:3c:df:82:92:6a:aa:47:38:ae:54:db:
         41:5c:49:1b:e4:e6:24:58:e6:6f:1c:f7:0e:71:d2:b5:4b:f8:
         07:89:b8:62:ca:80:85:e7:78:52:92:91:38:39:8d:90:84:9d:
         26:a2:b2:89:7a:d3:0a:b3:12:79:fb:b0:22:aa:a7:5e:2c:c1:
         05:0a:c1:05:6c:f0:cf:04:82:66:eb:cd:cf:c3:03:ed:5a:74:
         09:d9:ac:31:45:5c:48:64:3d:bc:8a:23:db:09:53:81:2a:1e:
         65:8c:a9:88:78:b6:21:82:3a:78:68:2d:39:99:80:d1:26:02:
         57:d8:75:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnRuC2dF+BniPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
ZmRhZDc1ZmYtZDQ5NC00Y2VlLThmYjAtMjhkMWMyYmEyNWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBSsXCNynnWuIyXYJhSNeNM7w2SQBZieZVOw
GZkJcwywtQ2AtNCwqRZWuuPzJDLx3oVa1+bMfEojQcmJznuwh4rz6AUjpgv+VbyM
/PWxVvXv+Obq3iZK3KuZL1BQEmOfdYtVOS3tuo4HYDnVrahCRdufZ6d4jges3J9m
Wd5gSY5r2q0797M+Ibp3AnZqYum6PNlhpUS3JrMRk+sUY2tOF1E32eEMPHqQ1iNI
pOC4IpSfU0ssn+UaIB3jLbhC9iRmufxA2uzAlpnBjelaacia64QByv4XbvLqfn0X
Nz55Hup+QSt7q93SfwO7/yYC9hJHlfZpcVsmxYOsHOerWXFsfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0kka5DSw3ELohe2GYY5USMgKqQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGFkYTU3ODQtOTRlMC0z
OWE4LWFiNDQtZDIyNzAyNTFmZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBy6HqwH3aB+i+EgALRkXswNrc8Z4OOLiTMqquFMgfmiqYMlHzdRNuY
8RTaiCWTg2UDTkgi20hi5IeweRsolvaWsTGAfxuQsLXOjydwiizU+Tj9xVOi+P7E
IixgrVOB6k7sPwB9jZSVNh5DUjS//RoSSCMeyTyQKlJQsRMtna3fhpl3eO0834KS
aqpHOK5U20FcSRvk5iRY5m8c9w5x0rVL+AeJuGLKgIXneFKSkTg5jZCEnSaisol6
0wqzEnn7sCKqp14swQUKwQVs8M8Egmbrzc/DA+1adAnZrDFFXEhkPbyKI9sJU4Eq
HmWMqYh4tiGCOnhoLTmZgNEmAlfYdY0=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:54:18 2026 by rpki-client