Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa
File:                     e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa (raw, json)
Hash identifier:          gKghFvS2HKTkERKBAC1QZh8bUdQ0VvQJpwoRq5C5Qr4=
Subject key identifier:   5C:11:F1:8F:7A:29:43:76:60:CA:81:9F:78:3C:A6:50:C9:73:A9:9B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA7F55DB5922DF234B0840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.66.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:7f:55:db:59:22:df:23:4b:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=039c1e1c-9130-4e25-bd63-a14cc4b20844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:19:82:ff:56:eb:1a:05:cd:31:70:87:ed:
                    4d:04:c8:13:4d:4f:54:ec:01:73:be:14:f7:e7:11:
                    ae:b3:47:f8:d3:96:a6:f7:42:11:7c:65:4e:e8:f8:
                    ab:bf:e3:94:9a:2e:81:2a:80:e9:34:b1:cc:08:8d:
                    d2:7d:79:95:93:81:58:fa:e9:5f:60:87:2d:6b:3a:
                    50:6e:a1:1a:d7:ee:29:4e:15:3f:b0:3d:b7:2e:cc:
                    d9:37:a1:64:d0:3b:b4:3a:07:59:f3:88:d0:e3:af:
                    42:20:79:a7:f6:3c:5e:b9:a5:d2:1c:bb:8e:a6:5e:
                    a9:2c:57:6c:af:25:f3:8d:df:f0:cc:1d:c9:a8:8d:
                    02:fb:04:d9:ec:58:30:2c:63:b5:44:97:1a:70:60:
                    b4:1c:d5:91:73:3b:58:75:e5:30:83:11:55:c4:ea:
                    b3:51:1b:80:8d:de:05:f0:9f:77:28:d1:d9:39:f3:
                    bb:25:3c:6e:42:4a:46:68:fb:13:b2:4c:e3:a7:e3:
                    12:69:32:3e:cb:90:f3:4b:e4:9e:5d:6e:63:98:dc:
                    02:22:ec:42:9d:59:20:62:d2:b4:e2:53:f2:0a:a4:
                    f5:24:36:e2:82:55:25:0b:e8:22:02:51:12:60:a2:
                    26:8f:49:40:70:07:64:10:a5:6c:7e:f1:2d:8b:16:
                    ae:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:11:F1:8F:7A:29:43:76:60:CA:81:9F:78:3C:A6:50:C9:73:A9:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1baf810-c1e0-3c33-a8c8-411b3821e25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.66.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:5a:bd:97:c6:90:7d:9a:1c:75:44:ae:b5:ae:b4:20:22:37:
         4d:97:14:63:2e:4b:1a:88:73:61:c5:4e:15:7d:03:d9:95:e8:
         7d:9e:57:ff:ea:03:c9:5b:58:00:ca:ff:8c:b4:00:21:dd:a9:
         ac:a2:56:39:37:48:a6:ca:be:f0:e7:0f:7f:a2:f3:49:7b:9a:
         c2:c4:dc:57:c2:51:64:43:99:2e:ee:ed:1e:11:97:62:77:2b:
         16:ad:b6:d6:2b:02:53:87:3c:20:b5:a3:77:55:9d:5b:29:b8:
         a4:fa:bb:71:eb:62:e8:6a:d0:72:79:7c:b1:1f:9b:a6:29:30:
         40:b0:9c:83:84:af:26:35:75:c6:8c:ba:6f:3c:57:06:3f:fe:
         ef:01:63:39:38:29:bc:37:46:2e:b5:26:c7:07:bd:ce:7d:5a:
         9e:ac:db:ef:86:ee:98:04:b9:1c:18:71:9e:18:62:ee:8d:3a:
         5f:b2:42:19:4e:a0:9d:08:c4:e6:18:6d:c9:1e:f6:9e:c7:b7:
         c1:fd:46:7f:ad:55:49:a8:2e:ec:b3:9d:15:c9:f5:89:f0:25:
         03:06:56:fc:de:80:73:c7:20:fc:e2:27:3f:3c:e3:02:08:0e:
         0f:63:29:78:2a:8b:da:b7:ca:dc:15:12:f1:28:00:71:3a:99:
         6c:74:69:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqn9V21ki3yNLCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
MDM5YzFlMWMtOTEzMC00ZTI1LWJkNjMtYTE0Y2M0YjIwODQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiUZgv9W6xoFzTFwh+1NBMgTTU9U7AFzvhT3
5xGus0f405am90IRfGVO6Pirv+OUmi6BKoDpNLHMCI3SfXmVk4FY+ulfYIctazpQ
bqEa1+4pThU/sD23LszZN6Fk0Du0OgdZ84jQ469CIHmn9jxeuaXSHLuOpl6pLFds
ryXzjd/wzB3JqI0C+wTZ7FgwLGO1RJcacGC0HNWRcztYdeUwgxFVxOqzURuAjd4F
8J93KNHZOfO7JTxuQkpGaPsTskzjp+MSaTI+y5DzS+SeXW5jmNwCIuxCnVkgYtK0
4lPyCqT1JDbiglUlC+giAlESYKImj0lAcAdkEKVsfvEtixauSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwR8Y96KUN2YMqBn3g8plDJc6mbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTFiYWY4MTAtYzFlMC0z
YzMzLWE4YzgtNDExYjM4MjFlMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtavZfGkH2aHHVErrWutCAiN02XFGMuSxqIc2HFThV9A9mV6H2eV//q
A8lbWADK/4y0ACHdqayiVjk3SKbKvvDnD3+i80l7msLE3FfCUWRDmS7u7R4Rl2J3
KxatttYrAlOHPCC1o3dVnVspuKT6u3HrYuhq0HJ5fLEfm6YpMECwnIOEryY1dcaM
um88VwY//u8BYzk4Kbw3Ri61JscHvc59Wp6s2++G7pgEuRwYcZ4YYu6NOl+yQhlO
oJ0IxOYYbcke9p7Ht8H9Rn+tVUmoLuyznRXJ9YnwJQMGVvzegHPHIPziJz884wII
Dg9jKXgqi9q3ytwVEvEoAHE6mWx0af8=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:52:51 2026 by rpki-client