Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/704296a8-4e0e-375c-bd18-e1894da8f170.roa
File:                     704296a8-4e0e-375c-bd18-e1894da8f170.roa (raw, json)
Hash identifier:          b0jajbeZGRvYxRH04IKpl7Y07BrnV2e5nMqXs4irNiw=
Subject key identifier:   68:1B:7B:D9:05:DE:EB:37:2B:30:29:BB:9F:B5:46:DA:38:C7:FC:D6
Certificate issuer:       /CN=34f935ff-170a-4b14-b64c-790e52fa9534
Certificate serial:       010D0C9F4328584EDF5C8AAB548B965F5E265780
Authority key identifier: FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/704296a8-4e0e-375c-bd18-e1894da8f170.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     30256
IP address blocks:        131.162.0.0/21 maxlen: 21
                          131.162.8.0/21 maxlen: 21
                          131.162.16.0/21 maxlen: 21
                          131.162.24.0/21 maxlen: 21
                          131.162.32.0/21 maxlen: 21
                          131.162.40.0/21 maxlen: 21
                          131.162.48.0/21 maxlen: 21
                          131.162.56.0/21 maxlen: 21
                          131.162.64.0/21 maxlen: 21
                          131.162.72.0/21 maxlen: 21
                          131.162.80.0/21 maxlen: 21
                          131.162.112.0/21 maxlen: 21
                          131.162.120.0/21 maxlen: 21
                          131.162.128.0/21 maxlen: 21
                          131.162.136.0/21 maxlen: 21
                          131.162.200.0/21 maxlen: 21
                          131.162.208.0/21 maxlen: 21
                          131.162.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:8a:ab:54:8b:96:5f:5e:26:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f935ff-170a-4b14-b64c-790e52fa9534
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=ce87c773-a754-440e-96d3-811a2ec44b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:61:73:1f:81:28:53:ee:aa:4a:45:e0:5d:
                    37:c8:6b:9b:0f:83:34:c9:e6:c9:d7:e8:ff:3f:40:
                    b1:fd:08:08:ff:93:21:ef:42:cb:a2:48:f7:4e:85:
                    47:ad:13:b6:7f:00:d3:93:8e:3b:4f:b4:43:34:a5:
                    14:3c:63:8d:a9:41:2f:9d:3d:3b:6f:0a:ba:90:af:
                    b8:28:96:de:76:1a:dd:ea:6f:80:5a:2c:5f:5b:27:
                    21:bc:dd:ef:cf:bd:76:f2:98:f3:04:5c:7f:86:bc:
                    a6:fb:9e:04:ce:6f:27:b7:ad:bd:de:4a:00:c3:bf:
                    28:d1:04:cf:f1:0d:24:08:50:06:31:d6:41:11:8d:
                    9f:4b:12:a4:3b:23:7a:05:48:b9:22:10:da:6e:50:
                    57:70:06:fb:75:9c:f3:87:d7:89:66:11:0b:7c:93:
                    b7:a1:6f:54:f0:59:60:bd:10:2b:39:3c:71:61:f0:
                    54:d0:b5:9f:25:40:90:8c:06:75:3a:63:cd:99:e8:
                    c5:72:40:74:73:52:8a:2f:c6:35:1a:0c:58:b7:a5:
                    2c:0f:7e:d5:17:c9:1f:66:8f:05:c2:2d:3f:f6:a3:
                    b1:a8:52:ee:f1:42:0b:f4:ca:10:88:6e:6b:de:5b:
                    9c:a3:bf:c6:a8:64:f3:6d:5b:91:12:09:e2:d3:ae:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1B:7B:D9:05:DE:EB:37:2B:30:29:BB:9F:B5:46:DA:38:C7:FC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/704296a8-4e0e-375c-bd18-e1894da8f170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl

            X509v3 Authority Key Identifier:
                keyid:FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.162.0.0-131.162.87.255
                  131.162.112.0-131.162.143.255
                  131.162.200.0-131.162.215.255
                  131.162.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:ab:c7:3e:dc:62:63:49:d6:d5:39:6e:3a:77:94:12:5c:e9:
         d4:2f:4c:03:f8:18:77:63:3e:1b:57:01:39:0b:f5:c7:d6:29:
         45:e7:fa:48:b0:31:63:d7:2e:ad:b7:66:1d:3f:8e:2d:4e:62:
         7e:4d:29:60:5d:f5:c8:d7:76:85:19:1d:c3:8e:20:ac:5f:70:
         c5:9c:2d:1f:b8:b3:03:20:0a:0c:d3:ae:d6:25:75:28:2b:f7:
         84:9a:10:ce:0f:bc:4a:b8:6d:03:5e:f3:1f:1f:de:32:a7:c3:
         5d:07:3c:d4:66:bd:2b:93:15:b7:11:49:db:9a:a7:7f:7e:cb:
         fb:1b:d2:26:4f:79:76:81:d8:66:57:b6:95:bb:c5:86:47:b4:
         14:61:a4:08:db:16:9e:1c:ac:66:1e:2d:85:35:71:f6:49:e7:
         43:3c:81:72:e4:22:06:fc:dc:8b:02:09:67:95:7a:89:2a:ce:
         15:b8:a4:56:05:39:d2:95:86:ed:90:f7:76:a6:0f:88:4c:d4:
         19:03:91:d6:4c:9a:1a:81:d8:f4:8b:17:97:89:8e:6d:a5:c7:
         af:e4:12:b5:75:5a:22:19:39:ea:d7:92:21:90:11:ed:de:55:
         ff:b5:e4:3c:de:d4:b9:14:75:4a:e5:cc:4d:3c:8a:f0:b0:5c:
         bb:49:fa:a5
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIUAQ0Mn0MoWE7fXIqrVIuWX14mV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRmOTM1ZmYtMTcwYS00YjE0LWI2NGMtNzkwZTUyZmE5
NTM0MB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk
Y2U4N2M3NzMtYTc1NC00NDBlLTk2ZDMtODExYTJlYzQ0YjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Bhcx+BKFPuqkpF4F03yGubD4M0yebJ1+j/
P0Cx/QgI/5Mh70LLokj3ToVHrRO2fwDTk447T7RDNKUUPGONqUEvnT07bwq6kK+4
KJbedhrd6m+AWixfWychvN3vz7128pjzBFx/hrym+54Ezm8nt6293koAw78o0QTP
8Q0kCFAGMdZBEY2fSxKkOyN6BUi5IhDablBXcAb7dZzzh9eJZhELfJO3oW9U8Flg
vRArOTxxYfBU0LWfJUCQjAZ1OmPNmejFckB0c1KKL8Y1GgxYt6UsD37VF8kfZo8F
wi0/9qOxqFLu8UIL9MoQiG5r3luco7/GqGTzbVuREgni064JUwIDAQABo4IDfjCC
A3owHQYDVR0OBBYEFGgbe9kF3us3KzApu5+1Rto4x/zWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5
MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBlNTJmYTk1MzQvNzA0Mjk2YTgtNGUwZS0z
NzVjLWJkMTgtZTE4OTRkYThmMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzRmOTM1ZmYtMTcwYS00YjE0LWI2
NGMtNzkwZTUyZmE5NTM0LzM0ZjkzNWZmLTE3MGEtNGIxNC1iNjRjLTc5MGU1MmZh
OTUzNC5jcmwwHwYDVR0jBBgwFoAU+9h6fXM7VpxZRdmviLxqIdayXY0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBl
NTJmYTk1MzQuY2VyMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAATAvMAsDAwGDogME
A4OiUDAMAwQEg6JwAwQEg6KAMAwDBAODosgDBAODotADBAODouAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
4KvHPtxiY0nW1TluOneUElzp1C9MA/gYd2M+G1cBOQv1x9YpRef6SLAxY9curbdm
HT+OLU5ifk0pYF31yNd2hRkdw44grF9wxZwtH7izAyAKDNOu1iV1KCv3hJoQzg+8
SrhtA17zHx/eMqfDXQc81Ga9K5MVtxFJ25qnf37L+xvSJk95doHYZle2lbvFhke0
FGGkCNsWnhysZh4thTVx9knnQzyBcuQiBvzciwIJZ5V6iSrOFbikVgU50pWG7ZD3
dqYPiEzUGQOR1kyaGoHY9IsXl4mObaXHr+QStXVaIhk56teSIZAR7d5V/7XkPN7U
uRR1SuXMTTyK8LBcu0n6pQ==
-----END CERTIFICATE-----
Generated at Tue Sep 15 00:45:33 2026 by rpki-client