Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/1d2bd492-058e-303e-bd8a-da5d74723d6c.roa
File:                     1d2bd492-058e-303e-bd8a-da5d74723d6c.roa (raw, json)
Hash identifier:          C61YKBtohtrMhirvm1OGy3jWhhNYAzjtZ1hdgMp8E6c=
Subject key identifier:   7A:00:44:47:55:27:A1:5B:D1:67:5E:F9:19:6C:E7:EB:5B:D0:95:0F
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584EBA89497E984062068B259740
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/1d2bd492-058e-303e-bd8a-da5d74723d6c.roa
Signing time:             Tue 04 Aug 2026 20:25:29 +0000
ROA not before:           Tue 04 Aug 2026 20:25:29 +0000
ROA not after:            Mon 02 Nov 2026 21:25:29 +0000
asID:                     40933
IP address blocks:        70.33.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:89:49:7e:98:40:62:06:8b:25:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Aug  4 20:25:29 2026 GMT
            Not After : Nov  2 21:25:29 2026 GMT
        Subject: CN=0e534797-8550-4438-ba5b-007875135398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:40:8e:26:86:9e:55:32:8b:c5:1b:92:03:
                    0d:f4:f3:70:c6:d4:0e:94:b4:ca:84:fa:a2:ce:3f:
                    0b:c2:6d:78:05:6d:0d:43:cd:e1:3d:9e:8b:f3:59:
                    ad:88:ef:bf:b8:f5:27:07:b0:8f:63:bb:0e:45:57:
                    8f:9f:ef:c4:4e:6b:72:50:3e:e5:84:be:de:8f:d6:
                    bf:cb:a4:3d:f6:22:81:97:db:52:cb:db:89:46:5f:
                    6c:a9:22:03:b4:ba:ba:e1:1c:48:96:6f:33:2f:51:
                    b3:91:40:49:56:4f:96:da:9b:c6:f7:a6:0c:96:76:
                    e4:26:01:92:65:fa:ca:ae:db:e0:a7:45:1f:5b:5d:
                    9c:25:f3:e7:e7:9b:49:78:de:5a:02:75:38:ee:b4:
                    af:eb:a2:00:b2:f8:24:9e:ab:49:ef:ac:c9:87:ea:
                    56:ad:0a:78:76:17:3f:be:35:f8:bd:60:22:dd:ee:
                    90:6e:87:a2:99:e7:6c:b6:db:08:50:ae:5e:60:53:
                    27:98:61:de:ef:2f:51:78:4d:64:42:e8:80:e0:a9:
                    e6:1b:7f:fd:2c:35:d1:b1:1e:6f:94:bd:98:c9:18:
                    d0:10:49:49:2b:23:48:1e:e5:36:c9:b6:ec:f8:1e:
                    f6:36:79:58:6f:86:96:5e:38:30:aa:00:c1:fb:72:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:00:44:47:55:27:A1:5B:D1:67:5E:F9:19:6C:E7:EB:5B:D0:95:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/1d2bd492-058e-303e-bd8a-da5d74723d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.33.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:98:b7:db:df:35:c3:ad:c2:d1:7c:9b:a2:64:68:ec:60:53:
         30:d8:aa:a8:6c:09:09:cb:a8:bc:29:86:3e:d3:ba:88:18:5d:
         5b:35:1b:47:9c:8f:44:d1:fc:2e:7d:96:25:f1:40:08:df:94:
         a1:26:28:5c:96:49:fe:34:02:b1:89:fd:fb:e2:94:25:da:2a:
         e6:74:e4:ff:e6:38:5f:0a:b5:4e:fd:fa:f8:b0:86:ca:82:01:
         80:dc:b7:54:d0:bb:d1:7d:e7:ee:b6:11:c1:36:ca:90:48:59:
         71:10:41:72:3c:1f:51:4c:88:43:49:f6:00:1d:d8:55:ec:02:
         27:91:99:75:fc:c0:d8:ef:92:8a:ed:d7:6f:b1:a7:ff:7d:ea:
         3f:b5:e2:ad:c3:2d:b9:19:31:b8:a4:34:33:e0:1d:29:40:00:
         24:99:fe:48:97:bc:92:e2:77:ee:cf:df:7f:23:a8:f8:07:ba:
         65:00:8a:ef:82:b3:45:0b:f9:0a:16:d5:5c:54:c1:e9:a3:82:
         96:d8:7b:3f:5a:04:f1:38:07:b9:62:2c:a2:18:fb:b6:d8:2b:
         be:b3:0e:61:50:e4:b4:7f:69:a0:bc:0f:e3:75:7b:83:64:12:
         4e:f6:84:0d:5b:c1:f6:51:cc:2a:17:4e:73:96:88:25:64:d9:
         b9:9a:5f:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE66iUl+mEBiBosll0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh
ZWNkMB4XDTI2MDgwNDIwMjUyOVoXDTI2MTEwMjIxMjUyOVowLzEtMCsGA1UEAxMk
MGU1MzQ3OTctODU1MC00NDM4LWJhNWItMDA3ODc1MTM1Mzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPlAjiaGnlUyi8UbkgMN9PNwxtQOlLTKhPqi
zj8Lwm14BW0NQ83hPZ6L81mtiO+/uPUnB7CPY7sORVePn+/ETmtyUD7lhL7ej9a/
y6Q99iKBl9tSy9uJRl9sqSIDtLq64RxIlm8zL1GzkUBJVk+W2pvG96YMlnbkJgGS
ZfrKrtvgp0UfW12cJfPn55tJeN5aAnU47rSv66IAsvgknqtJ76zJh+pWrQp4dhc/
vjX4vWAi3e6QboeimedsttsIUK5eYFMnmGHe7y9ReE1kQuiA4KnmG3/9LDXRsR5v
lL2YyRjQEElJKyNIHuU2ybbs+B72NnlYb4aWXjgwqgDB+3IP2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHoAREdVJ6Fb0Wde+Rls5+tb0JUPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5
ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvMWQyYmQ0OTItMDU4ZS0z
MDNlLWJkOGEtZGE1ZDc0NzIzZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli
MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1
YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew
NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiEiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSYt9vfNcOtwtF8m6JkaOxgUzDYqqhsCQnLqLwphj7TuogYXVs1G0ec
j0TR/C59liXxQAjflKEmKFyWSf40ArGJ/fvilCXaKuZ05P/mOF8KtU79+viwhsqC
AYDct1TQu9F95+62EcE2ypBIWXEQQXI8H1FMiENJ9gAd2FXsAieRmXX8wNjvkort
12+xp/996j+14q3DLbkZMbikNDPgHSlAACSZ/kiXvJLid+7P338jqPgHumUAiu+C
s0UL+QoW1VxUwemjgpbYez9aBPE4B7liLKIY+7bYK76zDmFQ5LR/aaC8D+N1e4Nk
Ek72hA1bwfZRzCoXTnOWiCVk2bmaX1k=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:05 2026 by rpki-client