Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03a40067-da30-39c3-b4a9-d1d7221649a7.roa
File:                     03a40067-da30-39c3-b4a9-d1d7221649a7.roa (raw, json)
Hash identifier:          AWfnOaPB/d/RX3OL+GfGWOIDdGhVa914c9NULdRrbZQ=
Subject key identifier:   7E:83:0C:EA:7C:D1:E9:0F:FA:23:3E:EB:1E:D6:BB:AF:36:24:AB:A9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D9053CF1BBA15A6817640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03a40067-da30-39c3-b4a9-d1d7221649a7.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.176.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:90:53:cf:1b:ba:15:a6:81:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=b0763a54-dca7-4e07-8947-32a1fc395286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:40:c9:5e:bd:84:67:fe:ca:31:ca:dc:69:
                    8b:fc:88:a5:9f:44:e6:32:64:fa:88:54:62:81:37:
                    5a:4c:0f:eb:98:4a:ea:36:f6:61:4a:a3:43:a1:d8:
                    27:9a:c0:b0:3a:fb:57:ef:e4:9c:df:68:37:b8:27:
                    0e:bd:4d:4d:ae:f7:34:1b:1b:11:40:ac:24:2a:49:
                    d8:2d:0a:83:3b:8b:c2:9a:30:b5:0a:b3:10:17:f7:
                    77:97:f5:52:9d:89:9b:f0:d5:87:16:18:d7:a4:88:
                    7a:90:43:ec:7c:2d:81:c6:2e:a7:a6:c6:1d:79:9c:
                    bc:db:70:3b:bb:3b:aa:77:a9:32:7f:41:8f:d2:3b:
                    23:7e:86:33:24:ca:e6:ed:5f:37:74:27:43:28:ff:
                    b2:ab:89:80:4c:69:f4:ac:65:8e:4f:56:52:22:a3:
                    f7:dc:00:52:2f:8e:c4:11:14:cb:a0:5c:98:9b:b9:
                    8f:7c:2d:90:e1:a0:ef:45:13:56:68:ea:46:19:ed:
                    ac:b3:85:0a:a6:6d:12:0d:91:53:0f:d6:ed:26:90:
                    72:b7:ed:ee:d3:21:ab:11:24:f0:01:48:cd:a6:3c:
                    ca:a4:3e:a6:f2:30:94:0a:e1:a5:b8:75:41:cc:68:
                    c2:a8:cf:a7:2f:4c:20:86:b5:3a:0f:b5:8e:ac:e5:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:83:0C:EA:7C:D1:E9:0F:FA:23:3E:EB:1E:D6:BB:AF:36:24:AB:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03a40067-da30-39c3-b4a9-d1d7221649a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.176.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:df:cc:59:20:29:bb:ab:0c:fc:20:d8:4c:bc:14:b9:41:a5:
         e6:ae:f7:82:00:10:34:e8:2a:1e:29:82:35:4d:56:e1:3e:2c:
         f8:7a:8a:54:98:6b:68:6e:a9:b6:57:29:36:04:ea:5d:11:e2:
         20:66:48:8e:91:97:39:d3:7e:fa:f7:cf:ba:1f:2d:1e:7f:a9:
         3f:9b:b1:72:bb:77:c8:3c:a2:1e:fc:36:25:f9:33:1c:09:cc:
         93:71:b0:53:13:c4:4d:c6:52:78:12:50:6a:1e:2f:79:dd:6a:
         37:76:42:29:5b:15:09:a7:71:5c:d3:af:f6:22:03:da:c3:bb:
         06:fe:3a:5c:09:b2:d4:53:5e:43:c2:9f:a3:ad:97:2e:bb:ba:
         f5:27:f8:ea:26:62:03:6c:62:92:1a:9d:c1:2b:ce:f6:3b:26:
         fd:d7:df:9f:22:27:f8:2b:4c:6d:a0:9e:97:46:38:9d:0c:f5:
         11:b4:84:20:65:53:2c:ae:00:6c:fe:79:de:e5:d7:5f:ec:04:
         29:b7:ed:03:c9:ad:cc:27:da:f8:84:9a:ce:85:eb:c5:8b:c5:
         d3:fe:63:7b:a7:5c:0a:6f:df:35:da:6f:71:41:2b:83:67:d8:
         39:b7:ca:28:be:00:45:4f:81:27:06:d6:ed:88:da:49:96:77:
         c8:ec:43:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZBTzxu6FaaBdkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
YjA3NjNhNTQtZGNhNy00ZTA3LTg5NDctMzJhMWZjMzk1Mjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie5AyV69hGf+yjHK3GmL/Iiln0TmMmT6iFRi
gTdaTA/rmErqNvZhSqNDodgnmsCwOvtX7+Sc32g3uCcOvU1Nrvc0GxsRQKwkKknY
LQqDO4vCmjC1CrMQF/d3l/VSnYmb8NWHFhjXpIh6kEPsfC2Bxi6npsYdeZy823A7
uzuqd6kyf0GP0jsjfoYzJMrm7V83dCdDKP+yq4mATGn0rGWOT1ZSIqP33ABSL47E
ERTLoFyYm7mPfC2Q4aDvRRNWaOpGGe2ss4UKpm0SDZFTD9btJpByt+3u0yGrESTw
AUjNpjzKpD6m8jCUCuGluHVBzGjCqM+nL0wghrU6D7WOrOUizwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH6DDOp80ekP+iM+6x7Wu682JKupMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDNhNDAwNjctZGEzMC0z
OWMzLWI0YTktZDFkNzIyMTY0OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXfzFkgKburDPwg2Ey8FLlBpeau94IAEDToKh4pgjVNVuE+LPh6ilSY
a2huqbZXKTYE6l0R4iBmSI6RlznTfvr3z7ofLR5/qT+bsXK7d8g8oh78NiX5MxwJ
zJNxsFMTxE3GUngSUGoeL3ndajd2QilbFQmncVzTr/YiA9rDuwb+OlwJstRTXkPC
n6Otly67uvUn+OomYgNsYpIancErzvY7Jv3X358iJ/grTG2gnpdGOJ0M9RG0hCBl
UyyuAGz+ed7l11/sBCm37QPJrcwn2viEms6F68WLxdP+Y3unXApv3zXab3FBK4Nn
2Dm3yii+AEVPgScG1u2I2kmWd8jsQzA=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:06:28 2026 by rpki-client