Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5cad34ef-420f-3351-bf14-0226b4ec6293.roa
File:                     5cad34ef-420f-3351-bf14-0226b4ec6293.roa (raw, json)
Hash identifier:          d9GWtxStdNPS6sutRE9iY/VgGwwVvpyrpSNzOTADS+k=
Subject key identifier:   70:B2:BE:80:DB:13:20:AD:DA:7C:30:48:6A:73:CD:F2:44:F2:E5:32
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DA958B96E08CF9E16C200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5cad34ef-420f-3351-bf14-0226b4ec6293.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.87.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:a9:58:b9:6e:08:cf:9e:16:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=4168fdd9-1121-4dba-b836-8f0647a2ebcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:ff:e3:ee:26:d7:b0:9a:7d:6a:b6:f7:dc:
                    4b:16:3c:f0:92:91:2d:27:06:97:1e:75:0e:15:2f:
                    bc:5f:18:bc:c0:63:7e:a2:ff:61:3c:35:fc:67:01:
                    e9:08:19:d6:16:25:69:57:83:4b:e0:84:f6:36:9e:
                    c4:20:15:58:51:39:13:fd:60:19:c3:79:e5:e1:c3:
                    ab:f2:c9:bd:c7:97:13:29:18:ac:ce:89:ea:1a:67:
                    b7:14:e5:90:e9:00:c7:3e:d7:70:48:46:7f:50:d3:
                    81:4f:74:3b:19:67:b9:7d:bb:38:fe:fc:21:ec:8e:
                    3e:bf:c3:07:d1:36:ee:85:ef:0d:01:d3:6d:20:24:
                    26:d6:1c:6c:4c:14:2c:36:16:21:3d:f7:88:64:cc:
                    1c:7d:b5:2d:fe:b8:24:9b:41:98:38:5f:10:b6:30:
                    f7:99:34:f1:cf:32:40:92:27:13:33:d1:35:8c:98:
                    cf:54:cb:d1:62:d2:17:c5:dc:1e:fb:e9:fe:f3:b5:
                    53:98:8f:39:4e:9a:3c:47:d2:48:f2:e3:f2:02:2a:
                    d2:b6:5d:b4:6a:24:60:d3:3d:b0:98:b0:26:da:ed:
                    07:7d:2f:c2:cf:c2:9b:b1:2a:01:c7:1d:8c:78:55:
                    65:f3:32:87:8e:e2:37:2b:36:b9:86:55:05:2c:63:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B2:BE:80:DB:13:20:AD:DA:7C:30:48:6A:73:CD:F2:44:F2:E5:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5cad34ef-420f-3351-bf14-0226b4ec6293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.87.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d0:d5:ad:b2:ef:11:2e:51:28:16:60:ca:a6:db:e0:27:57:
         db:02:f5:bb:50:ef:c5:68:df:e7:b4:ba:11:d2:57:74:57:88:
         90:77:89:19:e2:d4:58:41:78:c1:40:db:53:73:4f:fa:06:02:
         05:e6:3d:b0:bc:25:cd:98:8f:11:c9:47:78:d4:d6:de:f3:f3:
         07:b0:c1:2a:cc:03:53:ec:33:62:31:bc:62:bc:a8:e5:1a:dd:
         c8:b3:78:43:65:f8:e6:78:c2:ac:08:48:8b:d1:2c:40:3d:c1:
         86:01:e5:b0:e0:69:9d:e0:35:6f:e1:a9:b4:c9:80:c7:0c:84:
         86:1e:42:d1:23:21:45:7f:66:72:9f:15:3b:d2:c2:9d:79:a5:
         b8:4c:ef:b2:7c:6b:7d:fa:0a:da:73:fd:8d:f5:97:fc:02:79:
         18:b9:62:2f:bc:d8:41:f7:d6:a8:3d:57:34:f3:15:8a:11:5c:
         d1:58:16:71:21:02:82:57:ec:4a:98:87:f1:a8:4e:ea:02:78:
         3d:3c:57:34:1a:df:67:9c:e3:01:a5:39:d2:61:e6:c4:34:e9:
         89:c8:ad:7b:5d:43:57:35:4a:2b:6c:20:1d:47:30:ec:46:1d:
         68:1c:e1:75:96:c3:5e:90:1d:55:d3:3f:3b:cd:bf:c0:e1:ea:
         3e:08:04:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPalYuW4Iz54WwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
NDE2OGZkZDktMTEyMS00ZGJhLWI4MzYtOGYwNjQ3YTJlYmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspD/4+4m17CafWq299xLFjzwkpEtJwaXHnUO
FS+8Xxi8wGN+ov9hPDX8ZwHpCBnWFiVpV4NL4IT2Np7EIBVYUTkT/WAZw3nl4cOr
8sm9x5cTKRiszonqGme3FOWQ6QDHPtdwSEZ/UNOBT3Q7GWe5fbs4/vwh7I4+v8MH
0Tbuhe8NAdNtICQm1hxsTBQsNhYhPfeIZMwcfbUt/rgkm0GYOF8QtjD3mTTxzzJA
kicTM9E1jJjPVMvRYtIXxdwe++n+87VTmI85Tpo8R9JI8uPyAirStl20aiRg0z2w
mLAm2u0HfS/Cz8KbsSoBxx2MeFVl8zKHjuI3Kza5hlUFLGNq8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCyvoDbEyCt2nwwSGpzzfJE8uUyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWNhZDM0ZWYtNDIwZi0z
MzUxLWJmMTQtMDIyNmI0ZWM2MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXQ1a2y7xEuUSgWYMqm2+AnV9sC9btQ78Vo3+e0uhHSV3RXiJB3iRni
1FhBeMFA21NzT/oGAgXmPbC8Jc2YjxHJR3jU1t7z8wewwSrMA1PsM2IxvGK8qOUa
3cizeENl+OZ4wqwISIvRLEA9wYYB5bDgaZ3gNW/hqbTJgMcMhIYeQtEjIUV/ZnKf
FTvSwp15pbhM77J8a336Ctpz/Y31l/wCeRi5Yi+82EH31qg9VzTzFYoRXNFYFnEh
AoJX7EqYh/GoTuoCeD08VzQa32ec4wGlOdJh5sQ06YnIrXtdQ1c1SitsIB1HMOxG
HWgc4XWWw16QHVXTPzvNv8Dh6j4IBMU=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:29:13 2026 by rpki-client