Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa
File:                     a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa (raw, json)
Hash identifier:          ZurE2J8L3ROHtGye/Nac9S8ra9H31xKHb+FCDKVMOeQ=
Subject key identifier:   E9:BE:EC:2F:26:35:C0:3E:E4:7A:67:93:80:67:C4:01:6B:EC:BD:FD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EAA51CD4758E5C1AA44DD1640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        34.139.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:cd:47:58:e5:c1:aa:44:dd:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=1b196240-7627-476d-bf61-27ad92644227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:b5:8f:07:ee:5c:98:8b:b5:4f:4e:a3:61:
                    1f:a9:da:e6:25:ac:2e:67:a8:73:80:7e:c5:2c:fa:
                    82:ac:91:eb:2b:d6:58:44:7b:59:7e:c8:b6:3f:bd:
                    ec:7f:d4:f7:6c:cc:10:2d:1c:19:d9:7b:d5:02:d9:
                    25:3f:35:df:d9:a3:b0:c9:93:77:59:66:06:1a:09:
                    db:9b:b4:72:b6:05:b0:83:c4:e7:1a:bf:84:06:82:
                    17:13:bf:12:e2:17:52:35:0f:e6:e7:ba:76:bc:74:
                    85:b1:b5:41:1a:61:b7:8b:67:cb:66:1b:35:6f:a8:
                    dd:a9:1c:6f:88:ab:18:da:6f:3e:a7:44:46:d3:99:
                    0a:a2:a2:1e:ca:27:50:ef:8d:1f:bb:7b:c6:a8:94:
                    e3:ad:d4:36:24:59:78:0e:2c:4c:db:e4:0f:44:6f:
                    cb:47:2b:5c:cc:27:30:00:b4:31:46:70:30:01:1f:
                    89:a6:0e:99:44:f8:54:5d:c9:0e:3f:a1:b7:01:d2:
                    34:7f:05:3e:95:0e:ad:4f:20:21:45:55:d2:de:ad:
                    2f:ec:03:35:00:21:2f:7d:15:7f:3c:6f:5c:a3:59:
                    e5:41:da:4e:4c:63:8d:91:14:c4:6b:a4:48:5a:4e:
                    db:4b:15:8c:53:fc:81:41:2b:6d:89:a7:e6:60:8c:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:EC:2F:26:35:C0:3E:E4:7A:67:93:80:67:C4:01:6B:EC:BD:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.139.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:42:c2:81:97:5f:98:7b:40:48:2b:9d:d1:ae:cf:ad:9c:57:
         ab:42:38:2e:61:30:13:bb:8c:bb:70:13:72:a5:e2:b0:af:88:
         53:b5:b3:12:84:1d:14:c4:f8:18:0f:36:97:7c:2c:2a:7f:76:
         96:52:4c:2a:c8:ab:10:a2:79:6d:99:6a:ba:47:e1:bb:06:dc:
         c0:43:77:a9:86:f8:9d:ef:b5:06:1e:ee:6f:cd:09:ab:5f:42:
         57:22:81:fa:dd:9f:21:67:c3:f7:70:92:b8:18:fd:4d:d5:be:
         96:11:63:11:81:25:dd:8a:29:a1:0d:dd:d5:36:88:f8:ec:fa:
         ec:bc:ef:06:0a:64:89:c8:5c:d3:61:70:79:37:a8:bf:c0:f8:
         24:e3:7c:73:9e:ba:9e:4b:58:ae:64:26:75:48:a6:4a:6f:1f:
         fc:c4:32:e2:dd:05:8e:e8:24:1e:2a:95:3a:7c:c2:45:6a:8c:
         68:9c:3c:9e:17:73:f3:9e:c1:bc:1a:5a:b2:c7:cf:9b:d8:c8:
         30:6a:c7:bb:ae:e4:19:7b:f1:d6:f3:e6:08:56:26:9d:54:dd:
         ec:c4:73:8a:d1:f3:b3:ba:95:78:f5:e9:1a:38:49:cb:39:4b:
         49:2e:e5:75:a6:a2:9c:b8:fd:5b:77:61:81:97:74:7e:54:2d:
         c7:99:7a:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUc1HWOXBqkTdFkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
MWIxOTYyNDAtNzYyNy00NzZkLWJmNjEtMjdhZDkyNjQ0MjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+m1jwfuXJiLtU9Oo2EfqdrmJawuZ6hzgH7F
LPqCrJHrK9ZYRHtZfsi2P73sf9T3bMwQLRwZ2XvVAtklPzXf2aOwyZN3WWYGGgnb
m7RytgWwg8TnGr+EBoIXE78S4hdSNQ/m57p2vHSFsbVBGmG3i2fLZhs1b6jdqRxv
iKsY2m8+p0RG05kKoqIeyidQ740fu3vGqJTjrdQ2JFl4DixM2+QPRG/LRytczCcw
ALQxRnAwAR+Jpg6ZRPhUXckOP6G3AdI0fwU+lQ6tTyAhRVXS3q0v7AM1ACEvfRV/
PG9co1nlQdpOTGONkRTEa6RIWk7bSxWMU/yBQSttiafmYIw82QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOm+7C8mNcA+5Hpnk4BnxAFr7L39MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTBhNDQyZTAtY2Y4Zi0z
YmM5LWI5ZGYtZWQ4ZjlhM2JkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIouAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVCwoGXX5h7QEgrndGuz62cV6tCOC5hMBO7jLtwE3Kl4rCviFO1sxKE
HRTE+BgPNpd8LCp/dpZSTCrIqxCieW2ZarpH4bsG3MBDd6mG+J3vtQYe7m/NCatf
QlcigfrdnyFnw/dwkrgY/U3VvpYRYxGBJd2KKaEN3dU2iPjs+uy87wYKZInIXNNh
cHk3qL/A+CTjfHOeup5LWK5kJnVIpkpvH/zEMuLdBY7oJB4qlTp8wkVqjGicPJ4X
c/OewbwaWrLHz5vYyDBqx7uu5Bl78dbz5ghWJp1U3ezEc4rR87O6lXj16Ro4Scs5
S0ku5XWmopy4/Vt3YYGXdH5ULceZerk=
-----END CERTIFICATE-----
Generated at Sat Aug 8 01:49:05 2026 by rpki-client