Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa
File:                     b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa (raw, json)
Hash identifier:          Y8J6R45Pe8lKHh8n52/QpKw10gBM10nfGZt56QGxOOQ=
Subject key identifier:   68:7A:69:71:CF:B2:5D:52:52:65:8A:AB:AD:B5:3E:38:8A:97:D2:5B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F46A7EBBD5A34218397FC0200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        34.2.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:eb:bd:5a:34:21:83:97:fc:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=95a2544b-0f94-48e5-a8a0-7c99e32c18b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:9e:6d:9d:e9:e1:3a:a3:cd:5f:81:ae:ce:
                    62:8d:fe:f8:13:ee:4e:1a:ca:4a:e5:b4:5c:6c:01:
                    ba:06:a9:58:26:dc:18:41:94:a1:b6:b5:77:fc:d2:
                    fc:8b:19:e7:1a:cb:09:41:b8:cd:96:15:a9:df:cb:
                    2b:90:29:99:ed:76:da:74:75:ec:dd:83:3d:d0:99:
                    b9:75:35:ae:1c:e1:c1:fb:88:e9:1d:ab:b7:5f:e5:
                    04:3f:8f:72:bd:35:4c:82:20:fb:46:da:9d:ec:4a:
                    2c:ff:91:e0:d8:c0:36:7d:a2:18:ee:e9:86:e9:43:
                    10:85:ac:0f:0f:ba:6d:91:12:d4:94:65:ff:f3:ea:
                    cc:17:f5:69:63:d2:27:04:e6:aa:0a:f6:7b:ba:eb:
                    45:ad:4c:2b:3b:b6:2a:44:f9:d6:e1:97:27:c2:b4:
                    84:e9:99:b0:c3:7e:13:3c:f5:12:e0:bd:ab:fd:2a:
                    b4:84:62:08:6f:ea:06:dd:41:26:1d:df:fd:0b:30:
                    23:cd:0d:1b:2d:86:1d:71:5e:26:47:79:76:37:92:
                    3c:8b:a3:23:c7:80:cd:ee:8e:eb:2a:3e:36:fb:cd:
                    32:38:0e:d6:5f:73:45:47:44:ab:8e:ae:35:f6:29:
                    1c:4d:2b:60:5a:73:49:f9:49:42:58:e2:96:c1:8b:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7A:69:71:CF:B2:5D:52:52:65:8A:AB:AD:B5:3E:38:8A:97:D2:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b0cfe080-ee8d-3876-8b6f-ea82b135190d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:df:1e:5e:2b:ae:69:36:bc:28:6d:4a:ed:25:1d:5a:00:09:
         4c:1e:a0:48:67:96:d2:06:04:87:e7:5d:ad:cc:0a:52:73:33:
         4f:5b:3c:a5:45:3c:68:05:f4:86:e5:7d:d1:40:7f:86:d8:ec:
         05:de:cd:25:0b:70:71:d5:99:97:2d:5a:85:96:43:59:69:7e:
         6f:f4:16:42:af:36:7a:5c:bb:fe:0c:a1:ed:93:4d:87:8b:e1:
         89:0d:b4:0e:c2:ae:2d:4e:96:5e:70:08:0e:5b:2a:08:11:4d:
         c7:ee:00:69:9d:be:0f:61:ee:83:94:e0:9b:1a:81:80:9f:3a:
         5e:6e:37:6e:da:e2:6b:51:cf:6e:47:96:62:18:86:05:61:10:
         b6:bb:f4:ca:5a:c2:be:61:92:b7:a5:3d:60:dd:eb:00:31:5c:
         25:aa:8f:f9:7e:a7:76:3e:2f:b7:ca:31:7f:97:9a:31:db:e0:
         9a:91:c1:34:9d:b9:5d:56:93:40:ee:9e:38:77:71:b9:d4:4c:
         71:0d:62:fc:ff:69:d7:a5:22:d9:c6:74:7e:5a:6f:05:43:ce:
         5d:80:7a:b3:fa:7b:18:8f:92:00:ec:7f:76:e6:42:14:dd:d6:
         42:9e:06:98:17:12:71:92:f5:b2:de:12:77:3c:81:fe:84:e9:
         ea:21:6a:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+u9WjQhg5f8AgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
OTVhMjU0NGItMGY5NC00OGU1LWE4YTAtN2M5OWUzMmMxOGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdOebZ3p4TqjzV+Brs5ijf74E+5OGspK5bRc
bAG6BqlYJtwYQZShtrV3/NL8ixnnGssJQbjNlhWp38srkCmZ7XbadHXs3YM90Jm5
dTWuHOHB+4jpHau3X+UEP49yvTVMgiD7Rtqd7Eos/5Hg2MA2faIY7umG6UMQhawP
D7ptkRLUlGX/8+rMF/VpY9InBOaqCvZ7uutFrUwrO7YqRPnW4ZcnwrSE6Zmww34T
PPUS4L2r/Sq0hGIIb+oG3UEmHd/9CzAjzQ0bLYYdcV4mR3l2N5I8i6Mjx4DN7o7r
Kj42+80yOA7WX3NFR0Srjq419ikcTStgWnNJ+UlCWOKWwYuy5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGh6aXHPsl1SUmWKq621PjiKl9JbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjBjZmUwODAtZWU4ZC0z
ODc2LThiNmYtZWE4MmIxMzUxOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAffHl4rrmk2vChtSu0lHVoACUweoEhnltIGBIfnXa3MClJzM09bPKVF
PGgF9IblfdFAf4bY7AXezSULcHHVmZctWoWWQ1lpfm/0FkKvNnpcu/4Moe2TTYeL
4YkNtA7Cri1Oll5wCA5bKggRTcfuAGmdvg9h7oOU4JsagYCfOl5uN27a4mtRz25H
lmIYhgVhELa79Mpawr5hkrelPWDd6wAxXCWqj/l+p3Y+L7fKMX+XmjHb4JqRwTSd
uV1Wk0Dunjh3cbnUTHENYvz/adelItnGdH5abwVDzl2AerP6exiPkgDsf3bmQhTd
1kKeBpgXEnGS9bLeEnc8gf6E6eohaoE=
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:28:23 2026 by rpki-client