Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa
File:                     bf6f3051-38bc-3abf-a853-242b9b807f71.roa (raw, json)
Hash identifier:          VicVZTK64ZaCSI/ii0jJjsY4rfAULy4DzWlgVva9/70=
Subject key identifier:   C6:BA:8B:95:99:0D:67:DB:BB:89:B0:11:76:24:1B:3A:4E:E5:15:4B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DDDA023968EB6AF689F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.171.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:dd:a0:23:96:8e:b6:af:68:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=52b1affe-0ac3-41b9-9139-2706019d7275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:80:3a:09:79:e4:1b:62:b2:60:e9:82:62:
                    b6:d3:15:f9:8a:81:db:0a:db:cf:ae:25:f9:4f:61:
                    0c:fa:31:0b:8d:59:29:41:98:f3:c6:27:21:60:1c:
                    b3:f4:74:ba:df:99:00:42:fb:1d:b8:43:b6:88:bd:
                    89:18:20:b9:d0:a9:d6:ce:45:a7:ea:64:61:c0:6a:
                    9a:86:6c:61:97:87:35:3a:1d:1e:ec:b3:77:df:fc:
                    1e:43:8e:28:f3:96:a6:61:34:b4:9a:f8:f4:d8:16:
                    1b:4e:4e:aa:88:f3:c1:f7:14:f1:28:69:a6:e9:0e:
                    66:64:c0:a3:2e:e7:9f:3e:8e:fd:b9:ec:a7:b8:7d:
                    13:70:cc:c0:5d:27:60:17:d3:3d:7c:d5:ea:71:63:
                    0c:e8:9d:fb:6a:21:e5:03:5b:c9:5a:58:c9:47:09:
                    fd:7f:00:7c:cc:00:ad:62:3d:6d:dd:f0:7d:7e:b7:
                    82:a0:7d:c8:f8:27:99:77:6d:ea:98:25:58:dc:33:
                    31:83:44:a5:26:6e:15:14:21:4d:6c:50:16:14:a2:
                    cd:42:72:e4:25:63:5f:97:ae:e7:55:58:12:09:7b:
                    16:ae:c1:f0:20:cd:c7:28:29:6a:04:44:a8:dc:74:
                    80:c4:99:da:99:3f:15:17:c3:ed:ed:a2:a2:01:3f:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BA:8B:95:99:0D:67:DB:BB:89:B0:11:76:24:1B:3A:4E:E5:15:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.171.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7e:50:69:59:75:20:42:d1:6d:0f:92:c8:15:a1:5c:3e:92:
         a9:b4:5c:45:b5:04:d1:b2:ca:27:1c:c4:80:8d:3c:05:40:c2:
         cc:c5:cb:52:f9:30:b3:c2:e9:6b:8c:77:bd:32:28:e9:12:95:
         6a:b7:db:16:e9:9c:53:15:70:12:cc:04:be:26:50:b5:6a:b1:
         27:64:af:a5:3b:a0:11:99:bb:77:6e:a6:2f:a7:22:08:b1:d2:
         6c:24:29:40:cb:85:b8:c6:e1:c9:53:56:99:d2:7d:b2:37:8d:
         31:7e:b8:ae:e3:75:b4:54:0d:6a:eb:60:08:22:c2:c1:d9:04:
         be:67:55:c5:8e:5c:16:cb:89:e4:f0:5a:bf:cf:97:f8:fb:e1:
         27:83:a5:28:34:f1:a5:a0:c6:8f:c9:7d:57:5b:be:b8:70:1e:
         28:3f:8b:77:63:fb:12:15:14:50:8f:07:68:d2:e7:9c:51:e7:
         a7:75:6e:52:05:eb:5a:c8:7d:62:08:66:b8:a5:85:5b:0c:34:
         63:52:bf:04:12:d3:d4:5e:78:d4:f6:b3:27:7b:47:5c:e2:e5:
         01:b3:4d:f1:70:f7:fe:94:d7:26:95:29:9a:de:ab:f6:ff:10:
         a6:b3:e0:1b:03:f4:d8:87:44:21:47:3d:37:48:3b:1a:1e:ff:
         c6:3c:24:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPd2gI5aOtq9on4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
NTJiMWFmZmUtMGFjMy00MWI5LTkxMzktMjcwNjAxOWQ3Mjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOyAOgl55BtismDpgmK20xX5ioHbCtvPriX5
T2EM+jELjVkpQZjzxichYByz9HS635kAQvsduEO2iL2JGCC50KnWzkWn6mRhwGqa
hmxhl4c1Oh0e7LN33/weQ44o85amYTS0mvj02BYbTk6qiPPB9xTxKGmm6Q5mZMCj
LuefPo79ueynuH0TcMzAXSdgF9M9fNXqcWMM6J37aiHlA1vJWljJRwn9fwB8zACt
Yj1t3fB9freCoH3I+CeZd23qmCVY3DMxg0SlJm4VFCFNbFAWFKLNQnLkJWNfl67n
VVgSCXsWrsHwIM3HKClqBESo3HSAxJnamT8VF8Pt7aKiAT8prQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMa6i5WZDWfbu4mwEXYkGzpO5RVLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2ZjMwNTEtMzhiYy0z
YWJmLWE4NTMtMjQyYjliODA3ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIquAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAd+UGlZdSBC0W0PksgVoVw+kqm0XEW1BNGyyiccxICNPAVAwszFy1L5
MLPC6WuMd70yKOkSlWq32xbpnFMVcBLMBL4mULVqsSdkr6U7oBGZu3dupi+nIgix
0mwkKUDLhbjG4clTVpnSfbI3jTF+uK7jdbRUDWrrYAgiwsHZBL5nVcWOXBbLieTw
Wr/Pl/j74SeDpSg08aWgxo/JfVdbvrhwHig/i3dj+xIVFFCPB2jS55xR56d1blIF
61rIfWIIZrilhVsMNGNSvwQS09ReeNT2syd7R1zi5QGzTfFw9/6U1yaVKZreq/b/
EKaz4BsD9NiHRCFHPTdIOxoe/8Y8JFg=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:12:57 2026 by rpki-client