Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d31dce5e-cde3-33f9-a879-728010304da2.roa
File:                     d31dce5e-cde3-33f9-a879-728010304da2.roa (raw, json)
Hash identifier:          bW6RFehFUwC9Ql41Xg+jT1t6oeNeXXhpqyq4rj8m1ic=
Subject key identifier:   AD:D7:35:F8:0E:0C:AA:DB:D7:F7:3C:51:9F:E9:34:F2:16:49:08:6B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3DC9390117F5B25B6BC000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d31dce5e-cde3-33f9-a879-728010304da2.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.81.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:c9:39:01:17:f5:b2:5b:6b:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=85dbd77b-7aed-45cd-8d86-300833159670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:a7:75:d6:ea:73:cf:6f:f7:ed:80:ab:1f:
                    62:76:d3:e9:f3:f9:18:75:02:1f:f9:1f:dd:d1:f4:
                    74:ee:c4:3b:00:55:e6:20:0d:45:bc:2d:6f:cb:41:
                    52:04:f7:eb:93:1c:0f:18:bf:27:e0:a2:89:96:84:
                    36:49:de:8b:cf:ca:ef:f2:47:fa:50:69:ef:5b:41:
                    db:95:da:ba:f5:50:4b:ea:3c:f2:ad:53:d4:54:d3:
                    c0:7a:41:42:2c:5a:00:a8:63:40:67:52:20:1b:d8:
                    0e:13:e1:43:9d:64:04:af:fc:2d:95:9b:e8:56:4e:
                    5f:3e:2b:1f:33:bd:b8:56:2c:69:1a:48:36:bd:05:
                    27:ef:f1:ba:3a:fe:37:46:90:dc:f7:8d:9b:cf:7f:
                    c7:1e:5b:ee:4a:61:bf:a7:7e:8d:46:3a:e3:04:ac:
                    46:05:6d:8f:f0:fd:91:2e:d4:75:94:37:c8:2f:af:
                    6f:fb:8d:56:a7:58:de:d7:71:15:a2:52:63:00:ba:
                    05:40:7f:25:8f:c5:68:20:43:3f:dd:a5:17:04:11:
                    2b:4e:d8:60:77:57:73:7a:ca:e6:a9:0d:12:b9:e3:
                    1a:8f:d2:1d:43:0f:b2:b1:3c:ed:ae:59:4d:31:7e:
                    8f:55:23:69:4e:b9:ad:74:40:d9:11:99:84:40:1e:
                    ff:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D7:35:F8:0E:0C:AA:DB:D7:F7:3C:51:9F:E9:34:F2:16:49:08:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d31dce5e-cde3-33f9-a879-728010304da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.81.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:da:11:cf:eb:ab:fe:03:d2:f6:ab:1b:e5:e2:45:4c:a9:74:
         55:c9:be:39:99:d5:bb:f9:0f:d7:2b:a1:fa:ce:b0:51:4b:34:
         8c:4d:3e:01:98:8c:e6:68:4d:cd:2f:e6:f3:f9:83:4b:13:35:
         4e:f2:7e:95:14:8b:2e:d5:0d:76:bf:91:c2:80:24:ef:8c:79:
         ac:c7:8a:6d:a0:ad:8d:56:48:b9:ab:a3:0d:65:b0:2f:4a:ac:
         ed:02:1b:8d:4a:68:e6:46:50:94:9f:96:fd:c2:cb:45:7b:c5:
         70:dd:ad:5e:29:fd:0a:dd:a1:2b:df:c7:58:17:e7:5f:8d:9a:
         fd:96:5f:f8:ad:b9:54:e5:42:1b:f3:54:1d:a8:ed:d2:c1:6d:
         76:7c:f4:5a:1e:f4:c9:fd:60:b6:71:ec:d6:7a:b0:74:eb:f7:
         df:39:51:e7:9f:45:0b:4c:0e:0e:a2:17:29:a9:5c:25:ac:e4:
         b3:3d:6a:cf:d6:73:bd:14:af:07:d3:6d:f2:23:58:7f:f8:f3:
         26:2d:37:ee:51:ad:f2:80:5e:5d:6e:1e:7b:fe:97:10:b5:10:
         1b:23:b1:18:08:1c:0d:0f:1a:29:c2:44:b8:f0:9b:47:39:18:
         63:1d:e1:b1:72:9b:69:f1:4a:3a:36:71:13:1e:95:3d:ea:0f:
         cf:1d:58:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPck5ARf1sltrwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ODVkYmQ3N2ItN2FlZC00NWNkLThkODYtMzAwODMzMTU5NjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7enddbqc89v9+2Aqx9idtPp8/kYdQIf+R/d
0fR07sQ7AFXmIA1FvC1vy0FSBPfrkxwPGL8n4KKJloQ2Sd6Lz8rv8kf6UGnvW0Hb
ldq69VBL6jzyrVPUVNPAekFCLFoAqGNAZ1IgG9gOE+FDnWQEr/wtlZvoVk5fPisf
M724VixpGkg2vQUn7/G6Ov43RpDc942bz3/HHlvuSmG/p36NRjrjBKxGBW2P8P2R
LtR1lDfIL69v+41Wp1je13EVolJjALoFQH8lj8VoIEM/3aUXBBErTthgd1dzesrm
qQ0SueMaj9IdQw+ysTztrllNMX6PVSNpTrmtdEDZEZmEQB7//QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK3XNfgODKrb1/c8UZ/pNPIWSQhrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDMxZGNlNWUtY2RlMy0z
M2Y5LWE4NzktNzI4MDEwMzA0ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADraEc/rq/4D0varG+XiRUypdFXJvjmZ1bv5D9crofrOsFFLNIxNPgGY
jOZoTc0v5vP5g0sTNU7yfpUUiy7VDXa/kcKAJO+MeazHim2grY1WSLmrow1lsC9K
rO0CG41KaOZGUJSflv3Cy0V7xXDdrV4p/QrdoSvfx1gX51+Nmv2WX/ituVTlQhvz
VB2o7dLBbXZ89Foe9Mn9YLZx7NZ6sHTr9985UeefRQtMDg6iFympXCWs5LM9as/W
c70UrwfTbfIjWH/48yYtN+5RrfKAXl1uHnv+lxC1EBsjsRgIHA0PGinCRLjwm0c5
GGMd4bFym2nxSjo2cRMelT3qD88dWPg=
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:21:24 2026 by rpki-client