Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34221af7-2811-3509-ab93-e087d12ad0c6.roa
File:                     34221af7-2811-3509-ab93-e087d12ad0c6.roa (raw, json)
Hash identifier:          oFXonAO4ACtIMY4LO24y9edSJlFub9+3w/rcYau7ktQ=
Subject key identifier:   EA:38:2E:58:C6:4F:45:5C:FE:41:D2:0E:0E:05:DA:5B:CB:80:CA:E5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06723D5B2CAEFF098CAA3580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34221af7-2811-3509-ab93-e087d12ad0c6.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     855
IP address blocks:        70.31.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:3d:5b:2c:ae:ff:09:8c:aa:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=66d8fccf-af4b-4d72-9bfb-baf28fc2b101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9c:5c:20:02:32:c4:46:ef:dd:25:5d:b2:7a:
                    35:4b:5b:00:fe:21:15:f0:e2:a1:e9:38:29:bd:4c:
                    2e:fc:0c:0b:cb:3b:ad:00:53:e4:29:b4:44:d8:55:
                    31:fb:1e:a7:63:5b:a3:30:b9:dd:c0:f7:ee:6d:40:
                    fa:53:3e:24:c3:15:f1:d9:56:50:e0:e4:be:cb:09:
                    b9:15:c4:d9:db:1d:b5:83:52:32:5b:76:2f:01:ac:
                    1b:4c:ef:94:ab:21:79:1c:c8:c1:8e:52:6f:ae:62:
                    b2:d9:04:4e:81:75:47:59:d6:06:73:ff:bb:37:a4:
                    5e:ed:e5:8d:37:83:16:67:fa:82:f2:9a:1e:8b:5e:
                    76:23:0d:03:78:1b:c0:89:67:c6:7d:5a:f0:93:ff:
                    9f:38:68:ad:57:6e:98:36:3a:0c:4f:e0:73:4d:4b:
                    c2:b2:43:93:97:38:6a:6d:5a:e9:0c:fa:d7:93:91:
                    3e:c1:0e:02:b8:ed:36:a2:65:67:4b:b8:25:ee:ce:
                    96:a1:2b:35:07:8a:fc:f3:74:9c:5b:0f:1a:00:81:
                    5b:0e:68:74:79:08:17:c2:37:8c:f2:d8:16:b4:eb:
                    c1:db:56:58:69:ef:52:65:d0:2f:96:1c:13:aa:2a:
                    e1:c1:7a:b0:d9:4f:ac:0b:38:4f:2b:55:d1:79:6b:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:2E:58:C6:4F:45:5C:FE:41:D2:0E:0E:05:DA:5B:CB:80:CA:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34221af7-2811-3509-ab93-e087d12ad0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.31.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6e:b3:9b:f1:02:d2:be:cd:9b:60:36:44:26:0f:11:28:6f:
         99:a8:2c:cb:f2:a9:7c:56:b5:3a:1b:2d:57:f1:c4:b0:7a:e6:
         1f:c2:1e:d3:36:14:9c:5c:d1:36:9b:2d:e7:91:8e:6b:8f:e2:
         01:87:1c:ad:50:2c:39:01:d3:84:4d:c8:b1:45:51:d4:91:64:
         60:7f:57:ab:78:57:53:37:10:45:3b:19:f4:c8:65:d4:00:70:
         56:c4:b9:2f:29:9c:83:2d:c5:12:62:72:51:56:74:82:3d:2c:
         a6:e2:61:38:b9:bb:68:56:b5:ba:02:e5:ab:56:c6:80:30:f7:
         5c:a8:e9:1c:5e:ed:d5:ce:ce:ab:ef:e6:30:33:2f:06:02:c1:
         84:8c:fb:0d:b1:5c:12:b4:51:73:b6:a2:c5:cb:9b:95:df:e8:
         ba:a6:13:9e:47:e7:d0:80:d1:90:64:5a:4d:4a:5f:9c:b9:2e:
         6a:03:11:45:b1:b0:f1:a2:ce:0b:04:4c:4e:ad:cf:99:2f:e3:
         1a:54:66:17:83:01:a5:dd:52:61:10:b4:7d:7c:8a:88:ea:01:
         cd:72:fe:92:69:31:9f:6f:01:ac:c3:69:d4:da:69:bf:8a:d3:
         f7:ec:87:28:ee:ea:63:7e:44:a8:0d:66:54:1d:10:fe:e1:9b:
         84:53:77:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gcj1bLK7/CYyqNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NjZkOGZjY2YtYWY0Yi00ZDcyLTliZmItYmFmMjhmYzJiMTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJxcIAIyxEbv3SVdsno1S1sA/iEV8OKh6Tgp
vUwu/AwLyzutAFPkKbRE2FUx+x6nY1ujMLndwPfubUD6Uz4kwxXx2VZQ4OS+ywm5
FcTZ2x21g1IyW3YvAawbTO+UqyF5HMjBjlJvrmKy2QROgXVHWdYGc/+7N6Re7eWN
N4MWZ/qC8poei152Iw0DeBvAiWfGfVrwk/+fOGitV26YNjoMT+BzTUvCskOTlzhq
bVrpDPrXk5E+wQ4CuO02omVnS7gl7s6WoSs1B4r883ScWw8aAIFbDmh0eQgXwjeM
8tgWtOvB21ZYae9SZdAvlhwTqirhwXqw2U+sCzhPK1XReWuvGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOo4LljGT0Vc/kHSDg4F2lvLgMrlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzQyMjFhZjctMjgxMS0z
NTA5LWFiOTMtZTA4N2QxMmFkMGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRh8MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRus5vxAtK+zZtgNkQmDxEob5moLMvyqXxWtTobLVfxxLB65h/CHtM2
FJxc0TabLeeRjmuP4gGHHK1QLDkB04RNyLFFUdSRZGB/V6t4V1M3EEU7GfTIZdQA
cFbEuS8pnIMtxRJiclFWdII9LKbiYTi5u2hWtboC5atWxoAw91yo6Rxe7dXOzqvv
5jAzLwYCwYSM+w2xXBK0UXO2osXLm5Xf6LqmE55H59CA0ZBkWk1KX5y5LmoDEUWx
sPGizgsETE6tz5kv4xpUZheDAaXdUmEQtH18iojqAc1y/pJpMZ9vAazDadTaab+K
0/fshyju6mN+RKgNZlQdEP7hm4RTd6U=
-----END CERTIFICATE-----
Generated at Tue Oct 13 10:07:12 2026 by rpki-client