Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e008f08-2535-31c3-9efc-4c5fa333820a.roa
File:                     0e008f08-2535-31c3-9efc-4c5fa333820a.roa (raw, json)
Hash identifier:          GWbCqbabeT1kJW5RBbxratWcGCgvua2/UwbMZG8iVpk=
Subject key identifier:   4D:EF:8D:BA:B3:99:21:3D:23:36:EF:1C:53:A5:72:99:FF:8C:76:B9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E7204D9C40555CE993B254C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e008f08-2535-31c3-9efc-4c5fa333820a.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     396982
IP address blocks:        34.50.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d9:c4:05:55:ce:99:3b:25:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=525ed9df-d15f-4a3e-93b4-7578083e65bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:75:10:90:8d:65:5d:0d:a5:1a:9a:3f:ca:
                    2f:4f:be:a1:10:df:6e:41:e9:0e:73:37:c4:a1:e0:
                    ab:69:32:9d:90:93:00:53:cc:98:31:0e:82:03:f7:
                    aa:04:36:f0:0f:00:ce:8c:4a:3d:bd:17:b4:70:0f:
                    cb:fe:aa:e7:ac:21:b9:b6:a5:bd:3f:62:f8:ec:ab:
                    bd:7e:37:2d:0d:77:33:11:b2:63:b5:f1:74:d4:3b:
                    d6:7c:92:9e:40:91:3a:39:62:7f:7c:11:d9:8e:f7:
                    31:3b:ee:17:31:7b:68:33:9c:31:e3:2b:14:6b:86:
                    b5:74:88:6e:b8:86:e8:cb:f7:5a:09:6d:3c:c8:1d:
                    75:e5:14:3b:de:21:28:bf:93:c9:6f:55:c4:4e:f6:
                    01:61:8b:59:f5:d0:e1:c6:ee:7f:86:19:8e:87:42:
                    6f:2d:65:13:a8:fe:10:21:dd:7b:d6:db:bf:1a:be:
                    b8:76:45:97:cd:07:1c:2c:c2:56:34:e0:43:85:2a:
                    e7:89:b6:2b:1a:94:07:3e:77:67:6e:17:42:52:ee:
                    9f:27:08:ce:85:19:9e:b9:5d:7b:6b:10:f5:86:05:
                    dd:d0:39:b7:7c:0e:6a:8f:2c:73:c0:e2:ba:77:9b:
                    bd:3c:ec:10:9b:04:c1:8c:1d:0c:3d:d4:60:da:0d:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EF:8D:BA:B3:99:21:3D:23:36:EF:1C:53:A5:72:99:FF:8C:76:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e008f08-2535-31c3-9efc-4c5fa333820a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.50.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2a:e9:b1:e9:c5:08:71:99:f1:74:ca:c0:ee:2a:cd:02:80:
         d8:7d:e7:94:3e:86:18:3f:49:af:f8:da:16:8a:0a:a7:42:57:
         65:39:a5:3f:c5:c3:6e:b9:f3:71:6e:d4:7c:40:14:c1:f8:b7:
         c7:ee:57:1b:09:d2:f1:98:b4:31:28:ed:1d:33:90:0e:ba:f3:
         49:e0:f8:90:db:92:1b:47:b9:ba:71:48:38:b1:e9:7f:57:e0:
         32:44:84:a1:30:ac:b7:54:2c:f0:07:6d:cb:87:35:c6:64:8a:
         43:0e:67:ee:ec:35:f3:c4:9a:f4:a0:51:59:63:ce:1e:56:2c:
         99:24:e8:87:50:8d:21:bd:40:41:12:ae:7f:90:70:32:79:cd:
         87:65:40:34:74:2a:60:3b:4e:31:e9:60:d9:63:3e:28:3e:3f:
         94:92:c1:77:e6:fa:e3:af:2d:f5:58:6d:6b:3f:e6:56:a2:ae:
         0b:9a:7d:33:4a:b4:c5:bb:7d:65:a9:79:48:20:50:43:e1:96:
         63:6d:e4:ea:04:de:d1:8a:3b:99:8f:ce:b1:36:b0:76:f0:69:
         18:34:c2:6a:bd:2c:fd:95:6b:76:29:43:b1:87:ee:3d:80:91:
         dc:4b:fd:0e:96:ec:b1:fd:be:7a:e0:66:65:5f:11:41:86:1e:
         6e:0a:eb:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNnEBVXOmTslTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
NTI1ZWQ5ZGYtZDE1Zi00YTNlLTkzYjQtNzU3ODA4M2U2NWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMZ1EJCNZV0NpRqaP8ovT76hEN9uQekOczfE
oeCraTKdkJMAU8yYMQ6CA/eqBDbwDwDOjEo9vRe0cA/L/qrnrCG5tqW9P2L47Ku9
fjctDXczEbJjtfF01DvWfJKeQJE6OWJ/fBHZjvcxO+4XMXtoM5wx4ysUa4a1dIhu
uIboy/daCW08yB115RQ73iEov5PJb1XETvYBYYtZ9dDhxu5/hhmOh0JvLWUTqP4Q
Id171tu/Gr64dkWXzQccLMJWNOBDhSrnibYrGpQHPndnbhdCUu6fJwjOhRmeuV17
axD1hgXd0Dm3fA5qjyxzwOK6d5u9POwQmwTBjB0MPdRg2g2hkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3vjbqzmSE9IzbvHFOlcpn/jHa5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGUwMDhmMDgtMjUzNS0z
MWMzLTllZmMtNGM1ZmEzMzM4MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIjKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcq6bHpxQhxmfF0ysDuKs0CgNh955Q+hhg/Sa/42haKCqdCV2U5pT/F
w26583Fu1HxAFMH4t8fuVxsJ0vGYtDEo7R0zkA6680ng+JDbkhtHubpxSDix6X9X
4DJEhKEwrLdULPAHbcuHNcZkikMOZ+7sNfPEmvSgUVljzh5WLJkk6IdQjSG9QEES
rn+QcDJ5zYdlQDR0KmA7TjHpYNljPig+P5SSwXfm+uOvLfVYbWs/5lairguafTNK
tMW7fWWpeUggUEPhlmNt5OoE3tGKO5mPzrE2sHbwaRg0wmq9LP2Va3YpQ7GH7j2A
kdxL/Q6W7LH9vnrgZmVfEUGGHm4K6ww=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:46 2026 by rpki-client