Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f437b64-3b4e-3685-84cf-90c254ccd35c.roa
File:                     0f437b64-3b4e-3685-84cf-90c254ccd35c.roa (raw, json)
Hash identifier:          pgVhA4GZbnkiSKxD8IG7+tcYTTrBZnOteZx82LoBXDs=
Subject key identifier:   46:94:A9:F6:1B:6E:C0:96:8A:07:DE:A3:6F:A7:CC:AD:9E:5A:98:96
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D9FEC66DD3612BE27F980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f437b64-3b4e-3685-84cf-90c254ccd35c.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.128.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:9f:ec:66:dd:36:12:be:27:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=e46ca819-fb3d-4435-95cd-f21bfe0d2316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:94:f3:f3:dd:d4:bd:8c:88:f1:8b:91:ef:
                    02:49:89:69:df:f4:27:a4:71:f4:1f:29:ad:ac:ab:
                    c1:d0:dc:8f:b4:48:3f:04:98:b0:ee:74:24:78:e3:
                    8b:5c:d5:c2:b5:08:2a:39:cf:65:4d:f8:c3:7a:ef:
                    3c:51:63:b2:04:43:05:b3:1e:20:aa:f9:df:ca:10:
                    0f:d5:70:2a:e0:20:a0:6d:b1:df:fa:12:83:d0:6b:
                    83:70:29:21:8d:bf:64:b1:36:e2:b2:62:20:de:9a:
                    01:38:6d:ec:3b:eb:8e:8d:b4:0a:4a:36:bf:4b:43:
                    ab:62:c2:76:69:42:d3:25:b4:bf:77:1d:2c:b7:ce:
                    a5:77:86:75:64:78:25:9a:f2:d2:20:27:48:0a:ba:
                    9d:1e:22:11:4f:a7:32:b7:c3:32:e4:a2:11:6d:ce:
                    b2:3c:9d:20:e9:7c:42:6c:3f:14:2b:c4:14:5c:30:
                    78:e9:d9:88:48:03:f9:90:30:f6:9f:a9:53:28:e8:
                    47:cc:9e:2e:cd:11:8b:02:bd:a1:bf:e7:58:cb:0f:
                    32:c6:26:61:ba:cd:f5:dc:04:35:6e:65:ff:e7:25:
                    c8:a2:a3:9f:e5:59:96:ab:fc:37:08:39:8e:9c:bc:
                    17:1a:5d:22:61:97:79:ef:8b:04:9f:07:77:89:89:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:94:A9:F6:1B:6E:C0:96:8A:07:DE:A3:6F:A7:CC:AD:9E:5A:98:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f437b64-3b4e-3685-84cf-90c254ccd35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.128.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ab:1d:55:aa:28:a4:ef:be:df:cc:16:93:dc:56:4f:d9:51:
         c0:d0:ce:78:dd:06:5f:44:a5:b9:a4:d0:ca:1f:cc:4d:5a:29:
         8b:fe:cf:35:28:d0:b3:68:82:fb:8f:30:64:48:1d:96:33:1a:
         c0:0d:e9:52:36:26:28:61:47:83:09:80:b5:81:26:7c:2d:95:
         4e:02:ca:ec:ef:f7:65:30:1e:30:3e:a2:30:f2:65:fa:3b:24:
         60:ca:03:96:53:bd:d1:79:4b:2c:b6:85:02:6d:d7:4d:ba:dc:
         75:ee:2e:4b:56:12:37:1a:bb:87:60:cd:68:d9:2a:25:bb:d8:
         62:ac:10:bb:96:19:27:45:8b:b2:e2:01:f2:79:15:44:df:90:
         80:4b:e0:85:19:c8:e5:23:9c:87:37:65:a5:bb:d6:db:12:88:
         57:d3:0b:95:aa:90:0e:c1:40:65:06:7a:27:2d:b3:e4:a5:ab:
         14:2c:0b:36:38:61:a5:5a:b8:55:43:34:6e:c2:b7:7e:8e:70:
         8e:2d:8e:d0:37:c9:f9:2e:4e:1a:52:4a:48:f7:8f:28:59:73:
         7e:a1:45:7c:76:bb:92:e7:45:65:5f:61:cc:ac:8e:fb:c4:2d:
         58:b7:91:a1:25:3d:64:2a:fb:bc:06:a3:3e:08:90:64:d5:0a:
         26:c0:2d:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ/sZt02Er4n+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ZTQ2Y2E4MTktZmIzZC00NDM1LTk1Y2QtZjIxYmZlMGQyMzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnleU8/Pd1L2MiPGLke8CSYlp3/QnpHH0Hymt
rKvB0NyPtEg/BJiw7nQkeOOLXNXCtQgqOc9lTfjDeu88UWOyBEMFsx4gqvnfyhAP
1XAq4CCgbbHf+hKD0GuDcCkhjb9ksTbismIg3poBOG3sO+uOjbQKSja/S0OrYsJ2
aULTJbS/dx0st86ld4Z1ZHglmvLSICdICrqdHiIRT6cyt8My5KIRbc6yPJ0g6XxC
bD8UK8QUXDB46dmISAP5kDD2n6lTKOhHzJ4uzRGLAr2hv+dYyw8yxiZhus313AQ1
bmX/5yXIoqOf5VmWq/w3CDmOnLwXGl0iYZd574sEnwd3iYlrMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEaUqfYbbsCWigfeo2+nzK2eWpiWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY0MzdiNjQtM2I0ZS0z
Njg1LTg0Y2YtOTBjMjU0Y2NkMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIerHVWqKKTvvt/MFpPcVk/ZUcDQznjdBl9Epbmk0MofzE1aKYv+zzUo
0LNogvuPMGRIHZYzGsAN6VI2JihhR4MJgLWBJnwtlU4Cyuzv92UwHjA+ojDyZfo7
JGDKA5ZTvdF5Syy2hQJt10263HXuLktWEjcau4dgzWjZKiW72GKsELuWGSdFi7Li
AfJ5FUTfkIBL4IUZyOUjnIc3ZaW71tsSiFfTC5WqkA7BQGUGeicts+SlqxQsCzY4
YaVauFVDNG7Ct36OcI4tjtA3yfkuThpSSkj3jyhZc36hRXx2u5LnRWVfYcysjvvE
LVi3kaElPWQq+7wGoz4IkGTVCibALY8=
-----END CERTIFICATE-----
Generated at Sun Sep 27 09:05:24 2026 by rpki-client