Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bae615c-0f35-3506-b887-17bba921d745.roa
File:                     2bae615c-0f35-3506-b887-17bba921d745.roa (raw, json)
Hash identifier:          GkTY/jprA65U7mmkjgiznDnycKufFG+YazpGAS19kbQ=
Subject key identifier:   4C:9F:10:55:F3:06:06:5C:14:DF:D5:61:70:4C:CB:E2:F0:0D:AA:BE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4972FE534A9D7ADEE1B7B7A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bae615c-0f35-3506-b887-17bba921d745.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19527
IP address blocks:        34.3.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:fe:53:4a:9d:7a:de:e1:b7:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c02b839a-7976-402e-8e34-637b3f9283f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:4c:33:31:53:8a:e3:30:ef:30:f3:72:ad:
                    20:8a:26:f0:27:3e:12:9a:ad:6b:86:c8:23:e7:0f:
                    a6:b2:89:18:d0:f6:7b:89:b4:8e:d5:b4:f4:56:54:
                    95:56:0c:24:96:4d:87:9a:98:02:f4:3b:f7:2e:ea:
                    32:73:05:26:4f:30:8b:85:82:b5:e6:7f:2b:fd:00:
                    f8:ac:a9:25:19:2b:e7:37:b1:ca:39:3d:37:73:96:
                    08:1f:68:dc:a5:37:1e:3e:91:5c:51:89:7f:73:a1:
                    40:6a:f7:75:e5:2b:0d:d0:d9:71:cc:0e:99:59:bf:
                    33:75:71:b6:c3:f8:f2:0f:86:16:aa:23:f7:a8:50:
                    5c:67:78:9f:ff:59:e7:da:38:40:8c:a1:87:13:d1:
                    64:dd:b9:81:65:fd:81:b9:d1:98:cc:92:19:c1:01:
                    2c:73:36:c1:8b:c1:08:9d:e9:da:b4:30:15:dc:be:
                    9b:4e:33:cb:ea:26:30:b3:40:96:9a:19:93:b4:12:
                    95:25:40:86:04:79:bc:a3:5f:06:ee:7d:73:6b:80:
                    76:29:8e:c8:b8:17:36:35:b9:0b:0f:d7:63:f2:b4:
                    fb:cd:39:22:32:ef:0f:af:f3:f1:0d:f4:f0:16:04:
                    23:8a:6c:19:b8:05:76:10:41:7f:cf:b5:d5:4e:56:
                    f5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9F:10:55:F3:06:06:5C:14:DF:D5:61:70:4C:CB:E2:F0:0D:AA:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bae615c-0f35-3506-b887-17bba921d745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:96:1c:1e:0a:6b:2a:10:06:b8:14:30:6f:67:3f:19:05:c7:
         e7:d9:61:59:fe:3a:c3:2f:5c:22:f8:0c:10:11:65:a3:67:95:
         55:93:04:86:3c:6a:ae:0a:5e:3f:8c:24:28:77:e3:d9:2f:25:
         d5:1b:eb:40:63:9e:ba:eb:b1:8e:ba:69:59:cf:3f:51:0f:d3:
         c4:4b:b9:f6:6e:e3:18:2a:f7:3c:67:7d:ed:e9:8f:a9:88:a9:
         49:a0:30:e3:dd:62:6a:d9:6d:95:2b:c1:36:6e:55:31:be:a8:
         13:39:78:f9:45:54:94:31:66:91:5f:2b:c0:60:c7:8b:22:80:
         0d:b6:d7:2f:4f:fc:87:cb:86:19:2e:95:59:70:50:f7:67:7f:
         c3:91:15:a0:f1:ff:93:8f:03:2e:b9:60:78:c1:6d:5b:9a:c0:
         d1:f7:e2:33:43:d4:2d:31:5b:13:3c:c8:17:94:24:46:0b:e5:
         2d:f1:26:5d:99:eb:ae:0b:16:6d:a2:38:f8:be:8b:70:f7:38:
         c5:79:5f:33:62:a9:ab:d2:83:4f:c8:c0:d1:5c:e7:c6:3e:64:
         69:53:34:8b:81:70:c0:6f:c8:7c:32:34:88:4a:de:db:c2:68:
         5f:1f:45:0b:f1:59:a9:db:76:62:ee:8a:f7:8a:e7:02:ce:2a:
         af:1e:43:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcv5TSp163uG3t6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzAyYjgzOWEtNzk3Ni00MDJlLThlMzQtNjM3YjNmOTI4M2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWVMMzFTiuMw7zDzcq0giibwJz4Smq1rhsgj
5w+msokY0PZ7ibSO1bT0VlSVVgwklk2HmpgC9Dv3LuoycwUmTzCLhYK15n8r/QD4
rKklGSvnN7HKOT03c5YIH2jcpTcePpFcUYl/c6FAavd15SsN0NlxzA6ZWb8zdXG2
w/jyD4YWqiP3qFBcZ3if/1nn2jhAjKGHE9Fk3bmBZf2BudGYzJIZwQEsczbBi8EI
nenatDAV3L6bTjPL6iYws0CWmhmTtBKVJUCGBHm8o18G7n1za4B2KY7IuBc2NbkL
D9dj8rT7zTkiMu8Pr/PxDfTwFgQjimwZuAV2EEF/z7XVTlb18QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyfEFXzBgZcFN/VYXBMy+LwDaq+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmJhZTYxNWMtMGYzNS0z
NTA2LWI4ODctMTdiYmE5MjFkNzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgM4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaWHB4KayoQBrgUMG9nPxkFx+fZYVn+OsMvXCL4DBARZaNnlVWTBIY8
aq4KXj+MJCh349kvJdUb60BjnrrrsY66aVnPP1EP08RLufZu4xgq9zxnfe3pj6mI
qUmgMOPdYmrZbZUrwTZuVTG+qBM5ePlFVJQxZpFfK8Bgx4sigA221y9P/IfLhhku
lVlwUPdnf8ORFaDx/5OPAy65YHjBbVuawNH34jND1C0xWxM8yBeUJEYL5S3xJl2Z
664LFm2iOPi+i3D3OMV5XzNiqavSg0/IwNFc58Y+ZGlTNIuBcMBvyHwyNIhK3tvC
aF8fRQvxWanbdmLuiveK5wLOKq8eQ80=
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:36:44 2026 by rpki-client