Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c2b9c67-a2b1-381f-8842-7b1046bd81ed.roa
File:                     2c2b9c67-a2b1-381f-8842-7b1046bd81ed.roa (raw, json)
Hash identifier:          RxmtQmTgOkQF77i3xO2MbFxVOcO/crOwkC917GU3rAE=
Subject key identifier:   16:6B:17:83:A1:03:57:5D:56:73:0D:27:74:6D:57:50:6C:7F:94:99
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4C3D96DEEC7168B61CF4C800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c2b9c67-a2b1-381f-8842-7b1046bd81ed.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        34.126.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:96:de:ec:71:68:b6:1c:f4:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=677e6389-52ca-4aa2-b560-2786de49e36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:04:bb:32:77:fa:a3:ed:9c:58:94:97:ce:
                    7d:3e:09:2f:8c:3e:fd:49:87:7b:3e:30:01:a2:e3:
                    66:5b:4a:27:6e:b6:c8:f1:ab:4d:a7:3d:12:70:a1:
                    98:72:f0:c9:ef:9c:71:f4:ed:dd:b5:d8:8b:24:7b:
                    bd:b6:90:64:58:15:d0:fc:b1:15:70:da:10:7f:04:
                    ed:fd:c3:cb:cc:bc:2e:39:45:21:21:cf:fb:e7:9c:
                    e8:9b:64:bc:25:5b:f2:7c:b6:15:cf:32:d9:e8:20:
                    31:b7:90:96:d0:2c:0d:21:73:96:f0:40:a2:d4:b9:
                    05:aa:b5:04:21:b5:15:27:5a:70:91:de:45:ca:58:
                    59:aa:73:30:1d:16:ba:58:44:b7:60:38:27:97:c5:
                    96:b4:9a:41:74:d4:3e:3c:5f:6a:f4:5a:00:15:42:
                    54:f3:87:7f:93:7c:81:7c:ec:0d:e4:55:bb:99:74:
                    f6:ec:ce:00:bc:49:77:ab:83:e9:4e:e8:a2:b6:ab:
                    3c:d8:bb:fc:ab:86:07:be:12:8e:97:a4:e6:fe:0a:
                    25:d8:fc:29:5d:1b:2e:86:32:d6:93:d6:5b:2e:32:
                    f9:7d:ec:40:38:70:b7:9b:0e:56:ba:74:f6:b8:d3:
                    56:c8:63:1f:66:00:da:a4:8c:73:3d:c5:7f:50:b0:
                    9e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6B:17:83:A1:03:57:5D:56:73:0D:27:74:6D:57:50:6C:7F:94:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c2b9c67-a2b1-381f-8842-7b1046bd81ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.126.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8c:8e:79:50:3d:f9:67:b4:1e:c1:31:7d:98:b8:cc:62:3d:
         0c:9b:cd:59:cb:71:ca:16:24:8f:ad:1d:97:50:0c:97:b8:7a:
         82:31:5c:b1:94:dc:19:df:b3:37:da:d5:ec:c0:de:d0:0a:9e:
         27:07:26:38:ef:97:d6:9d:6e:73:e6:a9:28:b7:bc:be:53:fd:
         05:79:f3:72:61:55:92:8a:d3:fe:66:6d:40:74:07:bc:0e:ea:
         7a:95:62:47:6f:6d:b7:28:74:97:7a:15:ff:a2:f6:3c:e8:13:
         2b:f9:89:c5:d1:72:30:f4:1e:2e:f6:8a:aa:d4:6a:04:0d:6a:
         d5:26:2b:61:ba:f9:b4:7b:70:f0:9a:ae:b7:10:67:11:6b:62:
         a9:51:0f:2e:3f:e6:47:60:a3:88:63:60:2b:bb:16:26:41:62:
         a5:ba:bc:c4:13:c5:a4:a8:6c:7b:2f:b2:89:2b:7d:5f:1b:6a:
         8b:05:14:f3:f7:cb:9a:9d:ae:e8:fb:68:85:e9:20:63:63:3c:
         19:f9:26:7b:73:46:77:07:2f:91:fb:13:ad:91:54:fb:77:29:
         e5:bc:a6:3d:d5:fd:a0:92:28:d9:53:89:94:6e:87:eb:f0:00:
         c7:d9:d8:aa:aa:e0:e9:7c:68:bc:99:59:51:54:71:fa:a9:d7:
         65:ea:c2:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZbe7HFothz0yAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
Njc3ZTYzODktNTJjYS00YWEyLWI1NjAtMjc4NmRlNDllMzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7QEuzJ3+qPtnFiUl859PgkvjD79SYd7PjAB
ouNmW0onbrbI8atNpz0ScKGYcvDJ75xx9O3dtdiLJHu9tpBkWBXQ/LEVcNoQfwTt
/cPLzLwuOUUhIc/755zom2S8JVvyfLYVzzLZ6CAxt5CW0CwNIXOW8ECi1LkFqrUE
IbUVJ1pwkd5FylhZqnMwHRa6WES3YDgnl8WWtJpBdNQ+PF9q9FoAFUJU84d/k3yB
fOwN5FW7mXT27M4AvEl3q4PpTuiitqs82Lv8q4YHvhKOl6Tm/gol2PwpXRsuhjLW
k9ZbLjL5fexAOHC3mw5WunT2uNNWyGMfZgDapIxzPcV/ULCeywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBZrF4OhA1ddVnMNJ3RtV1Bsf5SZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmMyYjljNjctYTJiMS0z
ODFmLTg4NDItN2IxMDQ2YmQ4MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn7AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKMjnlQPflntB7BMX2YuMxiPQybzVnLccoWJI+tHZdQDJe4eoIxXLGU
3Bnfszfa1ezA3tAKnicHJjjvl9adbnPmqSi3vL5T/QV583JhVZKK0/5mbUB0B7wO
6nqVYkdvbbcodJd6Ff+i9jzoEyv5icXRcjD0Hi72iqrUagQNatUmK2G6+bR7cPCa
rrcQZxFrYqlRDy4/5kdgo4hjYCu7FiZBYqW6vMQTxaSobHsvsokrfV8baosFFPP3
y5qdruj7aIXpIGNjPBn5JntzRncHL5H7E62RVPt3KeW8pj3V/aCSKNlTiZRuh+vw
AMfZ2Kqq4Ol8aLyZWVFUcfqp12Xqwi8=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:11:18 2026 by rpki-client