Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3242ab37-b607-38a0-9f7f-30233dd92285.roa
File:                     3242ab37-b607-38a0-9f7f-30233dd92285.roa (raw, json)
Hash identifier:          Dfo/HaxbI5uEx24b4VH4SIY3fHyesfaZREa5g0caQIg=
Subject key identifier:   A5:F7:99:A2:DB:F6:A0:F2:37:04:AB:A4:DB:B8:35:F4:5F:B7:15:56
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF5EAC219716773B0BA97540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3242ab37-b607-38a0-9f7f-30233dd92285.roa
Signing time:             Tue 12 May 2026 14:44:39 +0000
ROA not before:           Tue 12 May 2026 14:44:39 +0000
ROA not after:            Mon 10 Aug 2026 14:44:39 +0000
asID:                     43515
IP address blocks:        34.190.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:5e:ac:21:97:16:77:3b:0b:a9:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:44:39 2026 GMT
            Not After : Aug 10 14:44:39 2026 GMT
        Subject: CN=1a5f0712-dc5d-4161-aea8-b83f5242c201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:12:74:b3:60:e2:1b:34:ea:42:73:1a:db:e2:
                    f9:03:94:a9:b9:12:f1:38:ec:bb:a1:aa:fa:4e:51:
                    4e:17:20:9c:4f:5f:95:6b:ac:e9:33:60:4e:9f:2c:
                    1c:53:55:24:7e:44:c0:82:3d:2a:12:62:d5:eb:5e:
                    66:6e:6c:5e:2e:1e:60:ab:ce:de:e5:13:19:98:8b:
                    1e:aa:86:aa:86:18:c9:20:07:0f:76:af:11:c6:70:
                    1a:d5:e1:7e:ff:02:19:fe:2b:cb:db:51:c7:3d:13:
                    2e:67:1e:80:4b:b2:04:19:df:d0:e7:78:1b:4a:cc:
                    83:b3:9e:f6:31:f6:26:97:b1:4a:17:91:3c:ec:b5:
                    da:08:6b:4d:82:2a:0f:1a:07:28:79:bf:7f:d2:35:
                    fb:1d:99:c8:cd:38:79:ce:c3:5d:d3:30:df:0e:7b:
                    f1:b3:03:86:12:bc:d4:3c:fd:6a:90:25:37:6e:aa:
                    bf:95:5d:b7:23:ac:71:9b:ae:63:c2:e8:01:55:08:
                    c5:2b:9a:a6:c2:c6:99:cc:5d:be:d4:7a:4f:1d:94:
                    46:a1:e9:a7:f9:7f:f0:dd:04:7c:6b:7c:57:c2:95:
                    97:c2:f4:62:b5:fa:cc:15:1e:63:55:01:0e:9a:fa:
                    fe:e2:8a:ea:f8:58:e1:b2:ce:68:5e:9c:1d:7e:40:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F7:99:A2:DB:F6:A0:F2:37:04:AB:A4:DB:B8:35:F4:5F:B7:15:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3242ab37-b607-38a0-9f7f-30233dd92285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:50:c0:20:52:39:85:ac:39:98:4d:34:40:2d:54:0d:a4:73:
         c4:32:77:85:bf:67:5e:91:83:cc:14:a9:e8:26:1b:12:0b:e1:
         c6:12:cf:d9:df:99:1f:36:1d:fc:ea:29:3d:1e:e3:ba:7f:f9:
         ba:58:e8:c9:d9:5e:85:20:34:e8:21:13:e2:24:e3:c3:8c:f7:
         0f:72:25:d5:d2:eb:e9:6d:bb:bd:10:59:87:93:8a:e5:70:66:
         af:f7:51:f7:74:1e:21:0e:c0:01:e5:0f:6a:82:cf:3c:ac:37:
         64:5e:56:f4:47:98:ac:ab:42:7b:52:5b:04:eb:c7:39:54:a9:
         3b:11:c2:86:ab:59:4f:db:68:5c:24:d4:84:52:de:36:7c:e7:
         d5:b9:15:d4:3b:5a:60:7e:96:0b:0d:d6:1a:53:60:84:cf:a4:
         90:08:47:b3:70:2f:ae:06:04:17:4a:a3:65:4d:05:cf:cf:f2:
         37:dd:d5:01:2b:9f:dd:7c:59:7f:83:10:cf:f3:23:ed:99:30:
         63:6b:01:67:9a:fb:d5:90:b5:ee:17:aa:dc:3e:3f:b5:78:43:
         9c:03:17:96:6c:93:82:b7:db:ac:40:ce:ff:9d:a7:9a:b9:4e:
         73:f9:26:56:72:ef:19:73:dd:ff:73:5f:98:13:a4:ab:57:d3:
         d7:36:fd:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PXqwhlxZ3OwupdUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDUxMjE0NDQzOVoXDTI2MDgxMDE0NDQzOVowLzEtMCsGA1UEAxMk
MWE1ZjA3MTItZGM1ZC00MTYxLWFlYTgtYjgzZjUyNDJjMjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRJ0s2DiGzTqQnMa2+L5A5SpuRLxOOy7oar6
TlFOFyCcT1+Va6zpM2BOnywcU1UkfkTAgj0qEmLV615mbmxeLh5gq87e5RMZmIse
qoaqhhjJIAcPdq8RxnAa1eF+/wIZ/ivL21HHPRMuZx6AS7IEGd/Q53gbSsyDs572
MfYml7FKF5E87LXaCGtNgioPGgcoeb9/0jX7HZnIzTh5zsNd0zDfDnvxswOGErzU
PP1qkCU3bqq/lV23I6xxm65jwugBVQjFK5qmwsaZzF2+1HpPHZRGoemn+X/w3QR8
a3xXwpWXwvRitfrMFR5jVQEOmvr+4orq+Fjhss5oXpwdfkDzuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKX3maLb9qDyNwSrpNu4NfRftxVWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzI0MmFiMzctYjYwNy0z
OGEwLTlmN2YtMzAyMzNkZDkyMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1QwCBSOYWsOZhNNEAtVA2kc8Qyd4W/Z16Rg8wUqegmGxIL4cYSz9nf
mR82HfzqKT0e47p/+bpY6MnZXoUgNOghE+Ik48OM9w9yJdXS6+ltu70QWYeTiuVw
Zq/3Ufd0HiEOwAHlD2qCzzysN2ReVvRHmKyrQntSWwTrxzlUqTsRwoarWU/baFwk
1IRS3jZ859W5FdQ7WmB+lgsN1hpTYITPpJAIR7NwL64GBBdKo2VNBc/P8jfd1QEr
n918WX+DEM/zI+2ZMGNrAWea+9WQte4Xqtw+P7V4Q5wDF5Zsk4K326xAzv+dp5q5
TnP5JlZy7xlz3f9zX5gTpKtX09c2/RU=
-----END CERTIFICATE-----
Generated at Wed May 13 17:44:58 2026 by rpki-client