Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4700e29a-ec5c-3668-b27f-3441ac64c658.roa
File:                     4700e29a-ec5c-3668-b27f-3441ac64c658.roa (raw, json)
Hash identifier:          CEZllvGCIRo0C477PyqAD7PN+qJBXOoPxdqLq/27bto=
Subject key identifier:   6D:BE:FA:3A:AA:21:03:48:1B:6C:F2:EE:8B:D8:97:12:84:E6:C0:6F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F698D996A79F6C4D9CB8B2F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4700e29a-ec5c-3668-b27f-3441ac64c658.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     15169
IP address blocks:        34.190.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:99:6a:79:f6:c4:d9:cb:8b:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=cee8187e-a6bf-4bee-806c-7f8a69cfaf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:a5:83:00:16:7a:ee:82:66:16:1b:34:35:
                    b6:2c:db:17:93:83:19:03:27:d5:b3:62:90:0a:d7:
                    1c:4e:f1:2e:9c:e8:b1:fe:81:11:d1:86:bc:0d:a6:
                    85:4b:83:07:e8:59:2b:83:d3:de:5e:0e:00:68:51:
                    1a:f4:38:97:12:01:4b:b4:b6:df:8c:9f:a8:93:3d:
                    9e:22:3e:78:9f:cd:b2:81:08:46:71:be:67:c2:7f:
                    ab:77:d8:b4:6e:f6:89:0a:9b:fa:d0:02:6a:92:f6:
                    c7:9f:5e:d9:03:8b:ab:eb:d2:d0:9a:94:e0:b1:33:
                    5b:88:8e:ea:92:40:91:90:92:0b:ac:29:0c:62:63:
                    31:5d:41:cd:25:e6:20:30:5e:cf:36:cb:1e:34:92:
                    78:a9:90:fb:a0:ee:4a:7b:8b:99:40:e1:53:9b:b6:
                    59:e0:8a:79:bd:37:3b:56:bf:be:d8:4f:33:bb:27:
                    96:61:d1:6f:3b:bf:e2:df:1a:37:ea:7c:e9:25:13:
                    3d:49:83:b7:70:90:d5:f7:f2:ff:5a:d4:75:82:d1:
                    2d:d8:17:19:99:8e:20:5e:49:96:79:00:78:bb:6c:
                    bf:31:6c:f7:ab:17:08:5e:53:a7:1d:51:8f:62:15:
                    65:12:ac:54:33:fa:96:58:fd:ba:8f:da:6e:8a:79:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BE:FA:3A:AA:21:03:48:1B:6C:F2:EE:8B:D8:97:12:84:E6:C0:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4700e29a-ec5c-3668-b27f-3441ac64c658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0e:f3:2d:34:7c:0c:b2:67:b2:97:48:cc:88:0a:dd:00:34:
         ea:23:92:4f:76:fd:65:d8:b5:d7:c2:8e:57:dd:16:cc:04:8a:
         79:d2:b2:74:89:7d:2f:52:9b:4b:62:e9:8d:73:32:86:b9:7b:
         0c:50:c4:b5:a8:cc:6d:de:7f:66:60:0f:f9:63:a9:f7:9c:4d:
         66:48:5e:8a:f3:0e:f1:64:b6:b8:d8:d8:7d:6f:ea:44:3f:01:
         19:82:84:56:b9:f1:72:9a:25:83:2e:0a:76:50:c8:e2:aa:99:
         ad:62:6c:bd:6c:8c:14:ff:08:bc:c5:f7:69:38:0c:2f:49:5e:
         c9:68:9c:7e:e0:6d:09:2c:00:a8:bc:50:51:1e:09:55:6f:3b:
         c1:a2:8b:ca:a6:a3:ae:80:6f:4e:4f:50:24:5e:17:40:72:c0:
         f6:22:f1:e1:ea:0f:13:48:fb:6e:81:8c:cd:b4:da:0b:68:2e:
         62:00:fe:dc:66:54:22:e8:9e:9c:d2:82:db:58:02:ac:ce:59:
         9f:b7:bb:da:62:c5:a5:88:10:74:ea:a4:9b:88:6c:77:6b:dc:
         bc:ef:c3:bc:cd:d2:e2:34:a9:5b:ed:da:f7:42:7c:27:8d:63:
         56:5a:63:b4:51:f9:f4:d2:d3:a7:3e:81:3f:12:b4:b9:f6:d5:
         a7:43:98:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjZlqefbE2cuLLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
Y2VlODE4N2UtYTZiZi00YmVlLTgwNmMtN2Y4YTY5Y2ZhZjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU6lgwAWeu6CZhYbNDW2LNsXk4MZAyfVs2KQ
CtccTvEunOix/oER0Ya8DaaFS4MH6Fkrg9PeXg4AaFEa9DiXEgFLtLbfjJ+okz2e
Ij54n82ygQhGcb5nwn+rd9i0bvaJCpv60AJqkvbHn17ZA4ur69LQmpTgsTNbiI7q
kkCRkJILrCkMYmMxXUHNJeYgMF7PNsseNJJ4qZD7oO5Ke4uZQOFTm7ZZ4Ip5vTc7
Vr++2E8zuyeWYdFvO7/i3xo36nzpJRM9SYO3cJDV9/L/WtR1gtEt2BcZmY4gXkmW
eQB4u2y/MWz3qxcIXlOnHVGPYhVlEqxUM/qWWP26j9puinlCDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2++jqqIQNIG2zy7ovYlxKE5sBvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDcwMGUyOWEtZWM1Yy0z
NjY4LWIyN2YtMzQ0MWFjNjRjNjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr6YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwO8y00fAyyZ7KXSMyICt0ANOojkk92/WXYtdfCjlfdFswEinnSsnSJ
fS9Sm0ti6Y1zMoa5ewxQxLWozG3ef2ZgD/ljqfecTWZIXorzDvFktrjY2H1v6kQ/
ARmChFa58XKaJYMuCnZQyOKqma1ibL1sjBT/CLzF92k4DC9JXslonH7gbQksAKi8
UFEeCVVvO8Gii8qmo66Ab05PUCReF0BywPYi8eHqDxNI+26BjM202gtoLmIA/txm
VCLonpzSgttYAqzOWZ+3u9pixaWIEHTqpJuIbHdr3Lzvw7zN0uI0qVvt2vdCfCeN
Y1ZaY7RR+fTS06c+gT8StLn21adDmKw=
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:55:48 2026 by rpki-client