Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5228171c-d5e8-3783-b72a-c823fbca25f1.roa
File:                     5228171c-d5e8-3783-b72a-c823fbca25f1.roa (raw, json)
Hash identifier:          DMUz1BohjzAmKUkdA1dDuMsn8gAqqIB01TDug9fg/pg=
Subject key identifier:   24:8F:F4:A1:4E:2D:3B:37:31:A5:66:AD:42:36:E5:EE:B9:9B:43:73
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E7204D8AF02D024E6CACEEF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5228171c-d5e8-3783-b72a-c823fbca25f1.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     15169
IP address blocks:        34.0.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d8:af:02:d0:24:e6:ca:ce:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=b4b0b56a-8b62-4342-9471-efaac7bb2a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:1f:30:51:c5:73:11:db:f9:ff:36:0d:9e:
                    34:e2:a2:5f:1e:1e:de:32:ed:eb:15:12:ee:c5:09:
                    cc:b3:3c:f7:74:5b:24:bb:7f:7e:3a:0d:82:be:bf:
                    d0:e6:6c:10:4f:ce:ea:0a:04:f9:7a:7c:e6:c5:98:
                    78:47:02:06:53:e6:b7:c6:d6:0a:07:e7:d7:49:ac:
                    c0:3c:ec:42:79:0c:30:86:5a:88:ee:fe:ee:b9:f3:
                    20:07:5b:9f:f2:80:a0:7a:74:d0:4b:01:70:4c:79:
                    6b:23:5c:46:48:8d:fe:28:72:c1:9a:b8:bd:dc:a1:
                    be:c0:aa:94:4b:19:25:35:51:c6:48:6d:31:b1:1f:
                    f6:49:19:20:6e:47:18:02:ee:f5:5f:b1:09:67:4b:
                    0f:55:49:bd:66:9d:76:9c:8b:aa:01:68:14:2a:fc:
                    51:2e:f0:65:db:49:e4:19:e5:15:59:89:60:b5:e4:
                    b5:95:ea:bc:89:76:ce:34:d0:6b:3e:d3:92:d0:2d:
                    73:f1:24:ec:46:ab:c3:c2:af:84:f8:e1:5f:79:4e:
                    79:32:aa:c2:3b:51:83:f3:61:a6:3b:59:6f:a9:19:
                    e8:54:ee:c2:ad:80:d6:aa:5e:04:d6:c7:e6:f2:80:
                    22:75:f6:8a:06:d7:9c:c7:26:96:3a:6f:74:ee:f0:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8F:F4:A1:4E:2D:3B:37:31:A5:66:AD:42:36:E5:EE:B9:9B:43:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5228171c-d5e8-3783-b72a-c823fbca25f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:16:62:1f:e8:5b:44:d1:95:04:39:ef:8f:d3:15:14:14:53:
         38:ac:c2:ee:98:b0:b2:eb:a9:70:2c:9e:fc:d0:d6:17:03:5c:
         96:5b:23:92:8e:b5:65:9f:c6:cb:f8:7a:b4:b5:2e:24:56:b2:
         3a:37:18:8c:7f:75:ac:73:49:53:46:28:73:7c:84:56:6c:b2:
         14:16:b1:48:e1:04:1a:f2:6f:47:82:bd:85:d3:0f:0e:3f:6e:
         c5:b4:7d:2f:68:a5:2a:c5:71:71:ef:49:2c:3f:4a:d8:08:b4:
         01:f2:22:cd:1a:23:54:db:09:0d:d0:74:28:d3:3c:9e:7c:7c:
         d3:c5:c9:43:10:91:e1:07:20:9c:25:7f:19:9f:85:7c:c7:09:
         ec:c2:a0:18:4b:d4:ad:96:cd:d2:9c:8c:97:98:40:64:d8:75:
         e5:60:b1:e1:2a:af:36:e5:af:cb:67:4a:dc:f0:7b:5b:7b:f3:
         91:f2:4b:5a:f4:0e:27:7a:7a:e9:6a:e7:19:cc:21:d2:e2:7c:
         89:44:b7:b9:6b:57:d6:59:07:22:6e:4e:61:9d:62:3d:56:7c:
         9d:cd:a4:0d:00:87:00:20:2d:50:76:3d:52:46:3a:36:6a:eb:
         cf:88:ec:16:6d:e7:8c:18:ee:7e:72:ce:cf:dd:f0:b0:f1:b5:
         05:a1:b2:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNivAtAk5srO7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
YjRiMGI1NmEtOGI2Mi00MzQyLTk0NzEtZWZhYWM3YmIyYTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPcfMFHFcxHb+f82DZ404qJfHh7eMu3rFRLu
xQnMszz3dFsku39+Og2Cvr/Q5mwQT87qCgT5enzmxZh4RwIGU+a3xtYKB+fXSazA
POxCeQwwhlqI7v7uufMgB1uf8oCgenTQSwFwTHlrI1xGSI3+KHLBmri93KG+wKqU
SxklNVHGSG0xsR/2SRkgbkcYAu71X7EJZ0sPVUm9Zp12nIuqAWgUKvxRLvBl20nk
GeUVWYlgteS1leq8iXbONNBrPtOS0C1z8STsRqvDwq+E+OFfeU55MqrCO1GD82Gm
O1lvqRnoVO7CrYDWql4E1sfm8oAidfaKBtecxyaWOm907vBHvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSP9KFOLTs3MaVmrUI25e65m0NzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTIyODE3MWMtZDVlOC0z
NzgzLWI3MmEtYzgyM2ZiY2EyNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQWYh/oW0TRlQQ574/TFRQUUziswu6YsLLrqXAsnvzQ1hcDXJZbI5KO
tWWfxsv4erS1LiRWsjo3GIx/daxzSVNGKHN8hFZsshQWsUjhBBryb0eCvYXTDw4/
bsW0fS9opSrFcXHvSSw/StgItAHyIs0aI1TbCQ3QdCjTPJ58fNPFyUMQkeEHIJwl
fxmfhXzHCezCoBhL1K2WzdKcjJeYQGTYdeVgseEqrzblr8tnStzwe1t785HyS1r0
Did6eulq5xnMIdLifIlEt7lrV9ZZByJuTmGdYj1WfJ3NpA0AhwAgLVB2PVJGOjZq
68+I7BZt54wY7n5yzs/d8LDxtQWhsgA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:34:57 2026 by rpki-client