Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dc8ec44-a77a-3098-950c-944c75295df4.roa
File:                     5dc8ec44-a77a-3098-950c-944c75295df4.roa (raw, json)
Hash identifier:          8SZRcEf0X2ztdJMvJ+Y1OhPDFxvq2R38yF3O1jXtOsc=
Subject key identifier:   6E:8A:17:FF:EA:00:E5:D3:FD:C8:4D:9D:FF:B2:8E:CC:00:11:FB:64
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF65ADBA4F04DB969739E900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dc8ec44-a77a-3098-950c-944c75295df4.roa
Signing time:             Tue 12 May 2026 14:58:46 +0000
ROA not before:           Tue 12 May 2026 14:58:46 +0000
ROA not after:            Mon 10 Aug 2026 14:58:46 +0000
asID:                     43515
IP address blocks:        34.1.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:65:ad:ba:4f:04:db:96:97:39:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:58:46 2026 GMT
            Not After : Aug 10 14:58:46 2026 GMT
        Subject: CN=89b1eab4-f78c-4ab7-8ab4-e0af3280ffba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:17:9a:f5:9c:23:ec:5f:2c:6b:e2:7b:91:
                    52:e8:bd:b5:56:f9:2d:9a:e6:8d:d0:89:87:d6:e3:
                    8c:ae:54:fe:bd:6a:8f:9e:e6:e5:59:f2:bb:ac:57:
                    37:3e:06:24:10:dd:35:cf:fc:fd:3c:0a:5b:57:a1:
                    21:f3:47:e8:50:9f:6e:de:6a:d9:ee:78:8a:de:15:
                    67:f7:18:42:e5:6f:9d:b0:73:fb:98:ae:1c:2e:8c:
                    ae:38:21:de:97:64:88:21:6b:9f:9a:52:47:95:6b:
                    5d:c6:b9:d6:4c:67:5f:73:78:06:6a:08:b1:55:ae:
                    e5:2a:09:51:ca:61:fb:7f:fc:59:f6:4a:80:39:8f:
                    9e:05:10:d8:dc:a8:f5:0a:4e:d3:31:93:84:1a:3f:
                    04:fd:07:00:e4:42:32:a0:0d:18:0f:0d:b2:a9:a9:
                    c0:ed:d6:13:7c:23:b2:b1:ed:b1:20:59:14:07:f8:
                    93:c5:e9:4d:9b:57:4a:25:69:11:f8:ad:19:a2:98:
                    e5:fc:92:93:d8:dd:cc:af:ff:85:f5:65:44:c2:a8:
                    ab:14:5f:7a:ba:c5:38:fc:32:d3:a5:dc:1d:76:ce:
                    05:0b:d3:a1:99:f8:be:4d:6c:c0:a9:fb:b8:8f:fb:
                    9e:da:66:24:4f:d2:61:96:f9:2a:0a:13:79:81:ed:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8A:17:FF:EA:00:E5:D3:FD:C8:4D:9D:FF:B2:8E:CC:00:11:FB:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dc8ec44-a77a-3098-950c-944c75295df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:04:95:4d:0a:ff:85:04:e7:dc:89:31:b0:4e:27:6d:03:1b:
         24:9b:b5:1a:f7:19:e9:dd:f0:c6:12:33:27:9d:c1:e2:2e:58:
         3a:2d:4b:f9:93:a1:23:a7:3b:85:0a:4b:cb:7c:c8:3e:e9:24:
         00:3c:15:f9:b9:54:0c:3d:5d:8e:c5:be:d0:5c:3c:65:c6:2e:
         a3:3a:8d:43:a7:34:6b:b5:94:18:8d:bc:70:15:a5:34:19:7e:
         df:31:ff:dd:8b:d6:02:da:4e:2f:6e:e9:94:99:66:fb:16:96:
         99:ac:b9:29:6f:55:d3:3c:7d:84:fa:d3:31:09:6d:9e:a0:83:
         a5:2e:da:3a:f6:37:8d:c2:c7:e5:a5:88:0e:2b:03:da:a1:94:
         29:a8:ea:a5:a4:4e:91:86:e3:19:ac:13:1c:53:f4:be:48:89:
         4a:03:43:5d:d6:2a:ba:ab:7e:4e:13:cd:d7:39:42:59:0e:1b:
         6a:99:bc:70:79:09:75:cd:66:ce:dc:68:bf:ca:6c:ea:62:04:
         4a:ec:e7:da:4f:d3:25:e7:00:2a:05:27:75:fa:fb:6a:2a:31:
         58:99:df:0a:06:a3:38:0a:9b:a6:4a:71:77:1c:71:d6:83:d0:
         af:7f:21:ee:ed:a3:f8:37:d0:b7:09:84:29:04:ea:21:a9:ac:
         20:96:02:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PZa26TwTblpc56QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDUxMjE0NTg0NloXDTI2MDgxMDE0NTg0NlowLzEtMCsGA1UEAxMk
ODliMWVhYjQtZjc4Yy00YWI3LThhYjQtZTBhZjMyODBmZmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu0XmvWcI+xfLGvie5FS6L21VvktmuaN0ImH
1uOMrlT+vWqPnublWfK7rFc3PgYkEN01z/z9PApbV6Eh80foUJ9u3mrZ7niK3hVn
9xhC5W+dsHP7mK4cLoyuOCHel2SIIWufmlJHlWtdxrnWTGdfc3gGagixVa7lKglR
ymH7f/xZ9kqAOY+eBRDY3Kj1Ck7TMZOEGj8E/QcA5EIyoA0YDw2yqanA7dYTfCOy
se2xIFkUB/iTxelNm1dKJWkR+K0Zopjl/JKT2N3Mr/+F9WVEwqirFF96usU4/DLT
pdwdds4FC9Ohmfi+TWzAqfu4j/ue2mYkT9JhlvkqChN5ge01vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6KF//qAOXT/chNnf+yjswAEftkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRjOGVjNDQtYTc3YS0z
MDk4LTk1MGMtOTQ0Yzc1Mjk1ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwElU0K/4UE59yJMbBOJ20DGySbtRr3Gend8MYSMyedweIuWDotS/mT
oSOnO4UKS8t8yD7pJAA8Ffm5VAw9XY7FvtBcPGXGLqM6jUOnNGu1lBiNvHAVpTQZ
ft8x/92L1gLaTi9u6ZSZZvsWlpmsuSlvVdM8fYT60zEJbZ6gg6Uu2jr2N43Cx+Wl
iA4rA9qhlCmo6qWkTpGG4xmsExxT9L5IiUoDQ13WKrqrfk4Tzdc5QlkOG2qZvHB5
CXXNZs7caL/KbOpiBErs59pP0yXnACoFJ3X6+2oqMViZ3woGozgKm6ZKcXcccdaD
0K9/Ie7to/g30LcJhCkE6iGprCCWAuQ=
-----END CERTIFICATE-----
Generated at Wed May 13 14:03:48 2026 by rpki-client