Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fcc0eae-6fe4-33f9-9d77-a9413fff1e69.roa
File:                     5fcc0eae-6fe4-33f9-9d77-a9413fff1e69.roa (raw, json)
Hash identifier:          ztadvRURTpKCp8lsgnB8tCE9E8vmFDVkHINpXsuN+2E=
Subject key identifier:   A5:A7:74:9D:1D:17:14:85:AE:90:A0:64:F6:4E:AB:24:5C:7F:BE:04
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D27AA8FD2AC2F2569DAA8BA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fcc0eae-6fe4-33f9-9d77-a9413fff1e69.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        34.72.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:8f:d2:ac:2f:25:69:da:a8:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=b1e31e45-1868-469e-ae10-65c20ca9dc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:a9:6c:5f:b7:a1:4f:d8:3a:7c:1b:40:ec:
                    a0:86:8b:a2:66:c5:e8:b7:23:cc:d5:09:5f:84:e3:
                    d7:bc:e2:5f:56:82:00:8b:77:17:dd:c1:6f:71:4f:
                    34:a4:f1:95:cf:b3:ae:eb:ec:fd:80:42:42:55:29:
                    ad:3b:f4:51:bf:63:4c:12:7a:1f:ed:00:ea:66:6b:
                    5d:50:93:31:e2:6a:8b:03:d0:8e:a0:e9:02:56:21:
                    93:79:e2:04:03:32:c4:93:e2:5b:21:04:59:1b:8b:
                    71:14:0a:77:fa:5f:0c:15:39:69:c8:d5:30:31:a8:
                    6a:22:7f:6d:28:cf:8e:ba:51:97:9d:87:f8:02:8f:
                    0c:44:bc:d4:fa:e5:cc:af:14:03:66:4b:df:2e:0b:
                    e1:aa:dc:15:14:53:f9:3f:a4:a6:2e:86:10:0d:90:
                    e0:70:af:eb:c4:6c:93:36:0e:b9:49:e4:19:b0:bb:
                    b7:2b:1f:bc:d2:63:16:73:75:64:12:d7:8a:10:89:
                    8f:61:46:91:64:ba:82:07:e5:24:0b:5d:4a:bd:ff:
                    bd:ba:ce:77:fe:96:96:c1:68:7b:f5:10:f1:04:5b:
                    57:d8:f7:1c:43:96:f8:94:8e:73:51:70:d5:fd:ca:
                    04:ff:84:20:3d:44:cb:3a:0c:e4:b9:02:c4:15:45:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:74:9D:1D:17:14:85:AE:90:A0:64:F6:4E:AB:24:5C:7F:BE:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fcc0eae-6fe4-33f9-9d77-a9413fff1e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.72.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:80:6b:dc:46:70:76:a9:8f:ae:1b:8d:13:33:dd:fc:87:0a:
         be:84:24:f0:8f:fc:85:ee:92:e5:a7:28:d1:7a:88:5d:20:08:
         ff:94:a8:03:4b:0f:c7:89:a0:f0:58:1c:74:57:aa:c3:4a:16:
         6f:75:47:37:4e:57:f9:72:50:24:ed:ba:1e:dd:16:18:1a:74:
         a9:fb:58:03:4e:e1:63:99:da:84:3e:7c:96:16:8b:f2:16:71:
         1c:42:e1:8d:ce:86:66:40:c0:61:f8:46:19:70:cc:db:38:c7:
         a1:a6:79:57:1d:24:c2:fd:9f:a0:81:48:94:cf:bc:5a:69:15:
         8a:6e:bf:ca:fe:fb:4c:f3:9f:1d:ad:cd:4a:56:a3:40:97:54:
         dc:7f:04:a7:02:02:b4:ec:44:1f:ed:54:ad:ba:97:f4:6d:4a:
         95:b3:27:00:f4:88:55:14:12:d7:11:7c:28:8d:45:11:eb:25:
         f5:75:0c:19:12:7c:75:46:b2:65:68:84:01:f9:30:32:f3:0d:
         9b:2a:f0:99:ea:1b:b5:5b:86:e0:8a:ff:72:be:cc:59:38:cf:
         f4:24:6f:e7:62:aa:c2:2a:fb:38:77:19:33:03:16:70:1e:a3:
         7d:5e:ba:41:37:6b:4a:69:2f:23:72:48:96:20:08:6b:71:88:
         83:c2:84:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqo/SrC8ladqougAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
YjFlMzFlNDUtMTg2OC00NjllLWFlMTAtNjVjMjBjYTlkYzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x2pbF+3oU/YOnwbQOyghouiZsXotyPM1Qlf
hOPXvOJfVoIAi3cX3cFvcU80pPGVz7Ou6+z9gEJCVSmtO/RRv2NMEnof7QDqZmtd
UJMx4mqLA9COoOkCViGTeeIEAzLEk+JbIQRZG4txFAp3+l8MFTlpyNUwMahqIn9t
KM+OulGXnYf4Ao8MRLzU+uXMrxQDZkvfLgvhqtwVFFP5P6SmLoYQDZDgcK/rxGyT
Ng65SeQZsLu3Kx+80mMWc3VkEteKEImPYUaRZLqCB+UkC11Kvf+9us53/paWwWh7
9RDxBFtX2PccQ5b4lI5zUXDV/coE/4QgPUTLOgzkuQLEFUVtFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWndJ0dFxSFrpCgZPZOqyRcf74EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZjYzBlYWUtNmZlNC0z
M2Y5LTlkNzctYTk0MTNmZmYxZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkgQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaAa9xGcHapj64bjRMz3fyHCr6EJPCP/IXukuWnKNF6iF0gCP+UqANL
D8eJoPBYHHRXqsNKFm91RzdOV/lyUCTtuh7dFhgadKn7WANO4WOZ2oQ+fJYWi/IW
cRxC4Y3OhmZAwGH4RhlwzNs4x6GmeVcdJML9n6CBSJTPvFppFYpuv8r++0zznx2t
zUpWo0CXVNx/BKcCArTsRB/tVK26l/RtSpWzJwD0iFUUEtcRfCiNRRHrJfV1DBkS
fHVGsmVohAH5MDLzDZsq8JnqG7VbhuCK/3K+zFk4z/Qkb+diqsIq+zh3GTMDFnAe
o31eukE3a0ppLyNySJYgCGtxiIPChPw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:01 2026 by rpki-client