Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e53e3b63-da53-3f3d-9925-1b3b45a327fd.roa
File:                     e53e3b63-da53-3f3d-9925-1b3b45a327fd.roa (raw, json)
Hash identifier:          OXBaE8nwmRc0ut7frB/qrtKLkoUsSoT63FCQqtD5u6A=
Subject key identifier:   28:CB:3B:61:B1:DF:10:F8:48:F8:DB:F3:5A:51:1F:16:7C:39:5E:A8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DCF623D5626B4E723AF4CBF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e53e3b63-da53-3f3d-9925-1b3b45a327fd.roa
Signing time:             Tue 12 May 2026 14:51:51 +0000
ROA not before:           Tue 12 May 2026 14:51:51 +0000
ROA not after:            Mon 10 Aug 2026 14:51:51 +0000
asID:                     43515
IP address blocks:        34.0.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:62:3d:56:26:b4:e7:23:af:4c:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 12 14:51:51 2026 GMT
            Not After : Aug 10 14:51:51 2026 GMT
        Subject: CN=2675325e-8919-44b7-9bc2-e9f579e0c150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:78:58:be:93:24:0a:01:b8:c9:0d:db:e8:
                    ea:a0:68:70:2f:14:83:af:a7:7a:ef:f0:a4:b4:a8:
                    e7:4f:95:d6:17:72:5f:00:64:7b:d9:20:a9:97:5d:
                    3f:d5:fe:52:49:85:7e:1f:e6:f0:e3:7d:80:70:60:
                    d5:25:4a:a6:d5:2b:cc:4d:e8:4f:a5:ac:74:20:79:
                    de:94:20:5d:33:10:44:e8:3b:c7:da:8a:3f:d9:a5:
                    d1:d2:9f:f3:39:f1:90:c5:d6:ac:09:36:d1:fe:f7:
                    1c:b7:fb:fb:8b:05:94:f7:10:c2:fe:03:e6:f1:eb:
                    a0:10:92:e1:a4:bb:86:be:63:83:72:bf:86:73:df:
                    63:6c:83:62:24:21:71:a2:77:63:82:e6:6f:75:4c:
                    c1:b8:ba:c0:6a:2f:22:80:56:74:a9:34:83:4b:06:
                    bf:ff:09:b4:8d:6b:01:22:19:1d:a2:62:2e:f0:33:
                    96:c9:0e:93:3b:10:eb:96:f7:fd:21:7a:a2:a0:01:
                    bb:0d:9d:4a:5b:3c:e6:1d:f5:b4:99:aa:87:f1:a5:
                    1d:7a:78:3f:cb:a9:b7:95:43:e1:1a:f4:08:ce:5c:
                    93:b7:be:58:6b:f6:15:be:52:2b:0a:21:b2:de:5c:
                    82:ee:d8:4d:ac:f9:2c:ac:91:16:64:81:1e:01:1e:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:3B:61:B1:DF:10:F8:48:F8:DB:F3:5A:51:1F:16:7C:39:5E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e53e3b63-da53-3f3d-9925-1b3b45a327fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:86:f3:91:c5:77:93:b0:b7:2c:e1:a0:db:97:7e:c2:e1:0f:
         e5:59:80:0d:70:75:a2:7e:9f:7a:17:d3:35:e4:f2:2b:be:5b:
         75:65:67:24:a1:6f:0f:56:a6:2f:56:d1:87:ce:8f:7e:20:a2:
         6b:04:eb:b2:7d:0a:0a:7b:9e:e9:89:5c:33:28:f6:d0:5a:65:
         f5:f0:47:a5:dd:7f:5d:80:ab:35:d0:89:91:ad:34:00:8e:da:
         cb:ee:65:e2:ae:3f:d9:06:fb:84:e8:88:55:a0:aa:15:30:02:
         9f:80:44:14:54:b6:bd:e7:98:c1:69:ab:e0:88:7d:f6:dc:a7:
         e4:27:3a:2b:7f:d8:75:39:2b:67:ff:d7:e5:2f:12:cd:32:7e:
         58:e2:48:7d:62:2f:2f:3c:6b:61:6f:ad:bc:6d:32:19:8f:ac:
         5b:6b:6f:d7:fe:22:19:23:e6:29:61:7f:9d:44:3c:6c:a0:35:
         63:67:3f:bb:18:0b:71:a8:7c:d2:43:02:2e:91:01:39:ec:13:
         e0:6b:6e:99:df:9b:21:e4:b5:d3:e0:6f:70:0d:2a:92:d5:d6:
         8c:b1:29:75:c2:23:d7:98:a0:2e:53:cd:81:ad:e3:ae:58:dd:
         20:b2:ac:31:f7:7c:d2:98:47:cb:10:79:cf:c4:3f:4f:77:4d:
         66:db:6f:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PYj1WJrTnI69MvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDUxMjE0NTE1MVoXDTI2MDgxMDE0NTE1MVowLzEtMCsGA1UEAxMk
MjY3NTMyNWUtODkxOS00NGI3LTliYzItZTlmNTc5ZTBjMTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnF4WL6TJAoBuMkN2+jqoGhwLxSDr6d67/Ck
tKjnT5XWF3JfAGR72SCpl10/1f5SSYV+H+bw432AcGDVJUqm1SvMTehPpax0IHne
lCBdMxBE6DvH2oo/2aXR0p/zOfGQxdasCTbR/vcct/v7iwWU9xDC/gPm8eugEJLh
pLuGvmODcr+Gc99jbINiJCFxondjguZvdUzBuLrAai8igFZ0qTSDSwa//wm0jWsB
IhkdomIu8DOWyQ6TOxDrlvf9IXqioAG7DZ1KWzzmHfW0maqH8aUdeng/y6m3lUPh
GvQIzlyTt75Ya/YVvlIrCiGy3lyC7thNrPksrJEWZIEeAR6AWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjLO2Gx3xD4SPjb81pRHxZ8OV6oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTUzZTNiNjMtZGE1My0z
ZjNkLTk5MjUtMWIzYjQ1YTMyN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2G85HFd5OwtyzhoNuXfsLhD+VZgA1wdaJ+n3oX0zXk8iu+W3VlZySh
bw9Wpi9W0YfOj34gomsE67J9Cgp7numJXDMo9tBaZfXwR6Xdf12AqzXQiZGtNACO
2svuZeKuP9kG+4ToiFWgqhUwAp+ARBRUtr3nmMFpq+CIffbcp+QnOit/2HU5K2f/
1+UvEs0yfljiSH1iLy88a2FvrbxtMhmPrFtrb9f+Ihkj5ilhf51EPGygNWNnP7sY
C3GofNJDAi6RATnsE+BrbpnfmyHktdPgb3ANKpLV1oyxKXXCI9eYoC5TzYGt465Y
3SCyrDH3fNKYR8sQec/EP093TWbbb4M=
-----END CERTIFICATE-----
Generated at Wed May 13 13:04:42 2026 by rpki-client