Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14664c6a-9821-387b-95b8-1bc804032df3.roa
File:                     14664c6a-9821-387b-95b8-1bc804032df3.roa (raw, json)
Hash identifier:          KWOzbD2o9ujjuO3t8n+mxqfFS/v8E5DOl7zh5KL46/E=
Subject key identifier:   A1:4E:EA:EC:3C:ED:BE:C9:74:1B:A7:D4:5A:C2:97:D3:87:C0:78:D1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D00B29B4C19F030BA3BB19D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14664c6a-9821-387b-95b8-1bc804032df3.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     36040
IP address blocks:        34.153.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:9b:4c:19:f0:30:ba:3b:b1:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=d8cbbacf-dd04-4ca2-a95c-759d1ca1b750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5d:bd:80:4d:44:b3:19:03:28:7e:30:3d:ed:
                    e2:c6:7d:37:b7:f3:13:86:cd:a2:82:4c:ad:95:e2:
                    14:63:bc:09:e3:c4:b6:61:75:1f:8e:76:59:89:e5:
                    91:a5:15:6f:5b:c2:de:fd:70:7f:04:b8:61:76:85:
                    d7:f3:10:e7:3e:05:92:c9:de:a5:aa:72:5f:ed:c5:
                    2b:98:0c:1d:80:f8:46:c6:83:42:8c:3c:69:5f:22:
                    1b:db:6c:df:7a:64:da:9b:dc:96:5b:78:35:d2:a2:
                    1c:fa:e9:f0:e3:bc:74:5a:86:58:7e:0a:7f:b4:f2:
                    c5:1f:f4:58:83:aa:90:8c:b2:98:4b:f0:a8:02:4e:
                    f7:8e:38:32:40:67:94:a3:81:e5:b8:a4:76:8a:7d:
                    5b:d3:03:37:ce:b4:4c:7c:cf:f5:ae:e1:d0:71:61:
                    a3:86:8e:ef:4c:a8:8c:07:20:55:37:6a:35:9f:70:
                    58:e1:53:be:da:0d:c5:25:a3:11:85:8f:f9:2c:57:
                    9d:9b:65:f1:c5:a0:6e:67:43:59:5c:9f:8a:c1:e0:
                    a2:08:6d:4f:9e:c3:af:aa:52:3a:8d:69:1e:79:86:
                    35:66:87:9c:43:97:88:d6:06:a3:9e:a0:9d:78:71:
                    c2:41:c5:58:21:60:88:ac:0a:17:19:c2:7b:ca:10:
                    e3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:EA:EC:3C:ED:BE:C9:74:1B:A7:D4:5A:C2:97:D3:87:C0:78:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14664c6a-9821-387b-95b8-1bc804032df3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.153.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c6:fe:87:47:ce:ac:ea:00:f2:05:3c:fe:97:2d:6e:c8:98:
         0a:42:4f:07:f9:7c:40:cf:dd:c6:f2:a6:9a:de:51:f1:15:34:
         bb:c2:8b:16:fd:53:35:09:fb:7c:3e:77:aa:5d:a2:eb:77:45:
         eb:43:8d:0f:a9:ae:6d:7a:40:75:c0:0f:00:19:56:f9:56:43:
         63:9d:5f:ae:4d:34:b5:41:84:08:61:3f:00:09:f1:66:04:8b:
         2a:f9:af:70:5c:62:d8:c2:c6:54:90:14:03:e6:5e:33:1e:8e:
         ee:23:4c:39:5d:d7:fc:ee:3d:4e:ed:ea:85:46:dc:af:5d:87:
         1b:de:e4:4e:59:63:d3:c5:8b:5c:64:02:16:40:70:93:e6:49:
         01:81:f0:e3:b3:ab:86:77:44:74:ae:57:12:0e:e4:97:d8:30:
         7c:6a:28:1a:9c:4b:5a:00:20:e0:48:d9:b1:10:68:29:78:4c:
         37:65:4c:f8:2d:54:1b:48:be:93:fb:a7:f6:db:d8:6c:17:26:
         98:fe:08:fc:25:ea:fc:c2:f4:85:3e:a2:70:7e:7d:5a:4d:4d:
         c5:52:a6:09:56:ab:2d:8f:85:59:7b:5d:8e:32:ed:09:ab:a3:
         38:6c:93:ad:c5:29:62:eb:a4:17:80:f2:d7:7a:b4:b2:59:3f:
         8a:89:99:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsptMGfAwujuxnUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
ZDhjYmJhY2YtZGQwNC00Y2EyLWE5NWMtNzU5ZDFjYTFiNzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+F29gE1EsxkDKH4wPe3ixn03t/MThs2igkyt
leIUY7wJ48S2YXUfjnZZieWRpRVvW8Le/XB/BLhhdoXX8xDnPgWSyd6lqnJf7cUr
mAwdgPhGxoNCjDxpXyIb22zfemTam9yWW3g10qIc+unw47x0WoZYfgp/tPLFH/RY
g6qQjLKYS/CoAk73jjgyQGeUo4HluKR2in1b0wM3zrRMfM/1ruHQcWGjho7vTKiM
ByBVN2o1n3BY4VO+2g3FJaMRhY/5LFedm2XxxaBuZ0NZXJ+KweCiCG1PnsOvqlI6
jWkeeYY1ZoecQ5eI1gajnqCdeHHCQcVYIWCIrAoXGcJ7yhDjcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFO6uw87b7JdBun1FrCl9OHwHjRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTQ2NjRjNmEtOTgyMS0z
ODdiLTk1YjgtMWJjODA0MDMyZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIpkEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLG/odHzqzqAPIFPP6XLW7ImApCTwf5fEDP3cbyppreUfEVNLvCixb9
UzUJ+3w+d6pdout3RetDjQ+prm16QHXADwAZVvlWQ2OdX65NNLVBhAhhPwAJ8WYE
iyr5r3BcYtjCxlSQFAPmXjMeju4jTDld1/zuPU7t6oVG3K9dhxve5E5ZY9PFi1xk
AhZAcJPmSQGB8OOzq4Z3RHSuVxIO5JfYMHxqKBqcS1oAIOBI2bEQaCl4TDdlTPgt
VBtIvpP7p/bb2GwXJpj+CPwl6vzC9IU+onB+fVpNTcVSpglWqy2PhVl7XY4y7Qmr
ozhsk63FKWLrpBeA8td6tLJZP4qJmfo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:59 2026 by rpki-client