Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e52256-0d1f-31e7-9a94-d402881520c1.roa
File:                     39e52256-0d1f-31e7-9a94-d402881520c1.roa (raw, json)
Hash identifier:          E5ayaZepuOr/kyJBuJZ0WkcH6AM4OA3AaoFiL0FWVSQ=
Subject key identifier:   21:BA:E0:6C:C5:B3:57:5F:AD:47:4F:61:F2:6E:31:DA:BA:A4:51:85
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E059C38669FED5F87D4292000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e52256-0d1f-31e7-9a94-d402881520c1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.119.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:38:66:9f:ed:5f:87:d4:29:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7e48e7dc-0411-4eba-ae72-40b8d07f9e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fe:56:68:d2:13:54:dc:b4:44:f0:eb:ab:1c:
                    fe:70:07:43:59:ba:df:b3:30:cc:4f:05:01:7b:ac:
                    ca:3f:00:53:9d:a5:f1:c2:ab:40:e6:c5:65:3b:1e:
                    ba:55:f8:ac:89:ec:94:ef:82:58:19:94:aa:06:25:
                    56:17:f9:0e:f1:7e:03:cf:2e:53:41:b5:2d:55:50:
                    46:80:e8:82:ab:1c:b8:5e:f3:85:be:00:08:2f:fe:
                    33:f0:48:a4:62:08:2a:91:37:7d:67:7f:fc:47:e1:
                    bc:dd:16:29:87:d5:b4:7d:3a:81:cf:a0:df:d2:2e:
                    6c:32:2c:ae:4d:2c:bc:a6:ac:df:8e:fd:66:34:6a:
                    d9:0d:c0:6d:cb:bf:ea:2e:33:a4:84:5b:66:bf:60:
                    5f:82:2c:8b:47:37:0b:da:c5:57:9a:e2:20:a9:16:
                    9c:f7:03:5f:77:0a:d6:51:f6:0b:08:3d:cc:e8:15:
                    38:fb:57:46:7c:da:4e:40:53:a8:e4:10:df:db:c3:
                    79:83:e2:db:f2:bc:b9:44:a0:3e:cf:98:5e:45:ec:
                    df:7a:8d:30:01:85:57:8a:92:51:26:90:9f:00:d1:
                    d5:92:fd:b4:81:25:90:ee:6a:0f:d5:e1:7f:a8:2b:
                    e1:88:51:1a:47:24:0c:fe:3a:b4:f6:a7:70:f2:d4:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BA:E0:6C:C5:B3:57:5F:AD:47:4F:61:F2:6E:31:DA:BA:A4:51:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e52256-0d1f-31e7-9a94-d402881520c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.119.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6c:bd:34:46:34:df:36:6b:fb:8e:83:81:2b:30:f7:db:8e:
         93:b8:50:22:a8:34:a9:7c:fe:82:5d:46:fe:02:90:55:ac:f3:
         d7:fc:06:d9:44:e1:4d:41:92:4e:75:8a:3d:6e:dd:5d:12:e1:
         4b:ce:01:2d:a0:5c:a6:20:1a:fb:47:66:56:93:83:2e:76:ab:
         9b:1b:68:a0:8d:dc:e3:65:b8:32:cf:e8:c3:46:a8:36:a1:52:
         44:40:96:d7:ec:b1:1d:e2:10:2c:bc:d6:76:d2:5a:f7:a2:00:
         d1:54:d7:05:d1:4e:ad:42:70:4f:6f:69:4e:e8:1d:d3:6f:07:
         84:cc:1d:bb:ea:61:23:b0:54:83:eb:78:40:18:15:99:1a:f2:
         af:8f:1b:23:b7:6c:1f:99:8f:b3:b3:a0:8f:96:5f:f4:c5:3c:
         5e:08:79:6f:81:e8:e1:63:d7:03:fe:4b:32:7a:eb:a3:c7:cc:
         20:73:72:3e:00:8f:3c:3d:e9:e8:60:c2:0d:d6:ee:48:a7:4d:
         8f:6a:b6:eb:76:16:4e:75:88:50:09:73:d5:10:d9:3a:e0:b4:
         78:b0:4b:67:d4:ea:09:91:5d:3a:92:10:98:70:03:6c:aa:de:
         72:4d:96:06:d5:fd:84:0d:46:de:76:52:f0:2b:84:d5:cb:8c:
         b5:f3:7c:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnDhmn+1fh9QpIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
N2U0OGU3ZGMtMDQxMS00ZWJhLWFlNzItNDBiOGQwN2Y5ZTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/5WaNITVNy0RPDrqxz+cAdDWbrfszDMTwUB
e6zKPwBTnaXxwqtA5sVlOx66VfisieyU74JYGZSqBiVWF/kO8X4Dzy5TQbUtVVBG
gOiCqxy4XvOFvgAIL/4z8EikYggqkTd9Z3/8R+G83RYph9W0fTqBz6Df0i5sMiyu
TSy8pqzfjv1mNGrZDcBty7/qLjOkhFtmv2BfgiyLRzcL2sVXmuIgqRac9wNfdwrW
UfYLCD3M6BU4+1dGfNpOQFOo5BDf28N5g+Lb8ry5RKA+z5heRezfeo0wAYVXipJR
JpCfANHVkv20gSWQ7moP1eF/qCvhiFEaRyQM/jq09qdw8tTLwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCG64GzFs1dfrUdPYfJuMdq6pFGFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzllNTIyNTYtMGQxZi0z
MWU3LTlhOTQtZDQwMjg4MTUyMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIncAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZsvTRGNN82a/uOg4ErMPfbjpO4UCKoNKl8/oJdRv4CkFWs89f8BtlE
4U1Bkk51ij1u3V0S4UvOAS2gXKYgGvtHZlaTgy52q5sbaKCN3ONluDLP6MNGqDah
UkRAltfssR3iECy81nbSWveiANFU1wXRTq1CcE9vaU7oHdNvB4TMHbvqYSOwVIPr
eEAYFZka8q+PGyO3bB+Zj7OzoI+WX/TFPF4IeW+B6OFj1wP+SzJ666PHzCBzcj4A
jzw96ehgwg3W7kinTY9qtut2Fk51iFAJc9UQ2TrgtHiwS2fU6gmRXTqSEJhwA2yq
3nJNlgbV/YQNRt52UvArhNXLjLXzfN0=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:59 2026 by rpki-client