Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3debf8bb-96df-3e76-9853-1b65e300bfea.roa
File:                     3debf8bb-96df-3e76-9853-1b65e300bfea.roa (raw, json)
Hash identifier:          GkBHzFqtkNWstdYcAhZzSHMjvJ0o0WRnVxUZmXV98IE=
Subject key identifier:   2D:F0:3B:8E:79:B8:8C:A8:9F:AF:47:C3:63:CE:54:E4:2C:A4:E2:8D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA787BFA3F7F8D534E5054A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3debf8bb-96df-3e76-9853-1b65e300bfea.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     43515
IP address blocks:        34.190.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:bf:a3:f7:f8:d5:34:e5:05:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=516a0844-977a-4539-b720-d2e44c224536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:ba:1d:75:a9:3f:e0:2b:35:99:e8:20:79:
                    03:2d:d8:13:e4:97:70:a5:f8:87:6e:5c:cd:4b:b4:
                    f7:3c:52:f5:89:04:ea:ab:b1:75:d8:37:7e:2a:31:
                    07:31:a9:f6:2b:c1:55:42:56:ac:1b:b4:31:e8:3f:
                    01:c0:3f:de:16:a0:d9:a6:c7:6e:2a:f0:58:c4:26:
                    b2:bc:c4:74:9b:3a:40:5f:d9:0a:11:b5:10:74:00:
                    46:19:6e:d0:86:ed:43:ae:fe:f3:74:c6:1a:9a:b6:
                    8e:80:f2:d4:fc:30:47:4d:ad:5d:2a:f9:a2:49:fd:
                    8a:3d:00:66:a9:0b:33:f3:98:49:74:ba:2d:68:e6:
                    a2:69:c6:2f:42:26:b0:73:99:29:13:e5:a9:3f:55:
                    20:86:1e:25:3d:6f:fd:08:4e:7e:b9:1f:c4:b5:20:
                    c5:e2:ef:90:60:91:32:e4:9e:5f:f0:f5:02:9a:03:
                    ca:bb:5c:37:63:29:6d:b4:59:0d:86:6e:b2:6c:9d:
                    a8:33:db:d1:59:a2:0f:05:40:24:b7:0e:fa:b8:82:
                    85:9f:d8:a0:bd:2e:e3:22:a9:e7:ce:88:55:66:a8:
                    cd:3e:69:dd:6d:ef:3a:b0:a1:ad:a4:35:bc:a6:c2:
                    81:e7:4b:6c:80:f2:8d:db:b7:2e:f5:30:eb:09:61:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F0:3B:8E:79:B8:8C:A8:9F:AF:47:C3:63:CE:54:E4:2C:A4:E2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3debf8bb-96df-3e76-9853-1b65e300bfea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5d:4b:54:5f:56:97:45:69:80:7a:87:58:b4:db:4c:3e:27:
         dc:31:08:34:ac:3e:d0:96:69:99:49:c3:b8:b5:ed:0e:9e:9a:
         90:4d:ef:ec:d0:02:c1:7e:6f:47:4c:c7:69:0a:75:ea:7c:88:
         57:19:8e:c8:d8:84:53:40:11:e4:87:a6:64:ff:6c:e6:23:bb:
         dd:e3:0a:82:54:3f:4d:c2:63:c5:2a:4d:be:87:3a:e7:93:ac:
         d5:df:6c:ce:c4:40:bf:c5:49:80:46:09:0a:98:95:65:8c:f2:
         c7:00:6b:72:09:04:35:e6:ac:a7:3a:d0:c0:18:1c:42:e8:b2:
         af:b1:de:bd:37:9a:1f:21:c7:59:19:85:2d:90:cf:f4:1a:28:
         8c:c9:07:19:69:4d:0a:25:17:aa:de:38:17:18:0c:b8:01:03:
         c6:e2:3b:2f:38:43:ad:18:12:bc:75:47:d1:92:72:f8:4f:31:
         12:89:9a:c8:be:48:18:95:59:8e:43:8d:df:1f:82:45:5b:ea:
         39:db:04:d8:cc:9b:4a:bb:72:27:7d:ec:54:ee:b5:7c:92:56:
         ee:fc:34:0a:6a:82:93:3a:c8:65:b3:7f:34:18:a2:8b:91:ea:
         2d:98:bb:d5:68:87:f8:58:ae:c4:e9:e3:5d:bc:91:93:1c:96:
         84:55:23:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh7+j9/jVNOUFSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTE2YTA4NDQtOTc3YS00NTM5LWI3MjAtZDJlNDRjMjI0NTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUa6HXWpP+ArNZnoIHkDLdgT5JdwpfiHblzN
S7T3PFL1iQTqq7F12Dd+KjEHMan2K8FVQlasG7Qx6D8BwD/eFqDZpsduKvBYxCay
vMR0mzpAX9kKEbUQdABGGW7Qhu1Drv7zdMYamraOgPLU/DBHTa1dKvmiSf2KPQBm
qQsz85hJdLotaOaiacYvQiawc5kpE+WpP1Ughh4lPW/9CE5+uR/EtSDF4u+QYJEy
5J5f8PUCmgPKu1w3YylttFkNhm6ybJ2oM9vRWaIPBUAktw76uIKFn9igvS7jIqnn
zohVZqjNPmndbe86sKGtpDW8psKB50tsgPKN27cu9TDrCWG64QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3wO455uIyon69Hw2POVOQspOKNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2RlYmY4YmItOTZkZi0z
ZTc2LTk4NTMtMWI2NWUzMDBiZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxdS1RfVpdFaYB6h1i020w+J9wxCDSsPtCWaZlJw7i17Q6empBN7+zQ
AsF+b0dMx2kKdep8iFcZjsjYhFNAEeSHpmT/bOYju93jCoJUP03CY8UqTb6HOueT
rNXfbM7EQL/FSYBGCQqYlWWM8scAa3IJBDXmrKc60MAYHELosq+x3r03mh8hx1kZ
hS2Qz/QaKIzJBxlpTQolF6reOBcYDLgBA8biOy84Q60YErx1R9GScvhPMRKJmsi+
SBiVWY5Djd8fgkVb6jnbBNjMm0q7cid97FTutXySVu78NApqgpM6yGWzfzQYoouR
6i2Yu9Voh/hYrsTp4128kZMcloRVIys=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:55:49 2026 by rpki-client