Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4391aea7-2587-3b16-a2ec-ccb2b5ee0320.roa
File:                     4391aea7-2587-3b16-a2ec-ccb2b5ee0320.roa (raw, json)
Hash identifier:          hfUziUUaigx0wtx53KoaHlXluhkWzi6PaH2m9j32gxM=
Subject key identifier:   A4:9C:D8:7E:CF:A1:27:AA:D9:7B:94:D2:66:B7:26:EE:B9:27:04:D9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E0005F51A3E165B9942B89000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4391aea7-2587-3b16-a2ec-ccb2b5ee0320.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        104.198.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f5:1a:3e:16:5b:99:42:b8:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=4186a919-974b-4193-8d8b-db96fce43907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:cb:bb:d9:9d:bd:a1:54:b0:a9:e8:f9:b7:
                    b5:05:28:9a:88:c9:8a:e5:6c:64:c4:cf:19:47:c6:
                    4d:ce:69:1d:3c:d1:26:45:43:20:ad:6a:41:df:eb:
                    35:60:c4:8b:b9:00:bb:61:9e:fc:f3:9e:10:53:48:
                    1b:49:da:ce:aa:5d:a3:7d:39:60:dd:62:90:3a:58:
                    73:c3:c0:fd:1f:1f:58:3b:0a:68:a2:dc:4b:d4:13:
                    02:32:de:a6:ff:d5:8c:de:d5:19:82:19:9c:4a:70:
                    61:be:ef:a4:36:b5:15:ef:2f:9d:63:be:d6:74:83:
                    45:23:d3:73:9d:4a:b6:45:ba:08:2b:ca:ff:8b:3a:
                    5b:a3:f5:81:d3:9a:54:5a:5a:38:cc:11:8d:27:e0:
                    58:73:15:14:90:a3:04:d9:69:f8:b4:8a:24:27:87:
                    1d:a1:46:eb:7a:dd:18:05:32:33:b6:a7:69:82:cb:
                    56:c5:84:26:1a:e2:f7:84:41:b5:2d:57:ab:88:b2:
                    85:75:39:5a:50:04:f5:2f:ac:bc:a7:a7:e0:07:6e:
                    89:21:8d:4c:a4:eb:61:91:a7:8a:19:75:ff:6d:10:
                    af:c7:61:23:e9:5f:b3:ac:fe:75:26:66:99:25:4d:
                    2f:3c:dc:52:bc:26:bc:47:0b:36:b6:26:e1:10:21:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9C:D8:7E:CF:A1:27:AA:D9:7B:94:D2:66:B7:26:EE:B9:27:04:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4391aea7-2587-3b16-a2ec-ccb2b5ee0320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:11:ac:18:ca:dc:21:59:7a:61:60:7e:54:d1:52:eb:cd:
         e3:af:4c:20:4e:64:39:2e:96:0d:25:f2:28:ca:d2:8b:6d:f6:
         11:3f:f5:66:11:c8:c0:b1:bf:cf:60:25:35:7f:69:f2:2b:8f:
         77:56:a3:aa:d9:12:24:0f:14:b0:da:b2:6a:31:18:8d:2f:6c:
         0c:21:01:08:da:66:dd:37:de:f8:6e:28:7f:c0:9f:4c:d2:22:
         79:cc:65:f3:13:d0:a4:55:45:f7:d7:37:a0:51:e8:bd:54:ae:
         a7:bf:84:25:7f:8d:32:c2:13:83:27:33:db:78:f4:ec:0f:bf:
         f2:85:9f:e2:09:48:cd:37:29:a2:e6:cb:ee:9f:d1:bd:bb:b1:
         05:f6:4a:4a:c8:62:2d:48:65:25:0d:93:28:b0:ea:04:31:34:
         42:e7:82:41:e0:4e:15:3f:c3:0a:01:8e:88:08:42:25:a0:76:
         45:5f:a2:1d:b4:47:2f:1d:b9:1d:ab:6d:fd:bf:c6:b3:80:e4:
         97:09:7a:10:91:7b:cd:bd:9a:61:76:91:be:16:8c:cb:d2:2e:
         ff:36:19:1e:1e:7a:3c:c6:dc:7f:0b:a2:f5:af:cc:ce:8e:fd:
         cd:71:c6:f2:f2:6b:f9:6f:5d:d4:74:bc:70:51:67:1d:c3:a7:
         84:3c:a1:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABfUaPhZbmUK4kAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
NDE4NmE5MTktOTc0Yi00MTkzLThkOGItZGI5NmZjZTQzOTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNnLu9mdvaFUsKno+be1BSiaiMmK5WxkxM8Z
R8ZNzmkdPNEmRUMgrWpB3+s1YMSLuQC7YZ78854QU0gbSdrOql2jfTlg3WKQOlhz
w8D9Hx9YOwpootxL1BMCMt6m/9WM3tUZghmcSnBhvu+kNrUV7y+dY77WdINFI9Nz
nUq2RboIK8r/izpbo/WB05pUWlo4zBGNJ+BYcxUUkKME2Wn4tIokJ4cdoUbret0Y
BTIztqdpgstWxYQmGuL3hEG1LVeriLKFdTlaUAT1L6y8p6fgB26JIY1MpOthkaeK
GXX/bRCvx2Ej6V+zrP51JmaZJU0vPNxSvCa8Rws2tibhECGRFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSc2H7PoSeq2XuU0ma3Ju65JwTZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM5MWFlYTctMjU4Ny0z
YjE2LWEyZWMtY2NiMmI1ZWUwMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGP+EawYytwhWXphYH5U0VLrzeOvTCBOZDkulg0l8ijK0ott9hE/9WYR
yMCxv89gJTV/afIrj3dWo6rZEiQPFLDasmoxGI0vbAwhAQjaZt033vhuKH/An0zS
InnMZfMT0KRVRffXN6BR6L1Urqe/hCV/jTLCE4MnM9t49OwPv/KFn+IJSM03KaLm
y+6f0b27sQX2SkrIYi1IZSUNkyiw6gQxNELngkHgThU/wwoBjogIQiWgdkVfoh20
Ry8duR2rbf2/xrOA5JcJehCRe829mmF2kb4WjMvSLv82GR4eejzG3H8LovWvzM6O
/c1xxvLya/lvXdR0vHBRZx3Dp4Q8oXY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:41 2026 by rpki-client