Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa
File:                     5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa (raw, json)
Hash identifier:          gpydQhMuPD44VxzahBrO6QRZxaErpVh6SNNuSkSsZxw=
Subject key identifier:   1E:C7:CE:2D:45:CB:80:3A:7C:B5:FF:41:2C:3C:67:D1:77:4A:70:3E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584DD4C08141AF11A379D90E52A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     19527
IP address blocks:        34.2.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:81:41:af:11:a3:79:d9:0e:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=bf906450-66d4-4037-9c2f-3c88bae65597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:35:85:79:d2:e3:b6:59:23:32:e0:18:d8:
                    16:6e:d3:c3:ee:16:be:fb:2f:72:68:04:e4:47:3c:
                    c1:12:84:d2:e7:35:0c:cb:e2:29:48:47:40:f2:09:
                    a8:c3:84:e6:c0:3c:37:25:25:fa:7c:47:b9:11:18:
                    c3:04:5a:4c:ff:d4:1a:c4:d8:db:10:8a:be:a8:33:
                    e3:51:ad:70:48:41:85:21:12:df:9b:52:05:51:3e:
                    6e:3b:6c:82:95:0d:ad:a7:9b:9f:e5:16:66:d4:8f:
                    9b:8e:e6:96:a1:d0:55:b2:45:d6:d9:e3:84:f1:e3:
                    1b:27:9a:2b:5c:b9:f7:87:6d:a8:37:b9:06:34:1d:
                    e8:2f:3b:6e:0c:c5:0e:a8:e8:11:bd:1f:41:b6:b4:
                    4d:13:ac:eb:1e:53:0a:f9:87:02:11:65:71:54:9c:
                    0e:d0:f4:ab:cb:fc:61:e9:41:64:6a:5e:19:73:d7:
                    8c:4b:01:01:ff:b8:00:5a:4a:83:72:35:bf:b3:85:
                    f8:2e:6a:af:60:da:28:c5:13:be:b4:94:b2:eb:69:
                    6a:10:ef:25:4e:71:e8:e9:ce:eb:25:54:e9:b4:d5:
                    55:3e:22:10:90:89:5b:75:4f:9a:b9:22:24:83:5a:
                    20:9f:47:d8:49:5f:2e:50:43:c4:d6:7e:3d:40:06:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C7:CE:2D:45:CB:80:3A:7C:B5:FF:41:2C:3C:67:D1:77:4A:70:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b5:0a:9b:cd:72:42:8a:2b:5e:96:1a:f8:c4:15:73:de:d2:
         fe:06:eb:13:55:1a:c4:a8:e0:3a:7a:1b:a4:b1:81:60:5c:ca:
         18:6b:3a:71:bb:fe:be:7b:66:3d:71:c7:96:26:83:4d:52:77:
         da:56:5e:16:26:ea:54:10:da:cf:e6:a4:cd:07:c3:6e:f6:fd:
         cc:df:ae:64:b4:05:cd:34:c0:a5:e2:c3:45:c7:1c:55:17:7c:
         4d:31:fa:71:e6:bd:e0:48:39:5d:40:81:c3:24:16:f3:79:c6:
         60:d5:e5:f2:08:f9:d0:f4:88:e7:88:74:1a:4f:a3:dc:8a:25:
         d0:10:e8:0e:da:95:da:f0:0f:de:6b:72:e8:e5:58:22:30:9c:
         9e:bd:94:c4:90:ad:1b:52:52:ae:92:fe:c0:d9:a5:a0:d3:8a:
         3e:a0:ce:eb:ce:7e:c0:d6:70:6c:21:ad:4c:70:eb:6a:86:1b:
         d0:d6:05:44:67:97:f2:5f:4a:62:62:47:2e:b6:c9:85:e8:b0:
         5e:30:ee:ac:d2:6d:9b:87:72:70:94:79:1e:14:89:7f:fe:ea:
         70:88:a5:ce:5e:b8:1c:69:31:0e:13:55:fb:31:d5:68:ad:ec:
         50:8d:25:2f:6a:01:26:51:cd:70:a8:c3:cd:eb:ad:5d:15:96:
         70:3b:c8:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwIFBrxGjedkOUqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk
YmY5MDY0NTAtNjZkNC00MDM3LTljMmYtM2M4OGJhZTY1NTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogY1hXnS47ZZIzLgGNgWbtPD7ha++y9yaATk
RzzBEoTS5zUMy+IpSEdA8gmow4TmwDw3JSX6fEe5ERjDBFpM/9QaxNjbEIq+qDPj
Ua1wSEGFIRLfm1IFUT5uO2yClQ2tp5uf5RZm1I+bjuaWodBVskXW2eOE8eMbJ5or
XLn3h22oN7kGNB3oLztuDMUOqOgRvR9BtrRNE6zrHlMK+YcCEWVxVJwO0PSry/xh
6UFkal4Zc9eMSwEB/7gAWkqDcjW/s4X4LmqvYNooxRO+tJSy62lqEO8lTnHo6c7r
JVTptNVVPiIQkIlbdU+auSIkg1ogn0fYSV8uUEPE1n49QAa7zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB7Hzi1Fy4A6fLX/QSw8Z9F3SnA+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWY1M2Y1ZmQtMTM3MS0z
ZjExLTkzZDktZWZjNTczZWExMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJS1CpvNckKKK16WGvjEFXPe0v4G6xNVGsSo4Dp6G6SxgWBcyhhrOnG7
/r57Zj1xx5Ymg01Sd9pWXhYm6lQQ2s/mpM0Hw272/czfrmS0Bc00wKXiw0XHHFUX
fE0x+nHmveBIOV1AgcMkFvN5xmDV5fII+dD0iOeIdBpPo9yKJdAQ6A7aldrwD95r
cujlWCIwnJ69lMSQrRtSUq6S/sDZpaDTij6gzuvOfsDWcGwhrUxw62qGG9DWBURn
l/JfSmJiRy62yYXosF4w7qzSbZuHcnCUeR4UiX/+6nCIpc5euBxpMQ4TVfsx1Wit
7FCNJS9qASZRzXCow83rrV0VlnA7yOY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:41 2026 by rpki-client