Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa
File:                     839e0e55-123b-3665-bb2c-36be8897a21f.roa (raw, json)
Hash identifier:          a6HZn9rTIq/s9km7D7N5PglB0+ZjftVzAJVzFcySMa8=
Subject key identifier:   49:0C:23:BE:03:7B:DC:30:B8:B4:CC:7F:44:2D:C7:A0:0B:58:44:4F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E08664657025928D1BA347800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.38.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:46:57:02:59:28:d1:ba:34:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=7cbcd139-5329-48d9-9ab8-241a85538167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:ca:fa:ea:02:2e:cf:95:69:ff:b3:6d:e3:
                    50:fe:ea:66:fa:c6:02:3d:93:34:0c:e3:18:14:d8:
                    85:91:ca:ec:fb:10:35:86:8d:bc:45:a9:66:4f:b7:
                    c7:63:f1:1b:90:c5:c5:e4:3a:84:bc:33:5a:8f:74:
                    11:2f:a6:a6:7e:8d:60:d6:2c:ec:04:23:c9:b5:9a:
                    01:3d:6c:ec:b7:b0:47:32:32:9f:2a:ad:28:40:ec:
                    1a:8b:7f:93:71:28:6f:4f:45:e5:7f:3d:65:d3:06:
                    f8:c1:ee:ac:53:c5:93:b9:2b:19:a2:2b:aa:ab:11:
                    a9:e8:55:f1:1f:38:52:91:75:a8:87:0e:5b:9e:7d:
                    be:cb:f8:ed:3a:f3:1c:ed:0e:99:09:cc:e1:c0:88:
                    3d:85:f8:08:1e:bf:61:ea:3b:b8:1c:f5:c5:c2:14:
                    e3:40:91:67:34:61:8b:86:9b:e1:cf:93:ce:50:56:
                    80:8b:c6:b0:66:89:af:5b:fe:01:65:87:1c:f1:70:
                    51:be:7c:7c:55:b0:8e:63:04:9a:1d:38:bf:27:54:
                    39:ec:d2:e3:2a:6c:57:5d:b5:f5:bf:e5:f2:ae:8e:
                    78:88:8b:77:69:83:2a:6a:7d:67:f8:3d:1e:19:2b:
                    20:7f:62:bc:62:de:ae:8d:35:64:d7:15:1a:a9:b2:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0C:23:BE:03:7B:DC:30:B8:B4:CC:7F:44:2D:C7:A0:0B:58:44:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:4a:a1:47:2d:58:92:06:ac:18:7d:38:55:98:81:da:79:
         2b:6b:53:4e:a5:99:4d:ee:c3:5b:b6:99:5e:2c:60:72:32:5b:
         f0:80:93:72:65:2a:99:dc:70:8e:51:54:e0:61:fa:e2:e1:16:
         5a:f9:b8:9f:a4:4d:47:19:43:fd:24:f7:63:fd:f5:1c:71:23:
         ce:66:2f:c1:8f:d9:1e:56:9a:40:8c:16:6b:88:3d:98:8c:b1:
         8f:11:67:c8:1a:90:1d:d0:77:7b:97:fd:b2:80:98:7c:43:0c:
         1c:af:af:b8:b2:df:f9:4b:2e:80:26:b2:6c:ad:c0:45:f2:86:
         3d:db:3b:99:33:26:9e:95:10:ab:6d:15:4b:d6:f0:48:d9:6b:
         12:02:d5:1f:8a:d5:22:d9:14:8e:38:19:ed:3a:fe:00:8c:2b:
         09:9a:db:37:81:c0:26:0b:01:c6:bc:82:4d:44:37:48:49:62:
         92:a6:cf:32:b6:87:c7:99:15:79:e0:d2:b3:0c:3d:7f:66:01:
         b9:f0:89:28:7d:96:20:78:a4:1d:87:6f:b7:66:f6:37:b5:f7:
         87:8a:2f:88:17:cb:48:be:1e:75:02:bd:1c:fa:48:54:b4:75:
         d0:c4:7c:5f:ea:08:e4:f6:d0:06:83:5f:81:1f:bc:e8:cf:04:
         3d:bc:d2:d4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4IZkZXAlko0bo0eAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
N2NiY2QxMzktNTMyOS00OGQ5LTlhYjgtMjQxYTg1NTM4MTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUXK+uoCLs+Vaf+zbeNQ/upm+sYCPZM0DOMY
FNiFkcrs+xA1ho28RalmT7fHY/EbkMXF5DqEvDNaj3QRL6amfo1g1izsBCPJtZoB
PWzst7BHMjKfKq0oQOwai3+TcShvT0Xlfz1l0wb4we6sU8WTuSsZoiuqqxGp6FXx
HzhSkXWohw5bnn2+y/jtOvMc7Q6ZCczhwIg9hfgIHr9h6ju4HPXFwhTjQJFnNGGL
hpvhz5POUFaAi8awZomvW/4BZYcc8XBRvnx8VbCOYwSaHTi/J1Q57NLjKmxXXbX1
v+Xyro54iIt3aYMqan1n+D0eGSsgf2K8Yt6ujTVk1xUaqbKptwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEkMI74De9wwuLTMf0Qtx6ALWERPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODM5ZTBlNTUtMTIzYi0z
NjY1LWJiMmMtMzZiZTg4OTdhMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIiYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAd6xKoUctWJIGrBh9OFWYgdp5K2tTTqWZTe7DW7aZXixgcjJb8ICTcmUq
mdxwjlFU4GH64uEWWvm4n6RNRxlD/ST3Y/31HHEjzmYvwY/ZHlaaQIwWa4g9mIyx
jxFnyBqQHdB3e5f9soCYfEMMHK+vuLLf+UsugCaybK3ARfKGPds7mTMmnpUQq20V
S9bwSNlrEgLVH4rVItkUjjgZ7Tr+AIwrCZrbN4HAJgsBxryCTUQ3SElikqbPMraH
x5kVeeDSsww9f2YBufCJKH2WIHikHYdvt2b2N7X3h4oviBfLSL4edQK9HPpIVLR1
0MR8X+oI5PbQBoNfgR+86M8EPbzS1A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:10:20 2026 by rpki-client