Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b371320-f731-35f3-ad4d-bac926430cc0.roa
File:                     9b371320-f731-35f3-ad4d-bac926430cc0.roa (raw, json)
Hash identifier:          b+vsKEcM11kYcO3p9gVdZRodwEHUNGo35X40lJEEcfw=
Subject key identifier:   F3:FF:2E:65:FC:EB:C0:A6:A0:2E:16:AF:A4:1F:BC:82:1F:FB:01:66
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E253EF0FE3F3BA4325745D920
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b371320-f731-35f3-ad4d-bac926430cc0.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     15169
IP address blocks:        34.191.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:f0:fe:3f:3b:a4:32:57:45:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=96bbc4b7-612a-4c43-bae1-9aaa5dcecbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:5b:85:90:54:54:ac:87:11:31:1e:3b:cc:
                    b4:21:a7:c8:69:fe:f7:74:d4:0c:fd:2d:5d:3b:48:
                    9d:5d:fd:66:5b:ba:30:d3:c9:6f:18:f3:ca:48:ca:
                    95:7a:5c:f7:18:44:1c:49:19:27:b3:1e:ff:08:70:
                    9b:90:c4:70:d1:9d:be:e0:47:a0:f0:b6:b7:a2:d5:
                    af:08:99:fe:63:ca:5e:6b:2d:a6:4f:3d:96:aa:10:
                    53:71:5f:1f:5b:9c:e4:47:ca:d5:35:a0:a8:ef:1f:
                    15:c8:b7:06:21:2f:a7:63:ce:78:7e:c4:9a:1e:11:
                    80:1e:6a:d8:2e:b5:2d:58:25:30:25:bb:86:40:0f:
                    62:d8:a2:34:7b:03:9f:2f:bf:14:76:19:df:6b:2b:
                    7c:74:72:d4:0f:69:2d:8e:0a:db:9c:59:a1:8e:4d:
                    5d:0c:a4:a3:97:8a:1e:1e:54:58:d5:43:e1:a9:16:
                    80:6c:83:5f:ac:49:5d:0b:94:7e:fd:f3:0d:a2:50:
                    6a:e7:08:c5:d6:b1:78:bc:2f:7c:65:f9:f1:bf:01:
                    3a:01:5d:f8:c5:3d:fa:32:67:5e:b1:47:7d:4c:ef:
                    c3:e4:99:a8:24:5c:91:1e:d6:45:bb:3c:a1:55:36:
                    38:1d:ba:9e:2e:69:a5:ca:f0:39:46:c5:b1:71:a1:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:2E:65:FC:EB:C0:A6:A0:2E:16:AF:A4:1F:BC:82:1F:FB:01:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b371320-f731-35f3-ad4d-bac926430cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.191.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:57:7b:75:ec:b5:39:e1:9b:8b:02:ea:8b:15:94:9b:c2:44:
         eb:a3:9d:3e:63:6b:ef:ef:23:b9:34:83:69:80:31:ad:64:a7:
         76:f7:e8:a9:db:d0:34:db:cc:80:22:31:4a:20:9d:56:ae:3d:
         87:dc:fa:9a:ca:c6:b5:c0:6f:4b:ac:de:eb:90:d5:2d:26:5d:
         55:7a:26:92:ab:b1:21:f0:d6:f2:5c:c1:8a:1e:f3:be:18:05:
         7b:3b:0e:71:cb:44:97:f4:53:1b:00:96:01:f0:1b:67:85:f9:
         66:f6:df:c0:af:5a:92:71:0b:30:12:22:b5:84:55:b2:ba:da:
         e4:10:ae:09:66:9f:fc:2e:86:9a:b3:a0:dc:d0:b3:7f:e3:54:
         52:f6:cc:a5:74:72:e9:3d:4e:bb:67:a9:e4:c2:2c:cd:84:f1:
         a6:9f:a3:0b:cc:6f:ed:26:2c:11:6e:cc:8c:f8:67:cf:63:82:
         ac:44:46:64:e3:2e:46:8a:1f:b4:52:e9:88:9f:67:b9:7f:0c:
         63:4c:99:f8:fa:7c:e1:a0:67:8f:e9:45:d7:7f:12:ad:e7:6f:
         0a:cb:5a:c6:f5:60:9f:dd:23:89:79:5a:09:4a:85:ca:a9:e9:
         1f:89:b4:0d:70:c8:96:c9:72:e1:a1:f2:9f:50:27:4c:76:b8:
         0f:55:89:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPvD+PzukMldF2SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
OTZiYmM0YjctNjEyYS00YzQzLWJhZTEtOWFhYTVkY2VjYmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWVbhZBUVKyHETEeO8y0IafIaf73dNQM/S1d
O0idXf1mW7ow08lvGPPKSMqVelz3GEQcSRknsx7/CHCbkMRw0Z2+4Eeg8La3otWv
CJn+Y8peay2mTz2WqhBTcV8fW5zkR8rVNaCo7x8VyLcGIS+nY854fsSaHhGAHmrY
LrUtWCUwJbuGQA9i2KI0ewOfL78Udhnfayt8dHLUD2ktjgrbnFmhjk1dDKSjl4oe
HlRY1UPhqRaAbINfrEldC5R+/fMNolBq5wjF1rF4vC98ZfnxvwE6AV34xT36Mmde
sUd9TO/D5JmoJFyRHtZFuzyhVTY4HbqeLmmlyvA5RsWxcaFHAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPP/LmX868CmoC4Wr6QfvIIf+wFmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWIzNzEzMjAtZjczMS0z
NWYzLWFkNGQtYmFjOTI2NDMwY2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlXe3XstTnhm4sC6osVlJvCROujnT5ja+/vI7k0g2mAMa1kp3b36Knb
0DTbzIAiMUognVauPYfc+prKxrXAb0us3uuQ1S0mXVV6JpKrsSHw1vJcwYoe874Y
BXs7DnHLRJf0UxsAlgHwG2eF+Wb238CvWpJxCzASIrWEVbK62uQQrglmn/wuhpqz
oNzQs3/jVFL2zKV0cuk9TrtnqeTCLM2E8aafowvMb+0mLBFuzIz4Z89jgqxERmTj
LkaKH7RS6YifZ7l/DGNMmfj6fOGgZ4/pRdd/Eq3nbwrLWsb1YJ/dI4l5WglKhcqp
6R+JtA1wyJbJcuGh8p9QJ0x2uA9ViS4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:18:10 2026 by rpki-client