Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b21af5a2-2a43-3100-94e3-2ea228913a45.roa
File:                     b21af5a2-2a43-3100-94e3-2ea228913a45.roa (raw, json)
Hash identifier:          YFYaVCXv9eS5eMckTTItNDKF6OrfA5/rvPGxEe0SQSA=
Subject key identifier:   4D:60:7E:11:47:46:FE:59:CC:C5:7B:7D:7B:C2:E5:64:61:FB:6F:AE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EA794DF67BC5D1AAA6775B980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b21af5a2-2a43-3100-94e3-2ea228913a45.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19527
IP address blocks:        34.1.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:df:67:bc:5d:1a:aa:67:75:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3d686be7-45ea-4663-a128-b30ae3286496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f0:90:c2:ba:87:55:0e:59:40:25:11:65:0f:
                    d3:cb:8f:f4:41:4a:e2:27:ef:82:12:a1:9f:04:8d:
                    d9:7c:b9:40:8a:c7:97:3f:78:31:85:87:15:2a:3e:
                    14:bd:2f:77:66:76:99:79:d5:af:f2:f6:e7:db:ec:
                    c1:7f:c5:9d:63:a1:df:48:ee:eb:5b:80:c7:b3:9c:
                    21:9a:22:2a:b0:6a:6c:9f:80:d2:16:39:27:39:5c:
                    a2:ac:ca:9a:3a:2b:2b:33:50:be:e4:46:fd:bf:8a:
                    07:87:65:29:db:32:cd:9b:70:27:86:f2:72:92:2c:
                    a8:4a:f6:08:c2:91:61:48:3c:2d:11:46:51:b7:d9:
                    26:31:c7:81:bf:3a:5c:28:74:7a:1e:28:df:2c:70:
                    d6:85:8d:f7:0a:f7:6a:49:57:5f:d8:38:f6:cb:ff:
                    b9:95:76:55:17:19:b3:97:d1:ee:c1:da:b7:46:1a:
                    38:cb:22:60:13:54:96:ae:84:04:da:7b:8f:d8:22:
                    20:f8:c0:15:16:87:ff:39:e6:f8:39:40:37:5a:a8:
                    74:9c:17:c9:6b:a8:1c:b0:4c:e7:5c:3d:91:b5:76:
                    3d:76:6c:2b:78:de:d8:a3:7f:c7:34:dd:bf:b1:33:
                    38:e6:aa:a8:77:83:4a:9b:a0:ce:98:51:99:e3:52:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:60:7E:11:47:46:FE:59:CC:C5:7B:7D:7B:C2:E5:64:61:FB:6F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b21af5a2-2a43-3100-94e3-2ea228913a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:be:d0:f0:88:60:4f:d2:d4:86:e7:80:5e:36:8a:e7:bb:
         44:96:91:57:2a:43:82:ad:a0:9d:60:6d:9b:16:de:a9:d5:70:
         6a:b3:9e:9c:e6:4c:6e:c0:53:aa:f4:cc:46:bd:3b:35:51:54:
         22:fd:12:86:04:5f:0a:b4:d9:69:af:35:64:ce:35:ea:68:33:
         3f:5e:78:7a:5e:71:77:00:65:12:4d:d3:80:60:3a:33:23:d7:
         b6:6d:8c:b7:7a:01:5a:ca:0c:be:3f:0c:42:47:41:42:fb:60:
         9e:a7:45:e4:50:10:3b:16:e2:3d:80:84:87:d2:e4:5e:d2:3b:
         79:82:51:b6:ce:98:3a:3d:f0:11:80:ae:bd:e1:6c:41:97:a3:
         87:b0:c1:98:ac:6a:a8:8e:05:57:e8:12:2b:91:b4:1a:78:73:
         b4:24:de:66:b1:a4:d6:35:0e:ac:b6:0d:5f:c9:11:69:a1:a1:
         15:9e:d7:e9:f7:02:f1:34:18:5d:1c:5c:95:fa:9d:43:40:c7:
         2b:7c:6a:49:ec:21:d3:f6:4f:2e:56:59:65:5e:e9:74:0c:db:
         80:e5:c7:de:1d:b3:f6:f6:ee:64:c9:67:1e:ab:01:f7:5f:91:
         20:2a:74:6d:c5:46:90:41:a9:ee:0a:d4:e6:06:8a:de:e9:a6:
         ca:eb:e6:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlN9nvF0aqmd1uYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
M2Q2ODZiZTctNDVlYS00NjYzLWExMjgtYjMwYWUzMjg2NDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/CQwrqHVQ5ZQCURZQ/Ty4/0QUriJ++CEqGf
BI3ZfLlAiseXP3gxhYcVKj4UvS93ZnaZedWv8vbn2+zBf8WdY6HfSO7rW4DHs5wh
miIqsGpsn4DSFjknOVyirMqaOisrM1C+5Eb9v4oHh2Up2zLNm3AnhvJykiyoSvYI
wpFhSDwtEUZRt9kmMceBvzpcKHR6HijfLHDWhY33CvdqSVdf2Dj2y/+5lXZVFxmz
l9Huwdq3Rho4yyJgE1SWroQE2nuP2CIg+MAVFof/Oeb4OUA3Wqh0nBfJa6gcsEzn
XD2RtXY9dmwreN7Yo3/HNN2/sTM45qqod4NKm6DOmFGZ41KORQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1gfhFHRv5ZzMV7fXvC5WRh+2+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjIxYWY1YTItMmE0My0z
MTAwLTk0ZTMtMmVhMjI4OTEzYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2hvtDwiGBP0tSG54BeNornu0SWkVcqQ4KtoJ1gbZsW3qnVcGqznpzm
TG7AU6r0zEa9OzVRVCL9EoYEXwq02WmvNWTONepoMz9eeHpecXcAZRJN04BgOjMj
17ZtjLd6AVrKDL4/DEJHQUL7YJ6nReRQEDsW4j2AhIfS5F7SO3mCUbbOmDo98BGA
rr3hbEGXo4ewwZisaqiOBVfoEiuRtBp4c7Qk3maxpNY1Dqy2DV/JEWmhoRWe1+n3
AvE0GF0cXJX6nUNAxyt8aknsIdP2Ty5WWWVe6XQM24Dlx94ds/b27mTJZx6rAfdf
kSAqdG3FRpBBqe4K1OYGit7ppsrr5nA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:33:58 2026 by rpki-client