Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab1da17-7121-358f-a4af-219126da6697.roa
File:                     dab1da17-7121-358f-a4af-219126da6697.roa (raw, json)
Hash identifier:          dSToBbHMhK0Lo8uGSP/o3C+7JjevFWO01v2X95x7VF0=
Subject key identifier:   D5:64:74:5B:60:31:FB:61:5C:61:01:7E:86:11:8E:A6:B7:B5:2C:27
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E086613A14A866C546AC84C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab1da17-7121-358f-a4af-219126da6697.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        34.138.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:13:a1:4a:86:6c:54:6a:c8:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=37ef2d46-7ce9-414c-b67f-057dae5a428c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:51:ef:ab:59:ce:ed:95:97:f6:3c:74:7d:
                    7c:26:a5:92:b5:fa:b1:6c:6b:29:4f:a2:c6:8c:61:
                    9c:40:8f:ff:8f:d8:26:81:0a:35:ab:94:35:24:f8:
                    e3:fd:a8:55:40:00:8e:c2:92:c7:98:ad:39:ad:85:
                    47:43:c0:47:12:56:7d:6b:ee:63:2a:7c:9b:83:ed:
                    b4:7a:1f:69:c6:be:5d:dc:65:6a:6a:10:38:c5:d7:
                    d4:88:69:dc:e0:82:70:4b:64:4e:bc:9a:2f:f7:f5:
                    d0:84:f3:20:70:55:c0:fa:e0:ee:f5:00:01:32:f5:
                    72:19:af:b6:f6:bb:13:c0:9b:da:a2:f1:8d:6e:d1:
                    eb:3c:aa:d3:f6:47:1c:82:92:c4:67:e8:d7:27:25:
                    53:23:0b:7f:af:64:f3:ab:f6:17:31:e1:dc:ee:ca:
                    29:fb:81:7e:6f:c9:e8:3b:e6:63:37:d7:0b:99:42:
                    79:e4:72:6a:43:39:9d:ab:ab:b0:09:ad:30:7f:27:
                    5f:31:5e:47:14:05:38:26:1b:ed:a4:7c:d1:f6:25:
                    6e:93:b2:ca:fe:e9:15:30:17:1f:29:64:35:29:68:
                    ec:47:13:e7:e7:24:d2:f8:bf:cb:6a:f9:c7:dd:9a:
                    71:d6:45:3f:51:c5:24:a8:53:3d:7b:fc:fc:32:a4:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:64:74:5B:60:31:FB:61:5C:61:01:7E:86:11:8E:A6:B7:B5:2C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab1da17-7121-358f-a4af-219126da6697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.138.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:fe:f1:7b:80:37:00:bc:d1:02:cd:33:6b:53:2e:99:16:
         55:55:a2:0b:f7:67:e7:63:3f:b7:5e:28:d2:b9:f7:92:01:09:
         a1:36:9b:26:55:44:4f:a3:c8:03:a5:59:43:43:ab:3b:9e:54:
         18:5e:02:b9:09:23:82:fe:06:bd:05:03:49:12:db:ee:f8:f9:
         17:dd:ec:c9:1d:c9:e6:62:e3:c1:c5:2a:bb:bd:a6:c3:1a:4e:
         d7:41:a1:47:54:d1:d9:32:e2:bf:a2:07:08:24:6e:f0:3b:f6:
         8a:e3:7d:5f:ad:f5:2f:61:08:76:a8:23:6b:11:b9:f4:b1:49:
         2e:79:bc:94:b7:94:ef:8d:0e:99:2f:b0:fb:42:64:90:a0:c4:
         48:46:ee:a6:fd:df:b0:32:cf:df:18:c3:d9:70:36:52:83:da:
         f8:81:67:89:be:39:bb:87:3e:6a:ad:21:57:f8:5f:8c:65:5f:
         e2:cd:43:8a:31:ec:e1:c6:32:35:76:ae:9e:02:3f:59:1f:79:
         b0:06:72:b4:a4:80:68:d0:4f:de:52:85:f4:68:14:62:d9:88:
         bf:c8:d2:f6:02:35:eb:1b:0c:0f:c3:5a:10:e3:5c:f1:72:ff:
         66:61:13:70:49:a7:8d:12:9a:f1:f8:6f:1f:aa:47:db:aa:c9:
         27:90:8f:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZhOhSoZsVGrITIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
MzdlZjJkNDYtN2NlOS00MTRjLWI2N2YtMDU3ZGFlNWE0MjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYlR76tZzu2Vl/Y8dH18JqWStfqxbGspT6LG
jGGcQI//j9gmgQo1q5Q1JPjj/ahVQACOwpLHmK05rYVHQ8BHElZ9a+5jKnybg+20
eh9pxr5d3GVqahA4xdfUiGnc4IJwS2ROvJov9/XQhPMgcFXA+uDu9QABMvVyGa+2
9rsTwJvaovGNbtHrPKrT9kccgpLEZ+jXJyVTIwt/r2Tzq/YXMeHc7sop+4F+b8no
O+ZjN9cLmUJ55HJqQzmdq6uwCa0wfydfMV5HFAU4JhvtpHzR9iVuk7LK/ukVMBcf
KWQ1KWjsRxPn5yTS+L/LavnH3Zpx1kU/UcUkqFM9e/z8MqSGcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVkdFtgMfthXGEBfoYRjqa3tSwnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGFiMWRhMTctNzEyMS0z
NThmLWE0YWYtMjE5MTI2ZGE2Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIooAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA58/vF7gDcAvNECzTNrUy6ZFlVVogv3Z+djP7deKNK595IBCaE2myZV
RE+jyAOlWUNDqzueVBheArkJI4L+Br0FA0kS2+74+Rfd7MkdyeZi48HFKru9psMa
TtdBoUdU0dky4r+iBwgkbvA79orjfV+t9S9hCHaoI2sRufSxSS55vJS3lO+NDpkv
sPtCZJCgxEhG7qb937Ayz98Yw9lwNlKD2viBZ4m+ObuHPmqtIVf4X4xlX+LNQ4ox
7OHGMjV2rp4CP1kfebAGcrSkgGjQT95ShfRoFGLZiL/I0vYCNesbDA/DWhDjXPFy
/2ZhE3BJp40SmvH4bx+qR9uqySeQj3U=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:57:39 2026 by rpki-client