Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/34767d41-e534-35da-821e-801f0005a98e.roa
File:                     34767d41-e534-35da-821e-801f0005a98e.roa (raw, json)
Hash identifier:          uydTd96DQemkEy1XPYJ4pdV9n3rMjem3ZqAJciHg2Bc=
Subject key identifier:   0D:9A:F3:2F:55:7D:3E:B3:71:D7:28:30:B2:37:C5:D9:B9:C8:C2:09
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F70C37B945F9CF8E97B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/34767d41-e534-35da-821e-801f0005a98e.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     397019
IP address blocks:        71.86.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:70:c3:7b:94:5f:9c:f8:e9:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=151e0552-ec3c-40c0-b311-27a6341a4764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:13:de:7e:9d:ab:f9:ac:c3:24:23:23:a7:
                    57:8e:9f:f9:d2:31:7f:2b:d1:62:47:95:76:73:62:
                    4e:96:e7:8f:64:63:97:63:bd:09:45:a1:eb:6e:5d:
                    e3:36:ac:54:51:33:ed:c2:3d:2e:c0:20:0a:42:9a:
                    63:80:91:b1:b4:95:67:33:7a:41:2d:bc:f0:94:86:
                    13:6d:67:e6:fb:fe:5e:fb:71:6f:f4:23:3c:fa:6c:
                    7e:23:6c:1c:ff:95:7f:25:18:8a:6a:41:66:4e:c0:
                    76:a4:05:f3:37:d0:4b:c8:4b:08:2e:96:fb:1d:5b:
                    b7:ff:9e:53:fc:25:08:26:e8:7b:4f:d2:90:09:c3:
                    ab:c7:5d:79:ac:43:96:f9:0c:d6:f0:4a:d5:9a:15:
                    f7:17:30:d7:d1:46:01:7f:93:89:c3:32:25:51:82:
                    78:11:53:43:6e:fe:03:71:8a:3a:87:d1:7c:16:35:
                    f8:b7:97:43:e2:46:90:e3:3f:19:7e:fc:b8:69:b2:
                    8a:e9:77:1c:f5:42:ec:74:c6:e6:58:af:a8:d1:bc:
                    5f:54:28:46:23:06:bf:d1:c5:81:15:f1:56:ad:0f:
                    f9:f1:df:36:06:f5:77:b2:48:39:49:66:89:e4:a0:
                    6d:5c:cc:60:b9:62:67:24:f5:44:3b:1b:47:b3:66:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9A:F3:2F:55:7D:3E:B3:71:D7:28:30:B2:37:C5:D9:B9:C8:C2:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/34767d41-e534-35da-821e-801f0005a98e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:42:2d:08:f2:19:4c:97:01:e4:c5:62:70:6d:b2:e4:1e:80:
         e4:b9:ef:cc:08:e5:31:d4:77:7b:a0:00:97:f5:de:be:cd:c3:
         d9:b8:d2:b1:db:af:d4:1a:2a:7c:3c:46:ae:92:2d:80:05:73:
         08:07:f3:b5:52:e7:20:f3:d1:ec:96:78:ec:b1:75:89:e9:13:
         5d:dd:71:8a:15:3f:b3:b1:bd:91:05:ae:7b:25:cb:c6:f4:da:
         bc:35:d6:bd:d7:7e:4c:58:4b:2a:bf:53:ef:98:e0:30:e5:5c:
         31:85:9d:5b:af:38:85:2d:e1:78:84:b4:34:ff:a3:87:5c:2f:
         3e:eb:e9:1a:6b:0d:2d:d8:30:48:0e:b2:9f:22:0b:58:15:c2:
         36:29:92:c6:4a:dd:3e:a7:ec:b1:e4:c1:9c:d6:88:ab:6c:cd:
         12:0b:9d:90:1b:a4:f2:39:fc:d9:16:62:74:c1:42:d0:3d:3c:
         f2:da:8e:50:22:4d:41:df:75:db:81:3b:3b:04:ce:70:f8:52:
         42:8c:35:47:41:47:8b:55:a0:78:53:f4:f0:53:84:9f:13:0f:
         77:80:8d:ab:ca:75:98:7b:d9:e4:60:b2:6e:08:24:a9:4a:47:
         c0:ca:63:8e:04:2e:46:c8:c1:2d:3b:07:9e:e3:66:f1:be:d1:
         d1:63:c4:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD3DDe5RfnPjpewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
MTUxZTA1NTItZWMzYy00MGMwLWIzMTEtMjdhNjM0MWE0NzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprkT3n6dq/mswyQjI6dXjp/50jF/K9FiR5V2
c2JOluePZGOXY70JRaHrbl3jNqxUUTPtwj0uwCAKQppjgJGxtJVnM3pBLbzwlIYT
bWfm+/5e+3Fv9CM8+mx+I2wc/5V/JRiKakFmTsB2pAXzN9BLyEsILpb7HVu3/55T
/CUIJuh7T9KQCcOrx115rEOW+QzW8ErVmhX3FzDX0UYBf5OJwzIlUYJ4EVNDbv4D
cYo6h9F8FjX4t5dD4kaQ4z8Zfvy4abKK6Xcc9ULsdMbmWK+o0bxfVChGIwa/0cWB
FfFWrQ/58d82BvV3skg5SWaJ5KBtXMxguWJnJPVEOxtHs2by+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2a8y9VfT6zcdcoMLI3xdm5yMIJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzQ3NjdkNDEtZTUzNC0z
NWRhLTgyMWUtODAxZjAwMDVhOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR1aPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNCLQjyGUyXAeTFYnBtsuQegOS578wI5THUd3ugAJf13r7Nw9m40rHb
r9QaKnw8Rq6SLYAFcwgH87VS5yDz0eyWeOyxdYnpE13dcYoVP7OxvZEFrnsly8b0
2rw11r3XfkxYSyq/U++Y4DDlXDGFnVuvOIUt4XiEtDT/o4dcLz7r6RprDS3YMEgO
sp8iC1gVwjYpksZK3T6n7LHkwZzWiKtszRILnZAbpPI5/NkWYnTBQtA9PPLajlAi
TUHfdduBOzsEznD4UkKMNUdBR4tVoHhT9PBThJ8TD3eAjavKdZh72eRgsm4IJKlK
R8DKY44ELkbIwS07B57jZvG+0dFjxEg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:37 2026 by rpki-client