Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/190f0742-26d3-339a-ae95-d1b99b5d4b22.roa
File:                     190f0742-26d3-339a-ae95-d1b99b5d4b22.roa (raw, json)
Hash identifier:          YsUTQ5UW/SwJYtyUZpEwzcNoVSNeetxNs68b2HX/lJA=
Subject key identifier:   A2:7E:7B:86:29:16:D8:0B:19:AD:AF:7E:B5:49:7A:0C:84:44:41:34
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84123747767F5D0ADE4F2A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/190f0742-26d3-339a-ae95-d1b99b5d4b22.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.107.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:37:47:76:7f:5d:0a:de:4f:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ee2f8f34-11eb-432b-b557-58b2fad29e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:73:47:1e:74:7e:cb:11:04:10:ab:45:7c:
                    a6:35:2e:57:85:69:77:d0:e1:82:e8:df:0a:e9:91:
                    ad:1c:18:36:c3:e6:ee:71:4c:ee:fd:56:f3:61:a4:
                    93:b0:41:04:b2:e3:7e:9e:07:51:ee:e1:9b:0f:20:
                    aa:90:d9:e2:76:27:92:80:48:f5:6b:88:af:8b:6e:
                    71:21:4b:b4:ed:96:85:da:13:ea:30:ec:b3:46:68:
                    c4:3a:45:ce:fe:5e:77:b7:ae:d9:db:f8:67:1b:0b:
                    23:fb:35:84:80:b7:df:63:5f:c4:d2:90:5d:93:c1:
                    ed:d1:1a:c6:45:d5:9c:d3:fb:8a:db:be:67:6c:bf:
                    32:c7:44:52:f4:4f:83:40:5d:4d:ec:ee:1b:53:fc:
                    86:d2:cd:9a:7a:38:77:6f:1d:e9:51:eb:52:d6:b9:
                    cd:48:85:cf:fa:bd:74:39:df:7a:41:51:a6:19:a2:
                    f5:86:3b:25:f5:91:51:bf:61:13:ff:1c:76:6b:af:
                    0c:36:9a:7e:e7:47:47:fb:b5:97:3e:3c:30:f0:32:
                    49:50:6a:2c:9e:e6:f9:cd:20:0b:a9:b6:05:a0:1c:
                    e0:2f:4e:d6:e9:23:be:6b:84:7c:61:30:80:02:fd:
                    4a:e1:e5:11:66:66:33:c2:3b:39:69:d3:de:16:8c:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7E:7B:86:29:16:D8:0B:19:AD:AF:7E:B5:49:7A:0C:84:44:41:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/190f0742-26d3-339a-ae95-d1b99b5d4b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.107.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6b:1d:25:9e:bc:19:32:fe:93:0a:a0:6f:2c:66:b7:c7:31:
         6d:80:e0:d2:44:6c:90:71:90:0e:2b:31:1a:7f:1f:e8:94:fa:
         57:86:c4:a2:d3:c6:2a:68:b6:cf:08:c5:4e:f5:ba:71:54:3a:
         e8:e2:02:2e:ba:47:e7:29:bc:3c:0d:32:7a:fd:9f:0c:6c:f7:
         cd:af:6f:39:a7:e5:3c:26:e5:e8:37:56:f0:eb:d6:01:0f:6a:
         c3:b4:3a:63:19:dc:bb:0b:3f:43:d6:28:9f:f6:ec:8e:e6:30:
         18:f6:e4:a2:ee:5e:c1:87:f9:49:63:3a:05:d7:8b:1e:37:85:
         b5:6f:11:6b:fd:60:c5:98:72:90:f4:ce:f2:74:e7:75:a9:8a:
         62:ee:cb:c1:6b:be:35:89:31:d6:19:9c:ee:ac:21:9e:00:6f:
         84:f8:fa:72:4c:eb:85:5d:c4:ee:87:0d:41:eb:d3:f1:6b:3c:
         90:99:cb:0b:e8:34:2c:7b:b6:c0:b5:85:67:ba:a2:45:10:b5:
         b7:bf:b2:47:2a:93:f3:85:c3:19:b8:14:02:42:8b:5f:d3:98:
         02:65:83:bd:cb:ab:fb:79:81:c7:ae:46:2d:ee:0e:89:ec:d5:
         b2:35:b3:cf:92:e2:a9:9e:30:52:53:16:1b:37:27:5e:09:f1:
         3e:57:56:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjdHdn9dCt5PKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZWUyZjhmMzQtMTFlYi00MzJiLWI1NTctNThiMmZhZDI5ZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEZzRx50fssRBBCrRXymNS5XhWl30OGC6N8K
6ZGtHBg2w+bucUzu/VbzYaSTsEEEsuN+ngdR7uGbDyCqkNnidieSgEj1a4ivi25x
IUu07ZaF2hPqMOyzRmjEOkXO/l53t67Z2/hnGwsj+zWEgLffY1/E0pBdk8Ht0RrG
RdWc0/uK275nbL8yx0RS9E+DQF1N7O4bU/yG0s2aejh3bx3pUetS1rnNSIXP+r10
Od96QVGmGaL1hjsl9ZFRv2ET/xx2a68MNpp+50dH+7WXPjww8DJJUGosnub5zSAL
qbYFoBzgL07W6SO+a4R8YTCAAv1K4eURZmYzwjs5adPeFoyeCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJ+e4YpFtgLGa2vfrVJegyEREE0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTkwZjA3NDItMjZkMy0z
MzlhLWFlOTUtZDFiOTliNWQ0YjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImtwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJrHSWevBky/pMKoG8sZrfHMW2A4NJEbJBxkA4rMRp/H+iU+leGxKLT
xipots8IxU71unFUOujiAi66R+cpvDwNMnr9nwxs982vbzmn5Twm5eg3VvDr1gEP
asO0OmMZ3LsLP0PWKJ/27I7mMBj25KLuXsGH+UljOgXXix43hbVvEWv9YMWYcpD0
zvJ053WpimLuy8FrvjWJMdYZnO6sIZ4Ab4T4+nJM64VdxO6HDUHr0/FrPJCZywvo
NCx7tsC1hWe6okUQtbe/skcqk/OFwxm4FAJCi1/TmAJlg73Lq/t5gceuRi3uDons
1bI1s8+S4qmeMFJTFhs3J14J8T5XVnw=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:35:31 2025 by rpki-client