Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b45be3-b170-346c-86b5-0ba4db7ce614.roa
File:                     34b45be3-b170-346c-86b5-0ba4db7ce614.roa (raw, json)
Hash identifier:          In0nUAa4YxtI18aCPKV5ES9egpfZJVjn/U4O8aDoZko=
Subject key identifier:   33:BF:07:99:91:07:0F:D0:1F:61:1E:72:52:76:46:80:D4:31:0C:FA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBCA564393F90EFFB8F080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b45be3-b170-346c-86b5-0ba4db7ce614.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        35.204.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ca:56:43:93:f9:0e:ff:b8:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=c48bec0a-8bff-46f1-8fb6-a846c29ba722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:d0:5d:ce:f4:94:a3:dd:5b:39:17:39:b2:
                    91:fd:bd:ac:80:d2:00:3f:94:a2:2b:46:62:ee:8b:
                    74:f3:3d:7e:7d:ce:f6:93:42:51:00:4d:2b:b7:1d:
                    88:68:2f:fd:f4:3a:8f:b3:6b:38:67:38:e7:84:de:
                    11:a8:44:22:1b:f4:89:b9:41:a9:2b:88:03:20:a9:
                    3c:8d:58:ff:69:71:05:c0:86:2b:d8:7a:8f:84:68:
                    86:1f:a0:45:12:2e:77:b3:81:ff:8f:a4:cc:09:f5:
                    16:df:3b:48:53:b9:a3:60:32:62:d5:9c:3f:f2:65:
                    ce:7f:24:b4:99:c8:8c:bd:c7:de:e5:71:3f:df:bb:
                    30:cd:07:fa:2c:29:20:28:00:e8:da:d7:ba:8e:dd:
                    68:65:0a:47:c9:41:da:79:cc:a1:ea:d5:bd:c7:c6:
                    84:99:f9:ca:ee:69:5b:e2:ed:f5:3a:99:77:a1:14:
                    6b:31:c2:90:ea:ee:52:7e:1a:bc:50:9d:35:dd:82:
                    90:5c:c1:fe:3f:01:f9:8f:3e:cd:fe:8c:e5:73:bf:
                    24:ee:28:04:5d:a4:e6:62:45:3e:bb:2d:f5:b7:f2:
                    62:27:be:71:64:0b:0d:ca:ad:d2:fc:0d:41:64:b5:
                    9d:04:00:cc:31:6d:5d:45:64:55:db:78:4c:41:60:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BF:07:99:91:07:0F:D0:1F:61:1E:72:52:76:46:80:D4:31:0C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b45be3-b170-346c-86b5-0ba4db7ce614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.204.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:53:25:42:4f:36:88:53:35:e2:bb:cf:45:9a:eb:5d:23:e1:
         24:42:d0:14:f0:f6:bd:dd:2f:4b:de:a6:24:e0:d4:bd:31:56:
         75:55:63:39:60:f5:ce:77:f5:d3:d6:e5:79:9f:1c:f1:e8:49:
         84:a2:2e:56:5e:cf:f8:ac:37:56:0d:1f:c5:e8:cf:25:cf:f0:
         44:00:d9:04:b2:89:21:a5:5d:8a:a4:b3:1e:07:83:d3:f3:0a:
         a4:43:a9:2f:f8:a4:f4:8e:84:88:2b:68:97:45:1e:8d:82:a2:
         47:8b:49:c1:e2:0f:e7:b4:c3:07:44:30:8b:c4:17:b2:00:65:
         91:1b:88:21:1d:bd:46:d5:54:91:1a:7c:a8:cb:38:95:f3:51:
         48:22:fe:e4:b9:55:7a:f1:61:5e:ca:9d:14:ed:c5:5f:a6:1d:
         0a:db:71:d9:67:9e:34:90:62:b2:a3:c5:71:59:43:a7:1f:a9:
         11:32:fb:72:66:f0:ec:55:58:66:07:04:27:f3:42:20:6f:0e:
         bf:7f:03:00:e3:e2:fc:f6:3a:b2:42:0a:ac:17:89:11:2d:6e:
         9a:d8:5c:2c:13:8d:83:4d:0e:34:46:c0:c7:85:85:0e:e1:0e:
         14:57:70:37:83:a5:04:cf:43:fe:9a:8a:68:3c:a2:8f:70:46:
         c5:f4:1d:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28pWQ5P5Dv+48IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
YzQ4YmVjMGEtOGJmZi00NmYxLThmYjYtYTg0NmMyOWJhNzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjevQXc70lKPdWzkXObKR/b2sgNIAP5SiK0Zi
7ot08z1+fc72k0JRAE0rtx2IaC/99DqPs2s4ZzjnhN4RqEQiG/SJuUGpK4gDIKk8
jVj/aXEFwIYr2HqPhGiGH6BFEi53s4H/j6TMCfUW3ztIU7mjYDJi1Zw/8mXOfyS0
mciMvcfe5XE/37swzQf6LCkgKADo2te6jt1oZQpHyUHaecyh6tW9x8aEmfnK7mlb
4u31Opl3oRRrMcKQ6u5Sfhq8UJ013YKQXMH+PwH5jz7N/ozlc78k7igEXaTmYkU+
uy31t/JiJ75xZAsNyq3S/A1BZLWdBADMMW1dRWRV23hMQWCvfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDO/B5mRBw/QH2EeclJ2RoDUMQz6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzRiNDViZTMtYjE3MC0z
NDZjLTg2YjUtMGJhNGRiN2NlNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8wwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFTJUJPNohTNeK7z0Wa610j4SRC0BTw9r3dL0vepiTg1L0xVnVVYzlg
9c539dPW5XmfHPHoSYSiLlZez/isN1YNH8XozyXP8EQA2QSyiSGlXYqksx4Hg9Pz
CqRDqS/4pPSOhIgraJdFHo2CokeLScHiD+e0wwdEMIvEF7IAZZEbiCEdvUbVVJEa
fKjLOJXzUUgi/uS5VXrxYV7KnRTtxV+mHQrbcdlnnjSQYrKjxXFZQ6cfqREy+3Jm
8OxVWGYHBCfzQiBvDr9/AwDj4vz2OrJCCqwXiREtbprYXCwTjYNNDjRGwMeFhQ7h
DhRXcDeDpQTPQ/6aimg8oo9wRsX0HZw=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:16:25 2025 by rpki-client