Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3584defe-0eca-31a6-bb0d-d0e97a272b50.roa
File:                     3584defe-0eca-31a6-bb0d-d0e97a272b50.roa (raw, json)
Hash identifier:          09EnApACKA0hnpDnt/InnftaP5OcO3k4SVRy+PAELCc=
Subject key identifier:   1B:E8:48:02:E6:A3:D1:1C:E9:62:AD:F0:13:2C:88:C2:43:1E:4E:85
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB9812F541737981E50A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3584defe-0eca-31a6-bb0d-d0e97a272b50.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        34.186.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:98:12:f5:41:73:79:81:e5:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=cbbf1e8b-c6df-4a6b-9d21-48b63cdc62fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f8:dc:ed:c1:d9:c8:ec:2a:cb:f7:4c:72:88:
                    9c:b2:0e:19:27:30:ef:0f:2f:b1:96:86:53:05:42:
                    30:b3:44:c1:e4:b5:16:e2:d1:63:1a:06:50:5d:42:
                    ab:26:3d:25:27:3c:df:27:9f:f2:4d:2d:9c:88:66:
                    96:43:f5:c0:20:93:77:bd:6b:68:fa:fe:28:d5:d0:
                    9c:55:fd:1e:58:18:16:27:b9:c1:10:70:48:ee:fc:
                    ba:e1:91:8b:4e:f1:c2:f9:e3:e2:7f:90:5f:51:7d:
                    bb:e4:73:3b:ad:33:37:a6:77:19:0d:56:1d:39:90:
                    a2:e8:c7:96:eb:ac:34:64:cc:d0:b4:b4:fa:37:9c:
                    a2:a8:38:d6:bc:9a:1d:d5:06:08:bd:d3:11:5e:0d:
                    79:b9:6e:0e:63:7f:c1:cc:09:05:7c:6a:d9:c0:5e:
                    55:8f:2f:12:55:66:03:37:76:74:17:ad:d5:8d:cf:
                    de:28:ed:7d:1d:49:38:36:a3:21:d3:58:b2:b2:d2:
                    32:d7:b4:35:d5:12:f8:06:a9:e4:17:71:4c:a1:d8:
                    79:be:86:7c:62:52:04:35:b6:da:d8:73:4a:9a:4b:
                    00:57:3a:f0:2c:42:76:9c:43:2f:a6:de:ab:58:78:
                    0c:12:b0:35:13:a6:26:0b:b9:4d:b0:24:56:3e:25:
                    ad:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E8:48:02:E6:A3:D1:1C:E9:62:AD:F0:13:2C:88:C2:43:1E:4E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3584defe-0eca-31a6-bb0d-d0e97a272b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:2e:70:63:ee:25:60:69:d0:48:a5:f7:67:b7:ca:86:21:3e:
         12:41:4d:9b:b8:0a:2d:26:7d:d6:69:ca:3b:04:0a:11:5d:8c:
         c9:49:88:c8:fe:e3:b6:fa:96:f3:26:5a:e7:ec:6b:fc:bc:9f:
         8a:fd:75:f5:65:8e:51:a1:d2:ca:e4:92:55:44:46:7a:ee:cb:
         50:cf:f8:1a:88:61:60:03:97:a1:2d:58:90:96:64:b2:2d:d9:
         b2:54:1c:96:6d:e4:d6:98:8c:3e:5c:f6:f1:de:45:9b:61:f6:
         19:66:21:33:e6:72:8c:81:40:22:54:0b:06:f5:43:95:54:cc:
         38:ff:0b:4e:47:50:c8:dd:a1:74:9a:18:22:7f:a5:26:3f:0d:
         d2:92:f9:ec:4d:12:5a:99:cc:08:ba:7a:2a:16:c5:00:0b:b3:
         7a:f2:e2:00:c5:e3:2e:56:3a:eb:b7:b5:73:65:07:24:f7:1a:
         b7:5b:b5:ae:c9:44:a4:98:71:d4:dd:b5:f8:f8:1e:be:6a:9c:
         9d:0e:34:19:85:b1:84:d1:1e:0b:d1:f1:76:7e:a8:c8:cd:25:
         e9:b5:1a:5c:45:9f:8b:c3:6d:3f:d3:99:a7:fe:e6:d1:9c:c0:
         3a:39:fb:94:07:96:b5:76:a9:1d:6e:2b:d7:14:5a:8a:eb:1b:
         6c:79:09:de
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqG25gS9UFzeYHlCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
Y2JiZjFlOGItYzZkZi00YTZiLTlkMjEtNDhiNjNjZGM2MmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvjc7cHZyOwqy/dMcoicsg4ZJzDvDy+xloZT
BUIws0TB5LUW4tFjGgZQXUKrJj0lJzzfJ5/yTS2ciGaWQ/XAIJN3vWto+v4o1dCc
Vf0eWBgWJ7nBEHBI7vy64ZGLTvHC+ePif5BfUX275HM7rTM3pncZDVYdOZCi6MeW
66w0ZMzQtLT6N5yiqDjWvJod1QYIvdMRXg15uW4OY3/BzAkFfGrZwF5Vjy8SVWYD
N3Z0F63Vjc/eKO19HUk4NqMh01iystIy17Q11RL4BqnkF3FModh5voZ8YlIENbba
2HNKmksAVzrwLEJ2nEMvpt6rWHgMErA1E6YmC7lNsCRWPiWtvQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBvoSALmo9Ec6WKt8BMsiMJDHk6FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzU4NGRlZmUtMGVjYS0z
MWE2LWJiMGQtZDBlOTdhMjcyYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIrowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoS5wY+4lYGnQSKX3Z7fKhiE+EkFNm7gKLSZ91mnKOwQKEV2MyUmIyP7j
tvqW8yZa5+xr/Lyfiv119WWOUaHSyuSSVURGeu7LUM/4GohhYAOXoS1YkJZksi3Z
slQclm3k1piMPlz28d5Fm2H2GWYhM+ZyjIFAIlQLBvVDlVTMOP8LTkdQyN2hdJoY
In+lJj8N0pL57E0SWpnMCLp6KhbFAAuzevLiAMXjLlY667e1c2UHJPcat1u1rslE
pJhx1N21+PgevmqcnQ40GYWxhNEeC9Hxdn6oyM0l6bUaXEWfi8NtP9OZp/7m0ZzA
Ojn7lAeWtXapHW4r1xRaiusbbHkJ3g==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:26:41 2025 by rpki-client