Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3749a87f-6fe5-3c19-92fe-858b32d98221.roa
File:                     3749a87f-6fe5-3c19-92fe-858b32d98221.roa (raw, json)
Hash identifier:          O+0eHsvn6SISmdSk1Mnt9sO++TvoC8j4crwflLS0QrI=
Subject key identifier:   93:6D:51:2B:5B:80:F1:37:13:67:78:D8:04:6B:C4:7B:80:0B:18:BA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBDEF90496D8CA21B84680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3749a87f-6fe5-3c19-92fe-858b32d98221.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.71.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:de:f9:04:96:d8:ca:21:b8:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=2fc4bc10-d720-40a5-a375-becaed7d94f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:1c:ef:66:04:d4:72:e0:54:92:c2:8b:8d:
                    d3:60:9c:75:29:63:25:76:37:c7:ea:f5:37:03:1f:
                    ea:4c:cc:c6:3d:e0:0d:ee:56:08:e4:1c:fd:ad:40:
                    a2:60:94:b2:61:be:44:be:c8:a8:55:83:35:2b:0c:
                    3e:e6:ee:ab:8f:a8:e5:06:9f:d3:36:fe:8b:26:7e:
                    3b:88:8f:5c:bf:23:a6:13:e5:e4:e8:71:b2:86:6c:
                    e0:92:ef:02:a5:c1:17:b8:05:6d:b0:e0:7d:41:b9:
                    c0:5f:3c:11:3e:a9:f4:d9:2e:0e:ad:17:4c:9f:a5:
                    e7:6d:c0:fc:b1:94:10:2a:16:88:86:04:bd:c7:04:
                    dc:ee:1e:a7:15:e2:0e:a8:e8:ea:86:cf:84:63:bb:
                    53:97:81:9c:34:a6:ac:d2:52:01:f4:58:07:e9:a2:
                    3d:94:c3:40:ea:1f:5d:15:a0:4b:6b:6c:9e:b5:d9:
                    b1:11:ed:8a:45:e2:40:b1:91:d3:f9:38:81:91:e8:
                    fc:b9:d7:29:8d:c3:74:7e:30:b6:fe:b3:4b:fe:39:
                    5a:8b:04:9f:51:f8:5f:d8:bc:d2:0c:5d:dd:95:95:
                    76:7f:3e:75:f2:84:86:3f:0f:07:5d:08:b5:2d:a2:
                    78:59:d5:1a:33:e8:ae:f2:9c:4d:dc:14:ed:a1:c2:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:51:2B:5B:80:F1:37:13:67:78:D8:04:6B:C4:7B:80:0B:18:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3749a87f-6fe5-3c19-92fe-858b32d98221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.71.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:89:20:03:fc:65:ee:76:84:9b:68:86:ba:10:4d:83:0b:28:
         79:71:5a:f4:8b:91:31:d6:1a:05:8e:d3:9a:cc:30:08:75:5a:
         4f:b2:5a:de:dc:59:33:57:f8:33:d4:a4:7c:ab:e5:89:88:3d:
         d9:9c:5c:9f:07:4e:a2:90:89:cf:1b:76:06:d0:bf:d0:a3:4b:
         b3:c8:c7:a9:0c:8f:8e:06:f2:1a:8a:0c:4f:9d:80:34:02:41:
         f7:55:c1:13:c0:cb:ea:0b:9b:d4:65:26:25:86:64:28:97:fa:
         46:96:3b:a8:52:ab:6f:72:ec:16:3e:11:09:c3:6a:0d:ee:76:
         3e:cf:c7:a1:89:7b:d0:17:04:28:bb:c9:23:e8:9a:7d:53:40:
         6b:2c:bc:33:35:fa:95:f4:ad:6a:a5:fd:b3:01:dc:cb:e4:9a:
         e6:db:94:47:3f:ce:53:33:fe:11:f7:89:b1:37:b9:1b:27:db:
         80:74:c7:d0:ec:be:11:44:88:d5:a2:35:a4:77:e0:8d:88:4f:
         eb:16:97:1a:73:98:c4:da:a8:06:a4:9a:9f:a1:90:57:b8:84:
         85:75:91:72:8a:da:83:a5:55:10:bf:9e:5a:a6:50:90:47:e9:
         e3:1a:ff:69:cd:42:8d:2c:62:23:cc:89:db:ae:02:c7:e3:ce:
         5f:16:6a:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2975BJbYyiG4RoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
MmZjNGJjMTAtZDcyMC00MGE1LWEzNzUtYmVjYWVkN2Q5NGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQsc72YE1HLgVJLCi43TYJx1KWMldjfH6vU3
Ax/qTMzGPeAN7lYI5Bz9rUCiYJSyYb5EvsioVYM1Kww+5u6rj6jlBp/TNv6LJn47
iI9cvyOmE+Xk6HGyhmzgku8CpcEXuAVtsOB9QbnAXzwRPqn02S4OrRdMn6XnbcD8
sZQQKhaIhgS9xwTc7h6nFeIOqOjqhs+EY7tTl4GcNKas0lIB9FgH6aI9lMNA6h9d
FaBLa2yetdmxEe2KReJAsZHT+TiBkej8udcpjcN0fjC2/rNL/jlaiwSfUfhf2LzS
DF3dlZV2fz518oSGPw8HXQi1LaJ4WdUaM+iu8pxN3BTtocJ/FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNtUStbgPE3E2d42ARrxHuACxi6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzc0OWE4N2YtNmZlNS0z
YzE5LTkyZmUtODU4YjMyZDk4MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGJIAP8Ze52hJtohroQTYMLKHlxWvSLkTHWGgWO05rMMAh1Wk+yWt7c
WTNX+DPUpHyr5YmIPdmcXJ8HTqKQic8bdgbQv9CjS7PIx6kMj44G8hqKDE+dgDQC
QfdVwRPAy+oLm9RlJiWGZCiX+kaWO6hSq29y7BY+EQnDag3udj7Px6GJe9AXBCi7
ySPomn1TQGssvDM1+pX0rWql/bMB3MvkmubblEc/zlMz/hH3ibE3uRsn24B0x9Ds
vhFEiNWiNaR34I2IT+sWlxpzmMTaqAakmp+hkFe4hIV1kXKK2oOlVRC/nlqmUJBH
6eMa/2nNQo0sYiPMiduuAsfjzl8Waq0=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:25:44 2025 by rpki-client