Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a1fb14-854d-30c0-a525-97ae57eb2931.roa
File:                     37a1fb14-854d-30c0-a525-97ae57eb2931.roa (raw, json)
Hash identifier:          PJ9LiF3dzkxuL5A4IiPJsNFe/kcM7DdyfP9ugtFUk8k=
Subject key identifier:   D6:32:4E:EC:D8:1D:62:7C:33:36:9D:D7:C8:3A:D2:B2:E2:D2:22:0F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A8412307FA1957878F8976FF0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a1fb14-854d-30c0-a525-97ae57eb2931.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.108.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:30:7f:a1:95:78:78:f8:97:6f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3bcbd4c0-706e-46ba-8510-71a2ee375550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:24:80:74:ff:f1:d5:ed:97:0b:fa:3a:0a:
                    41:ba:82:c1:f0:a4:86:39:5d:0d:84:30:0c:51:f6:
                    5a:bd:85:8b:2a:c0:dc:53:45:16:0e:c7:ca:65:bd:
                    a3:2d:5e:80:60:36:73:3e:56:95:54:de:57:a5:65:
                    e9:cf:d2:3c:48:c8:58:7d:a3:1c:e8:fd:c4:61:c2:
                    35:38:9c:08:5c:af:9a:6c:22:35:ac:43:e9:32:5c:
                    65:e0:f1:08:2c:df:94:35:7b:f7:a9:43:05:1c:a9:
                    1b:3e:0d:f6:73:14:c4:fb:00:34:b9:54:fa:de:6d:
                    62:c1:0c:b6:d8:49:a4:d0:a8:64:21:b7:f9:87:1e:
                    9f:89:1b:72:ab:3e:23:1e:10:94:1d:50:0f:96:f9:
                    cc:ab:72:45:78:e8:e1:9b:65:ff:56:7c:07:14:f1:
                    27:3e:83:74:92:f4:81:34:d5:96:01:38:9b:c8:63:
                    5b:5a:17:81:c8:ca:45:fe:f6:fa:cb:46:10:dd:54:
                    c1:7c:85:e1:56:42:cb:a4:64:e5:18:22:5c:cf:24:
                    43:b6:a3:a3:18:a6:4e:54:0c:38:8d:10:bc:4a:50:
                    43:b0:29:45:03:8e:60:8b:89:08:c4:f8:37:3e:d9:
                    60:bd:28:b9:aa:d0:ce:80:71:bc:db:3b:35:37:e4:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:32:4E:EC:D8:1D:62:7C:33:36:9D:D7:C8:3A:D2:B2:E2:D2:22:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a1fb14-854d-30c0-a525-97ae57eb2931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.108.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:69:65:46:1b:0b:15:cf:ef:ec:df:0e:e0:30:6d:7a:40:8c:
         36:46:e6:79:1a:10:78:e7:c5:95:fe:b8:47:0c:dd:fe:7a:1a:
         23:e5:4d:ed:72:48:8a:45:49:3c:25:98:53:30:83:00:6d:98:
         f3:f9:95:69:2f:76:0a:12:d9:9d:c9:ae:fc:72:ab:e8:6e:ba:
         78:9d:ca:69:c2:d1:6e:e8:10:84:fd:45:02:e9:62:a9:b1:04:
         ab:85:09:51:d2:af:fd:6b:06:97:3e:1b:33:5a:fa:bf:b6:81:
         41:2c:9a:9d:8b:a4:7e:67:f2:32:88:36:8d:83:b6:34:2a:a3:
         41:19:bf:08:82:f0:28:c6:4c:54:bd:df:4f:5b:97:cf:eb:78:
         e0:1f:77:c7:91:78:c5:84:d3:2b:ba:7f:e3:4c:23:90:53:82:
         72:b0:92:f3:52:fe:16:98:1e:53:96:6e:76:41:02:37:09:82:
         ea:a4:bf:b3:18:72:cd:85:66:a5:95:7f:d0:4b:d6:7c:82:50:
         fb:47:cd:a7:70:7f:76:35:b5:48:8a:66:2b:df:46:ef:09:24:
         39:55:46:f4:07:40:7d:29:0e:3a:e4:43:0c:91:0f:40:a7:48:
         40:fd:4a:2e:c6:30:19:40:8f:ba:b9:30:d1:57:c2:66:62:d5:
         cc:1c:5e:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjB/oZV4ePiXb/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
M2JjYmQ0YzAtNzA2ZS00NmJhLTg1MTAtNzFhMmVlMzc1NTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyQkgHT/8dXtlwv6OgpBuoLB8KSGOV0NhDAM
UfZavYWLKsDcU0UWDsfKZb2jLV6AYDZzPlaVVN5XpWXpz9I8SMhYfaMc6P3EYcI1
OJwIXK+abCI1rEPpMlxl4PEILN+UNXv3qUMFHKkbPg32cxTE+wA0uVT63m1iwQy2
2Emk0KhkIbf5hx6fiRtyqz4jHhCUHVAPlvnMq3JFeOjhm2X/VnwHFPEnPoN0kvSB
NNWWATibyGNbWheByMpF/vb6y0YQ3VTBfIXhVkLLpGTlGCJczyRDtqOjGKZOVAw4
jRC8SlBDsClFA45gi4kIxPg3PtlgvSi5qtDOgHG82zs1N+TIjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNYyTuzYHWJ8Mzad18g60rLi0iIPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzdhMWZiMTQtODU0ZC0z
MGMwLWE1MjUtOTdhZTU3ZWIyOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZpZUYbCxXP7+zfDuAwbXpAjDZG5nkaEHjnxZX+uEcM3f56GiPlTe1y
SIpFSTwlmFMwgwBtmPP5lWkvdgoS2Z3Jrvxyq+huunidymnC0W7oEIT9RQLpYqmx
BKuFCVHSr/1rBpc+GzNa+r+2gUEsmp2LpH5n8jKINo2DtjQqo0EZvwiC8CjGTFS9
309bl8/reOAfd8eReMWE0yu6f+NMI5BTgnKwkvNS/haYHlOWbnZBAjcJguqkv7MY
cs2FZqWVf9BL1nyCUPtHzadwf3Y1tUiKZivfRu8JJDlVRvQHQH0pDjrkQwyRD0Cn
SED9Si7GMBlAj7q5MNFXwmZi1cwcXok=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:32:10 2025 by rpki-client