Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e3064ef-b43e-3a48-b384-513b2b198b54.roa
File:                     4e3064ef-b43e-3a48-b384-513b2b198b54.roa (raw, json)
Hash identifier:          zYxbCmvQDMyuHjajMDdufO1fgOmeU0LNDPqiRnZxs4Y=
Subject key identifier:   CD:08:39:08:76:11:3C:72:9A:94:1C:49:F3:50:9C:71:0A:EF:2E:B1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A92062EBA0F135FA846769600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e3064ef-b43e-3a48-b384-513b2b198b54.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.178.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:2e:ba:0f:13:5f:a8:46:76:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=37851b8f-4666-4a91-aa60-195896c92e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:01:50:76:e2:db:e2:63:53:aa:e0:4a:b6:
                    90:f0:89:85:88:9d:af:7b:e8:e3:8e:a2:b4:85:36:
                    92:cb:b7:0b:76:b1:6d:a9:28:8f:6d:8f:91:78:de:
                    fb:ea:b4:af:12:6f:c5:b9:97:74:df:86:6c:62:38:
                    04:0b:ed:49:b8:81:c7:71:ac:bd:b3:6a:73:26:6d:
                    ed:25:df:dd:57:66:56:a7:50:a5:8e:e3:87:83:10:
                    33:9f:82:a7:19:7d:80:3c:af:22:a8:ea:0f:29:33:
                    a8:0b:15:68:ec:9a:08:da:9b:55:2b:2f:e9:75:6c:
                    6f:7b:6b:2c:aa:6d:49:33:78:a8:80:25:db:b5:00:
                    7e:0a:e8:2f:3c:79:4f:81:74:46:dc:1a:48:f2:a2:
                    e8:9c:41:5a:a9:93:5d:93:a6:3a:a0:a4:c7:8d:8c:
                    bf:09:f1:70:09:3a:59:d5:f2:14:62:69:5c:e9:12:
                    9a:15:41:ba:b2:a2:8f:b1:93:43:b8:d9:35:91:73:
                    6a:94:4b:71:a2:12:e3:4c:85:ec:1b:6e:2c:51:c4:
                    d0:bc:c2:2b:e5:cb:c9:06:b3:ce:3b:c5:db:32:89:
                    66:dc:d7:5e:5a:5b:ca:e9:10:be:7a:95:c3:0e:ae:
                    2e:96:62:17:68:1a:f6:b3:b1:43:39:11:3d:c2:d2:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:08:39:08:76:11:3C:72:9A:94:1C:49:F3:50:9C:71:0A:EF:2E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e3064ef-b43e-3a48-b384-513b2b198b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:10:ba:2b:25:1e:1b:43:74:cc:85:22:f7:c0:a7:a8:58:6e:
         fa:c7:74:1f:92:5a:d4:75:55:b3:c8:a6:51:5b:54:d2:17:33:
         28:df:3e:e6:2f:a8:ae:14:2f:df:42:eb:b8:7c:16:2c:e8:43:
         55:5c:3b:f3:a8:4c:9c:43:5c:88:2e:32:dd:13:b4:6c:a5:c7:
         e4:c3:37:6f:64:14:45:2b:f1:76:c5:a6:83:66:ed:48:7c:18:
         de:54:e4:09:ef:37:e1:5b:d0:00:dc:19:ac:4b:9e:37:31:8c:
         ac:14:e1:5e:fb:77:90:90:41:35:17:8b:a3:2c:2b:1e:37:a4:
         d7:dd:05:0d:46:fe:95:33:02:52:c0:6d:51:d7:26:4f:bf:9c:
         1e:d9:7b:34:58:db:64:63:3f:05:a2:f9:26:0b:c8:5c:6f:fc:
         a4:49:47:9b:f9:a8:ac:c8:4b:02:14:82:a6:3d:17:d0:50:71:
         0e:e8:55:0d:d8:d0:4c:93:9c:73:28:9f:9c:30:f3:c4:0a:c1:
         8b:be:c4:f6:05:fe:a6:5f:05:a1:ae:9b:c9:ab:e2:99:ec:5c:
         de:ab:4c:2f:14:4b:31:d2:17:aa:3b:1f:14:90:21:d9:fe:8d:
         48:42:e4:3e:f4:00:fb:e6:96:11:8b:3a:cd:22:49:88:71:93:
         22:a8:8a:b9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqSBi66DxNfqEZ2lgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk
Mzc4NTFiOGYtNDY2Ni00YTkxLWFhNjAtMTk1ODk2YzkyZTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx8BUHbi2+JjU6rgSraQ8ImFiJ2ve+jjjqK0
hTaSy7cLdrFtqSiPbY+ReN776rSvEm/FuZd034ZsYjgEC+1JuIHHcay9s2pzJm3t
Jd/dV2ZWp1CljuOHgxAzn4KnGX2APK8iqOoPKTOoCxVo7JoI2ptVKy/pdWxve2ss
qm1JM3iogCXbtQB+CugvPHlPgXRG3BpI8qLonEFaqZNdk6Y6oKTHjYy/CfFwCTpZ
1fIUYmlc6RKaFUG6sqKPsZNDuNk1kXNqlEtxohLjTIXsG24sUcTQvMIr5cvJBrPO
O8XbMolm3NdeWlvK6RC+epXDDq4ulmIXaBr2s7FDORE9wtJTSwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM0IOQh2ETxympQcSfNQnHEK7y6xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGUzMDY0ZWYtYjQzZS0z
YTQ4LWIzODQtNTEzYjJiMTk4YjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIrIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcRC6KyUeG0N0zIUi98CnqFhu+sd0H5Ja1HVVs8imUVtU0hczKN8+5i+o
rhQv30LruHwWLOhDVVw786hMnENciC4y3RO0bKXH5MM3b2QURSvxdsWmg2btSHwY
3lTkCe834VvQANwZrEueNzGMrBThXvt3kJBBNReLoywrHjek190FDUb+lTMCUsBt
UdcmT7+cHtl7NFjbZGM/BaL5JgvIXG/8pElHm/morMhLAhSCpj0X0FBxDuhVDdjQ
TJOccyifnDDzxArBi77E9gX+pl8Foa6byavimexc3qtMLxRLMdIXqjsfFJAh2f6N
SELkPvQA++aWEYs6zSJJiHGTIqiKuQ==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:24:43 2025 by rpki-client