Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58766ae1-236a-383c-8a56-0bcc5505f94c.roa
File:                     58766ae1-236a-383c-8a56-0bcc5505f94c.roa (raw, json)
Hash identifier:          ofSoMEUvIqk6AZsQS6Cf0hpkUCHYMgNMJeVAgQwC/o4=
Subject key identifier:   9D:48:99:01:A5:67:F8:59:5E:AD:24:A2:66:FB:DD:67:4A:FA:98:D5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A8C70C898519FE268D69BA100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58766ae1-236a-383c-8a56-0bcc5505f94c.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.155.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c8:98:51:9f:e2:68:d6:9b:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=8e1c58d2-9208-43ff-8726-ff2e858a352b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:4e:08:f2:09:32:0f:e9:7e:cc:51:92:60:
                    03:dc:30:8a:36:44:3a:ba:91:ed:47:b0:1c:68:ee:
                    39:c6:48:f5:85:70:86:68:47:c1:20:37:c4:9f:17:
                    59:9e:02:56:9d:03:50:0b:82:ed:eb:ad:11:42:de:
                    6f:2e:70:7a:c8:b8:52:c6:9b:d2:f7:d6:2e:c0:53:
                    3f:47:ca:56:cb:15:04:fb:80:1a:64:89:a9:5e:b3:
                    c8:54:1c:17:9b:ba:46:19:a6:5d:cd:13:fc:76:98:
                    33:82:b6:4a:f8:67:af:c1:7a:c5:41:17:59:66:34:
                    07:e8:f4:7c:e9:d8:a9:3a:eb:b3:d7:45:e8:f7:b9:
                    34:4c:a6:4b:59:fc:de:13:4b:a6:ab:cd:42:6c:e6:
                    61:1e:b8:75:d4:39:f5:a1:0c:78:d8:1c:c1:e9:50:
                    75:25:2a:7e:60:fe:38:d0:bf:34:26:db:c8:97:25:
                    52:49:0a:58:04:65:a4:f2:ea:ec:be:c3:ed:18:ea:
                    22:d8:ac:a6:b3:19:eb:8c:7d:da:58:11:c4:f4:d7:
                    32:3f:d2:a8:f9:94:e7:f4:03:a6:90:5e:f5:33:e8:
                    81:1f:f1:a3:65:7b:59:b3:57:1c:bd:5e:63:75:b9:
                    0d:2a:c5:4f:db:56:e7:f7:d8:e6:d0:b7:4e:7f:db:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:99:01:A5:67:F8:59:5E:AD:24:A2:66:FB:DD:67:4A:FA:98:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58766ae1-236a-383c-8a56-0bcc5505f94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.155.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:5a:c3:ac:6b:ab:10:7a:79:f5:7b:d2:d5:7d:4e:79:47:
         ba:1b:f6:9e:59:d3:4f:71:87:eb:e3:18:41:e3:8f:10:e9:3c:
         29:67:a8:ab:8d:ba:11:cf:2b:bc:c4:34:6a:42:cb:c9:4b:f4:
         e2:4c:fc:38:82:fc:96:6e:ab:c9:e1:e0:2f:de:28:dc:ec:4d:
         84:ff:2a:d9:af:db:1b:84:bd:38:b5:e2:c8:aa:2e:c7:3d:d7:
         01:7e:f0:3a:e5:10:50:22:0d:f5:df:d4:f4:33:46:a5:82:4e:
         1e:b9:49:63:c5:fd:b3:e6:9a:3d:42:d8:2f:3e:25:06:a5:b6:
         ed:d7:23:68:65:f8:09:6a:f7:89:a0:43:4d:ad:5d:0f:69:9a:
         f0:91:8b:ae:a5:e7:6d:b3:db:7e:f7:81:fd:65:77:eb:9c:03:
         ce:84:d5:ff:32:1e:1a:f4:1a:b1:3d:7f:48:59:2f:d9:42:ff:
         84:b8:eb:0d:49:00:f3:82:1b:7f:67:12:5c:6f:c2:f4:dd:d5:
         8b:58:b7:b0:92:a8:c0:f9:9d:8b:45:d9:57:9f:b5:0f:4a:95:
         63:16:e4:5e:47:05:83:e7:f5:d1:56:48:e4:5d:14:46:19:b4:
         68:07:98:10:ef:96:9c:e9:61:eb:14:f2:65:79:f3:87:7d:70:
         e1:68:63:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMiYUZ/iaNaboQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
OGUxYzU4ZDItOTIwOC00M2ZmLTg3MjYtZmYyZTg1OGEzNTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApghOCPIJMg/pfsxRkmAD3DCKNkQ6upHtR7Ac
aO45xkj1hXCGaEfBIDfEnxdZngJWnQNQC4Lt660RQt5vLnB6yLhSxpvS99YuwFM/
R8pWyxUE+4AaZImpXrPIVBwXm7pGGaZdzRP8dpgzgrZK+GevwXrFQRdZZjQH6PR8
6dipOuuz10Xo97k0TKZLWfzeE0umq81CbOZhHrh11Dn1oQx42BzB6VB1JSp+YP44
0L80JtvIlyVSSQpYBGWk8ursvsPtGOoi2KymsxnrjH3aWBHE9NcyP9Ko+ZTn9AOm
kF71M+iBH/GjZXtZs1ccvV5jdbkNKsVP21bn99jm0LdOf9vsaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1ImQGlZ/hZXq0komb73WdK+pjVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg3NjZhZTEtMjM2YS0z
ODNjLThhNTYtMGJjYzU1MDVmOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOsWsOsa6sQenn1e9LVfU55R7ob9p5Z009xh+vjGEHjjxDpPClnqKuN
uhHPK7zENGpCy8lL9OJM/DiC/JZuq8nh4C/eKNzsTYT/Ktmv2xuEvTi14siqLsc9
1wF+8DrlEFAiDfXf1PQzRqWCTh65SWPF/bPmmj1C2C8+JQaltu3XI2hl+Alq94mg
Q02tXQ9pmvCRi66l522z2373gf1ld+ucA86E1f8yHhr0GrE9f0hZL9lC/4S46w1J
APOCG39nElxvwvTd1YtYt7CSqMD5nYtF2VeftQ9KlWMW5F5HBYPn9dFWSORdFEYZ
tGgHmBDvlpzpYesU8mV584d9cOFoY1o=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:22:21 2025 by rpki-client