Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6eb2aa43-d4cb-3348-bd15-e5e6805fdfdd.roa
File:                     6eb2aa43-d4cb-3348-bd15-e5e6805fdfdd.roa (raw, json)
Hash identifier:          22tXw80wqWCTooG/iGftfV0PsJ8/qHTptT4Up8+TCus=
Subject key identifier:   15:E2:F8:15:8A:30:50:4F:FE:81:E2:1F:D8:3A:5D:D8:2B:F6:FA:12
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBEC5269578AF38327E180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6eb2aa43-d4cb-3348-bd15-e5e6805fdfdd.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.86.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ec:52:69:57:8a:f3:83:27:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=fa6c991a-748a-455d-898e-51b7f80f1984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:32:52:cb:3c:66:32:85:20:7a:78:a2:8d:44:
                    fa:68:a2:58:4e:0b:9e:e8:65:4a:2f:38:48:a6:a5:
                    47:f0:3d:d5:24:eb:c5:ef:a5:b1:87:2c:4c:b0:cd:
                    69:86:de:41:8f:11:2a:64:c3:01:8a:c8:20:f2:ec:
                    9f:b2:d3:1b:51:ce:05:f0:25:08:33:68:0f:0a:68:
                    1b:82:5e:74:c3:6e:a6:49:2e:a0:3f:36:ff:a6:12:
                    7c:0d:7c:06:a8:e1:66:5a:1c:32:1f:ac:89:d3:30:
                    91:d0:59:3a:32:2a:4c:f8:bc:4b:a6:ad:37:df:b2:
                    c4:1e:e1:66:cb:3c:b3:17:d4:a7:da:3c:50:f3:ec:
                    b6:fc:24:60:17:40:5d:1f:a8:5e:e5:ee:f9:7d:5f:
                    49:84:20:72:2a:45:b3:78:9b:f1:ed:fb:50:42:75:
                    f5:87:2d:12:92:85:66:32:31:bc:c3:d6:4f:f3:56:
                    cd:44:ff:c7:44:6b:2b:63:63:62:14:d0:9f:ad:22:
                    40:31:88:2f:53:b9:36:5f:c9:3c:d6:93:dd:53:8b:
                    7f:4e:a1:1b:5b:24:ae:bd:af:8a:50:14:6e:b4:ed:
                    fc:c6:2e:5a:08:3d:7b:b1:94:63:cd:b8:93:04:1b:
                    eb:0f:ab:58:e3:69:7c:e2:a5:e0:3d:29:c1:5a:2c:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E2:F8:15:8A:30:50:4F:FE:81:E2:1F:D8:3A:5D:D8:2B:F6:FA:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6eb2aa43-d4cb-3348-bd15-e5e6805fdfdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.86.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:18:cc:b2:30:8d:1a:43:d1:07:a6:23:90:cf:77:73:78:c9:
         84:f1:58:6a:31:62:00:7e:9f:d2:42:f6:85:a7:e7:f2:a6:b4:
         3a:47:d2:22:52:70:70:1d:da:e7:4f:f2:49:53:db:2f:c3:8a:
         95:5d:d4:2a:b3:24:ed:74:f3:78:b9:bc:d2:97:ad:f8:13:da:
         4c:5b:f2:7f:8a:f0:c9:2a:9b:93:b2:11:6d:90:9d:40:15:63:
         57:0f:e9:f0:42:f4:a7:c5:07:2b:8e:83:c0:1b:65:d9:bf:d4:
         03:e7:93:97:87:89:c0:53:f4:2d:9e:75:18:eb:d6:77:69:4f:
         aa:41:e7:01:18:f1:92:ff:9e:41:01:90:ad:32:d6:4f:38:82:
         f0:b7:0b:0a:11:c1:9b:1d:d6:96:1c:05:8f:3d:85:57:40:d5:
         db:48:5d:e1:ce:ce:b7:d1:87:e8:75:23:8e:85:91:af:8e:18:
         5d:47:de:26:a4:5c:2b:2d:2c:67:b2:f4:86:ce:6f:50:f0:43:
         89:17:12:85:59:77:84:86:4d:0a:0e:cc:c2:fa:d4:21:bc:c8:
         73:a5:70:66:1b:04:47:cb:6d:aa:63:b7:ad:da:cd:39:b2:29:
         a5:02:ca:bb:6b:af:42:74:1b:7c:8c:69:59:da:35:41:ee:45:
         3e:58:a6:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+xSaVeK84Mn4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
ZmE2Yzk5MWEtNzQ4YS00NTVkLTg5OGUtNTFiN2Y4MGYxOTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTJSyzxmMoUgeniijUT6aKJYTgue6GVKLzhI
pqVH8D3VJOvF76WxhyxMsM1pht5BjxEqZMMBisgg8uyfstMbUc4F8CUIM2gPCmgb
gl50w26mSS6gPzb/phJ8DXwGqOFmWhwyH6yJ0zCR0Fk6MipM+LxLpq0337LEHuFm
yzyzF9Sn2jxQ8+y2/CRgF0BdH6he5e75fV9JhCByKkWzeJvx7ftQQnX1hy0SkoVm
MjG8w9ZP81bNRP/HRGsrY2NiFNCfrSJAMYgvU7k2X8k81pPdU4t/TqEbWySuva+K
UBRutO38xi5aCD17sZRjzbiTBBvrD6tY42l84qXgPSnBWiwYWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXi+BWKMFBP/oHiH9g6Xdgr9voSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmViMmFhNDMtZDRjYi0z
MzQ4LWJkMTUtZTVlNjgwNWZkZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkYzLIwjRpD0QemI5DPd3N4yYTxWGoxYgB+n9JC9oWn5/KmtDpH0iJS
cHAd2udP8klT2y/DipVd1CqzJO1083i5vNKXrfgT2kxb8n+K8Mkqm5OyEW2QnUAV
Y1cP6fBC9KfFByuOg8AbZdm/1APnk5eHicBT9C2edRjr1ndpT6pB5wEY8ZL/nkEB
kK0y1k84gvC3CwoRwZsd1pYcBY89hVdA1dtIXeHOzrfRh+h1I46Fka+OGF1H3iak
XCstLGey9IbOb1DwQ4kXEoVZd4SGTQoOzML61CG8yHOlcGYbBEfLbapjt63azTmy
KaUCyrtrr0J0G3yMaVnaNUHuRT5Yphw=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:27:59 2025 by rpki-client