Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74d5b8f7-3452-35f1-a269-94f8ad118002.roa
File:                     74d5b8f7-3452-35f1-a269-94f8ad118002.roa (raw, json)
Hash identifier:          lte8Nb5FyyvWaeMUxrTPqYrKdekn4fPa3dO1Z7vc2Qw=
Subject key identifier:   FE:81:0D:51:10:5B:D4:20:2B:68:C1:41:F0:5C:48:1E:E3:8F:63:F3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBBE6E05FB00BBFD991480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74d5b8f7-3452-35f1-a269-94f8ad118002.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        34.177.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:be:6e:05:fb:00:bb:fd:99:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=721b2ef5-ee72-44bd-a89f-4aa03007ca63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:88:e1:f8:67:16:6c:4e:c9:a0:ec:e9:b2:
                    23:6c:b2:37:24:e9:12:3e:60:1f:ef:64:61:36:a4:
                    b3:8d:f0:c1:d8:a5:df:68:d5:b4:00:17:e4:c4:60:
                    6d:1e:d2:69:d8:5f:58:7f:07:70:00:5e:fc:41:66:
                    64:36:2a:6c:f0:00:9a:6e:54:74:d7:68:3e:ee:8c:
                    50:ae:3b:eb:d9:6f:89:f9:4d:cb:5d:34:f3:a3:b2:
                    8d:83:1c:bb:4f:3f:44:4a:5a:7e:21:c3:e2:86:53:
                    8e:70:28:e4:70:1f:51:59:64:4c:57:44:a5:d2:7b:
                    0e:d0:18:08:a7:58:45:f4:32:9c:67:3b:2f:87:7d:
                    dd:bb:80:43:e8:d4:de:41:3f:2c:34:df:0b:27:4f:
                    62:2a:1d:95:99:10:71:72:77:fb:4f:55:7b:df:31:
                    18:cd:19:0e:71:ad:a1:19:12:de:02:56:92:17:42:
                    67:82:61:07:09:a9:16:4b:ae:08:1b:e8:70:9f:79:
                    c3:2c:7b:20:11:3b:f1:bc:64:17:93:4a:71:b4:51:
                    cf:5b:ea:0b:86:3e:44:2f:df:d9:e6:74:0e:ae:2e:
                    1e:72:e6:1f:e3:96:2a:dc:72:88:e7:5a:27:03:db:
                    9b:79:31:f6:8a:70:f5:f9:51:bd:94:3a:77:3a:80:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:81:0D:51:10:5B:D4:20:2B:68:C1:41:F0:5C:48:1E:E3:8F:63:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74d5b8f7-3452-35f1-a269-94f8ad118002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:15:07:69:f3:1d:24:81:9c:a2:38:d6:a5:30:4d:8b:85:09:
         e7:af:46:e5:69:7b:63:ec:da:50:d3:03:33:07:8d:12:12:6e:
         6f:f2:ba:96:63:86:b7:10:b9:a0:86:c3:28:0f:ed:b6:3e:cd:
         2a:fe:4c:d2:0d:bb:52:96:69:4f:1f:cc:35:6c:78:17:f5:ed:
         30:39:0e:cf:ca:13:33:b4:aa:c4:f4:08:f4:27:2c:b2:42:9e:
         75:ff:65:fa:99:84:99:00:b4:14:eb:e1:c3:d1:b0:04:52:83:
         76:3f:59:3b:d0:8c:db:2b:08:b5:b0:a5:90:ef:ff:d3:68:21:
         38:b1:ec:77:b3:4a:8e:d7:d4:e4:23:46:4f:6a:26:8b:6b:e7:
         94:52:82:db:04:d0:18:b5:25:cb:c8:df:12:9e:9a:9b:6d:b0:
         5e:9b:dc:69:0c:1e:ac:e2:11:f3:d0:fc:6c:12:35:00:55:d8:
         9a:ce:9d:62:20:ca:d7:61:e5:6d:6a:e8:d3:9c:6b:d3:1e:b2:
         d5:46:99:b9:74:f3:0c:f9:07:93:12:74:4b:a0:46:78:6f:76:
         fe:9f:65:29:03:ed:75:c6:d8:bc:39:9d:0e:fc:88:9c:8f:ee:
         ec:ed:93:66:5a:78:f1:1e:81:8b:32:13:f6:b4:c2:4b:78:49:
         c6:98:8c:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqG275uBfsAu/2ZFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
NzIxYjJlZjUtZWU3Mi00NGJkLWE4OWYtNGFhMDMwMDdjYTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9WI4fhnFmxOyaDs6bIjbLI3JOkSPmAf72Rh
NqSzjfDB2KXfaNW0ABfkxGBtHtJp2F9YfwdwAF78QWZkNips8ACablR012g+7oxQ
rjvr2W+J+U3LXTTzo7KNgxy7Tz9ESlp+IcPihlOOcCjkcB9RWWRMV0Sl0nsO0BgI
p1hF9DKcZzsvh33du4BD6NTeQT8sNN8LJ09iKh2VmRBxcnf7T1V73zEYzRkOca2h
GRLeAlaSF0JngmEHCakWS64IG+hwn3nDLHsgETvxvGQXk0pxtFHPW+oLhj5EL9/Z
5nQOri4ecuYf45Yq3HKI51onA9ubeTH2inD1+VG9lDp3OoBSlQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP6BDVEQW9QgK2jBQfBcSB7jj2PzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzRkNWI4ZjctMzQ1Mi0z
NWYxLWEyNjktOTRmOGFkMTE4MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIrEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoRUHafMdJIGcojjWpTBNi4UJ569G5Wl7Y+zaUNMDMweNEhJub/K6lmOG
txC5oIbDKA/ttj7NKv5M0g27UpZpTx/MNWx4F/XtMDkOz8oTM7SqxPQI9CcsskKe
df9l+pmEmQC0FOvhw9GwBFKDdj9ZO9CM2ysItbClkO//02ghOLHsd7NKjtfU5CNG
T2omi2vnlFKC2wTQGLUly8jfEp6am22wXpvcaQwerOIR89D8bBI1AFXYms6dYiDK
12HlbWro05xr0x6y1UaZuXTzDPkHkxJ0S6BGeG92/p9lKQPtdcbYvDmdDvyInI/u
7O2TZlp48R6BizIT9rTCS3hJxpiMRA==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:30:28 2025 by rpki-client