Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa
File:                     861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa (raw, json)
Hash identifier:          GLnIQOapZHlZ5n9sfzQEWaqiaQ6dwFxMp6PdRylcH2I=
Subject key identifier:   34:25:AA:41:E9:E9:86:C4:E7:79:08:A5:EB:4B:B5:A7:52:3C:A3:42
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBD9DCE953752B33BE72C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        34.98.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:d9:dc:e9:53:75:2b:33:be:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=6b583537-7115-4d07-8d0b-fe32a5aabf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:52:a0:a8:81:60:9d:8c:b6:59:b8:e3:ac:
                    b6:c9:18:55:8d:39:e8:e8:ab:8d:3f:78:3c:5c:71:
                    9d:df:3d:e5:e8:6f:8f:db:98:5c:d1:20:94:70:1f:
                    33:b2:b8:47:6b:8a:59:3b:47:57:95:b1:ea:8a:46:
                    cc:5c:b3:37:42:cc:5a:d9:cf:7d:a2:0e:44:68:14:
                    e4:98:d5:05:ac:61:3b:bd:da:4a:b7:b6:6e:ce:93:
                    c4:b6:f3:ba:66:a7:e5:d3:13:31:60:79:c8:15:9c:
                    80:3d:ac:5b:36:e9:5a:da:82:d6:93:67:c8:5e:8c:
                    72:ed:1f:ee:0e:6d:ea:d6:f7:ee:7f:2f:a4:7d:7b:
                    97:d2:9d:73:99:b0:2b:f0:88:af:1b:67:c3:18:06:
                    20:f3:89:b2:f8:46:fa:f9:8f:09:22:5e:bd:fe:c5:
                    69:ff:08:c8:68:2b:2f:51:d2:46:ca:94:14:89:90:
                    8f:fe:4d:00:3c:cf:86:3b:6b:26:c1:e5:d9:70:92:
                    77:a8:1e:d8:99:ad:e5:54:4f:ae:73:96:c4:13:fd:
                    2c:18:2d:af:90:ec:13:dc:78:b9:50:51:e3:06:c4:
                    28:f2:46:ce:72:b1:be:67:b2:90:31:dc:42:41:90:
                    b5:0f:c2:0e:d1:9d:93:b7:de:b9:8d:36:65:6f:fa:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:AA:41:E9:E9:86:C4:E7:79:08:A5:EB:4B:B5:A7:52:3C:A3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/861e8340-f5d3-3292-9a8e-6ab9c6176b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9b:b5:03:b2:5a:a8:c7:13:9b:47:25:fb:1e:2f:dc:2a:90:
         15:96:a2:bf:52:3c:5c:c2:a6:65:3b:fb:8a:86:3f:8f:55:bf:
         35:a1:73:53:f3:cb:d9:e2:21:76:c6:a9:3e:39:84:c2:6c:c2:
         6b:f5:f6:2c:ad:9f:99:ec:06:8d:f9:cd:07:3b:db:ec:9f:79:
         4b:74:d7:2b:e2:bf:2c:9a:86:00:a8:fd:c7:5b:8a:31:fa:05:
         35:90:a3:f2:be:b0:16:01:f8:4e:43:b2:da:8d:5c:b1:31:01:
         0e:fa:1f:ff:b7:22:1c:83:53:dd:34:f4:9d:63:f1:b4:ee:01:
         5b:f8:b7:ee:51:78:5b:c0:78:cc:c7:ad:7e:69:c4:90:86:4c:
         fd:5a:a8:3b:10:72:69:dd:97:fe:28:b9:de:1a:22:1e:b4:e9:
         f6:62:5b:df:d2:47:0f:6c:34:a1:de:88:ce:15:33:99:ff:25:
         43:65:6a:54:f1:45:b5:8a:9b:08:d8:79:b0:1b:db:85:34:5e:
         de:10:91:fd:c0:34:ff:3e:ac:8d:ae:40:29:d4:97:7f:6f:14:
         4f:df:db:b2:a4:f9:b6:4f:d1:3c:8f:7f:d8:2d:10:9b:e0:55:
         b9:a2:fc:a2:49:7e:a7:8e:db:cf:6f:5d:52:68:7a:29:12:b8:
         cd:69:4d:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29nc6VN1KzO+csAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
NmI1ODM1MzctNzExNS00ZDA3LThkMGItZmUzMmE1YWFiZjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCNSoKiBYJ2Mtlm446y2yRhVjTno6KuNP3g8
XHGd3z3l6G+P25hc0SCUcB8zsrhHa4pZO0dXlbHqikbMXLM3Qsxa2c99og5EaBTk
mNUFrGE7vdpKt7ZuzpPEtvO6Zqfl0xMxYHnIFZyAPaxbNula2oLWk2fIXoxy7R/u
Dm3q1vfufy+kfXuX0p1zmbAr8IivG2fDGAYg84my+Eb6+Y8JIl69/sVp/wjIaCsv
UdJGypQUiZCP/k0APM+GO2smweXZcJJ3qB7Yma3lVE+uc5bEE/0sGC2vkOwT3Hi5
UFHjBsQo8kbOcrG+Z7KQMdxCQZC1D8IO0Z2Tt965jTZlb/rQQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDQlqkHp6YbE53kIpetLtadSPKNCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODYxZTgzNDAtZjVkMy0z
MjkyLTlhOGUtNmFiOWM2MTc2YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBImKWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGbtQOyWqjHE5tHJfseL9wqkBWWor9SPFzCpmU7+4qGP49VvzWhc1Pz
y9niIXbGqT45hMJswmv19iytn5nsBo35zQc72+yfeUt01yvivyyahgCo/cdbijH6
BTWQo/K+sBYB+E5DstqNXLExAQ76H/+3IhyDU9009J1j8bTuAVv4t+5ReFvAeMzH
rX5pxJCGTP1aqDsQcmndl/4oud4aIh606fZiW9/SRw9sNKHeiM4VM5n/JUNlalTx
RbWKmwjYebAb24U0Xt4Qkf3ANP8+rI2uQCnUl39vFE/f27Kk+bZP0TyPf9gtEJvg
Vbmi/KJJfqeO289vXVJoeikSuM1pTUg=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:28:49 2025 by rpki-client