Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a149bb40-995b-321b-8a41-f914ff9c52bf.roa
File:                     a149bb40-995b-321b-8a41-f914ff9c52bf.roa (raw, json)
Hash identifier:          7EN1rW14YvpUnan/e++5HKV5Hy0bAdIUkgtm8qSgsF8=
Subject key identifier:   AA:28:87:A6:B8:CC:02:5C:7F:E9:A3:8E:FE:6C:80:D7:04:84:E6:C6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBE66A7CBBFDC58055B9E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a149bb40-995b-321b-8a41-f914ff9c52bf.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.151.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:e6:6a:7c:bb:fd:c5:80:55:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=ec42e956-c35b-4f45-8e31-09a9f25a88b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:3b:14:02:27:8b:84:49:84:2c:b7:02:3c:
                    70:ca:af:70:ab:a9:81:af:3f:dc:d3:a4:f7:19:32:
                    92:f2:1d:04:3a:5b:dd:7b:3f:bd:a9:b1:71:2c:0f:
                    96:a6:8e:11:2c:1e:d8:fb:8f:b8:8a:01:c1:ae:e6:
                    11:f2:7f:fd:6f:a4:97:8a:ce:25:15:b6:17:3b:f0:
                    36:d2:02:c3:e3:45:29:af:f3:9f:95:cb:75:8f:97:
                    b7:49:73:af:18:f0:a3:4b:f2:7f:85:7a:83:3b:b0:
                    d3:8b:b7:cd:e0:d2:6d:d7:98:5e:b9:ea:03:ff:84:
                    46:c4:0b:69:c3:e3:a8:08:43:6b:ca:bd:b4:13:c1:
                    ea:44:da:52:4e:98:04:1a:aa:53:76:95:ea:fd:c2:
                    3c:51:6e:86:89:d3:5b:c4:1e:15:16:dd:aa:e3:e5:
                    0a:b8:7f:11:21:b2:3a:0f:5a:18:19:4c:ae:40:2d:
                    e7:2e:5a:cf:ae:48:be:6a:0e:ec:44:c2:ec:1b:9a:
                    6b:a4:79:c5:a1:25:c3:7a:03:28:77:01:8c:d4:a9:
                    fa:48:54:03:3e:f5:ee:26:04:02:4d:e9:2a:5e:94:
                    ff:71:41:ff:7e:79:4e:dc:36:54:84:e2:56:09:ce:
                    52:97:f6:26:88:20:4c:bd:6c:dd:ff:2e:b1:07:77:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:28:87:A6:B8:CC:02:5C:7F:E9:A3:8E:FE:6C:80:D7:04:84:E6:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a149bb40-995b-321b-8a41-f914ff9c52bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.151.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4c:5a:a9:c4:7a:b8:13:15:9a:4f:7d:ee:66:47:25:5d:0c:
         f2:05:f5:5b:98:ca:58:0d:04:da:74:a1:18:e9:6e:26:9b:f2:
         be:fb:43:c8:de:25:80:60:6c:d2:33:60:35:25:e9:49:87:e4:
         9d:7a:3a:5c:14:ae:c2:f1:11:a3:4c:53:26:61:9e:f9:0e:1c:
         ad:ff:71:c3:ec:3b:d3:cb:a8:66:12:de:fa:5e:6f:2d:a4:2d:
         f6:ce:36:b2:19:6e:78:d2:4e:4d:75:36:a3:68:cd:59:d0:09:
         7a:dc:48:6b:19:46:29:a8:db:4e:e2:cb:16:1a:5d:0e:ff:38:
         62:3d:d5:a4:ae:35:cb:58:97:02:00:ec:db:ff:dd:65:1b:43:
         ed:50:29:5c:2c:4d:fd:13:d9:15:10:2a:10:8e:1c:28:76:de:
         fc:72:1a:5c:6b:5a:0d:31:c0:6f:9f:34:f3:23:42:29:39:41:
         20:22:b3:9d:da:64:0d:8f:53:de:e7:fd:1e:cb:4a:74:85:44:
         03:80:dc:24:09:9b:79:1c:99:de:4a:4e:2a:08:ff:05:45:35:
         05:33:40:6f:19:c9:f5:72:2a:ba:43:f0:fc:3c:54:b9:9c:2b:
         78:8e:a1:27:c1:53:bf:3f:55:58:97:b7:87:c7:f1:43:fe:c8:
         d8:e7:5e:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+ZqfLv9xYBVueAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
ZWM0MmU5NTYtYzM1Yi00ZjQ1LThlMzEtMDlhOWYyNWE4OGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBY7FAIni4RJhCy3Ajxwyq9wq6mBrz/c06T3
GTKS8h0EOlvdez+9qbFxLA+Wpo4RLB7Y+4+4igHBruYR8n/9b6SXis4lFbYXO/A2
0gLD40Upr/Oflct1j5e3SXOvGPCjS/J/hXqDO7DTi7fN4NJt15heueoD/4RGxAtp
w+OoCENryr20E8HqRNpSTpgEGqpTdpXq/cI8UW6GidNbxB4VFt2q4+UKuH8RIbI6
D1oYGUyuQC3nLlrPrki+ag7sRMLsG5prpHnFoSXDegModwGM1Kn6SFQDPvXuJgQC
TekqXpT/cUH/fnlO3DZUhOJWCc5Sl/YmiCBMvWzd/y6xB3cHPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKooh6a4zAJcf+mjjv5sgNcEhObGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTE0OWJiNDAtOTk1Yi0z
MjFiLThhNDEtZjkxNGZmOWM1MmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpdgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNMWqnEergTFZpPfe5mRyVdDPIF9VuYylgNBNp0oRjpbiab8r77Q8je
JYBgbNIzYDUl6UmH5J16OlwUrsLxEaNMUyZhnvkOHK3/ccPsO9PLqGYS3vpeby2k
LfbONrIZbnjSTk11NqNozVnQCXrcSGsZRimo207iyxYaXQ7/OGI91aSuNctYlwIA
7Nv/3WUbQ+1QKVwsTf0T2RUQKhCOHCh23vxyGlxrWg0xwG+fNPMjQik5QSAis53a
ZA2PU97n/R7LSnSFRAOA3CQJm3kcmd5KTioI/wVFNQUzQG8ZyfVyKrpD8Pw8VLmc
K3iOoSfBU78/VViXt4fH8UP+yNjnXko=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:19:41 2025 by rpki-client