Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa
File:                     aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa (raw, json)
Hash identifier:          7CNW2OaoqzkoQY0qriAaJh8qwTey17JhWmj6G6FR5Bs=
Subject key identifier:   B4:7F:A5:0A:E0:2A:44:D7:7B:31:A0:DF:04:4A:9D:00:17:8E:E7:BB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB913117CAA38E4C58C340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.19.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:91:31:17:ca:a3:8e:4c:58:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=3d1d8578-3baa-4e99-a25f-2395affc5c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:3e:a4:26:76:42:41:86:69:d0:6a:f7:05:
                    96:db:80:d9:00:9d:5c:2d:0c:b6:99:96:e9:61:b5:
                    d8:1c:f3:27:f6:12:f5:3d:6e:22:ba:ef:5f:27:03:
                    28:e2:4b:90:17:7a:d3:68:55:4b:7f:30:ec:28:80:
                    f4:2c:55:dc:fd:21:cf:a7:3a:46:e5:e0:b6:9f:14:
                    02:25:33:7d:7a:60:6c:b1:f0:b7:ea:05:e5:8a:2d:
                    ec:12:22:77:b3:6e:07:83:3d:00:35:d1:5e:50:96:
                    dd:5f:5e:1d:59:e6:c5:b9:d2:e1:90:8b:5d:99:1a:
                    8c:04:f7:73:a2:2a:ea:e0:4b:57:fa:42:1f:81:4f:
                    e8:2e:79:4d:57:ac:01:64:d4:c7:a7:3e:67:db:67:
                    62:05:94:8e:fe:61:d9:80:73:77:94:ce:ca:ac:86:
                    d4:3e:ff:88:0d:ab:a7:ca:29:b1:de:bc:51:af:d8:
                    5c:23:4d:c9:04:e8:f9:ca:64:4a:2a:81:77:ff:4c:
                    8a:78:ca:92:17:c0:e9:06:fe:4a:72:bc:2c:ac:ee:
                    f3:d7:6b:88:aa:14:64:ce:c7:3c:c6:81:7d:d0:42:
                    83:9e:6f:7f:db:d4:8d:8f:78:5f:b7:20:34:4d:8c:
                    cc:76:0f:d6:c2:b4:5b:85:40:c9:2d:dc:3a:0e:9a:
                    b3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7F:A5:0A:E0:2A:44:D7:7B:31:A0:DF:04:4A:9D:00:17:8E:E7:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.19.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:b5:b1:0b:f4:81:4e:b9:c8:23:e6:87:be:2e:c3:6a:46:
         7e:2f:fb:1c:fb:94:8d:d9:c1:81:ac:76:37:e7:36:c4:ed:2a:
         fd:94:30:26:46:d5:d9:2a:7c:59:e7:d5:6d:3e:51:67:bc:63:
         fc:e6:03:de:be:a8:b7:1d:9c:7c:49:d0:e1:27:82:4b:12:66:
         e0:4a:43:c0:98:1d:65:c0:af:d1:21:9b:7c:44:5c:03:9f:ae:
         1a:9c:e1:3f:63:87:c0:11:85:57:8d:b1:29:de:01:53:62:18:
         29:4d:d3:ed:06:ca:a8:90:37:7b:dc:f1:c8:57:f7:14:d1:4f:
         04:ef:e0:c9:c9:6f:44:81:a2:90:1f:ab:63:70:5a:36:8a:d7:
         ed:60:1f:27:58:b3:d2:ca:69:11:92:97:22:02:d1:8f:27:b8:
         e1:22:c8:de:5e:3d:a0:bb:76:08:70:91:e7:e1:b5:c5:a7:b8:
         57:12:a8:bd:3b:3f:df:58:15:b5:7e:66:aa:fe:f4:30:d6:b9:
         a4:64:10:57:2d:a0:c7:ec:0c:0d:30:60:ba:bf:1c:c3:96:ef:
         63:01:31:9a:24:f1:3c:59:72:bb:27:09:eb:a1:a6:77:53:d7:
         5a:1c:1a:17:49:f1:50:25:a1:6b:92:92:c9:ce:7d:0c:92:b2:
         ab:4a:51:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25ExF8qjjkxYw0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
M2QxZDg1NzgtM2JhYS00ZTk5LWEyNWYtMjM5NWFmZmM1YzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cQ+pCZ2QkGGadBq9wWW24DZAJ1cLQy2mZbp
YbXYHPMn9hL1PW4iuu9fJwMo4kuQF3rTaFVLfzDsKID0LFXc/SHPpzpG5eC2nxQC
JTN9emBssfC36gXlii3sEiJ3s24Hgz0ANdFeUJbdX14dWebFudLhkItdmRqMBPdz
oirq4EtX+kIfgU/oLnlNV6wBZNTHpz5n22diBZSO/mHZgHN3lM7KrIbUPv+IDaun
yimx3rxRr9hcI03JBOj5ymRKKoF3/0yKeMqSF8DpBv5KcrwsrO7z12uIqhRkzsc8
xoF90EKDnm9/29SNj3hftyA0TYzMdg/WwrRbhUDJLdw6DpqzEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLR/pQrgKkTXezGg3wRKnQAXjue7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEyNTVkYzEtYzMyZC0z
NWE4LWI0ZTgtMjdhN2NlOGQ1M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4DtbEL9IFOucgj5oe+LsNqRn4v+xz7lI3ZwYGsdjfnNsTtKv2UMCZG
1dkqfFnn1W0+UWe8Y/zmA96+qLcdnHxJ0OEngksSZuBKQ8CYHWXAr9Ehm3xEXAOf
rhqc4T9jh8ARhVeNsSneAVNiGClN0+0GyqiQN3vc8chX9xTRTwTv4MnJb0SBopAf
q2NwWjaK1+1gHydYs9LKaRGSlyIC0Y8nuOEiyN5ePaC7dghwkefhtcWnuFcSqL07
P99YFbV+Zqr+9DDWuaRkEFctoMfsDA0wYLq/HMOW72MBMZok8TxZcrsnCeuhpndT
11ocGhdJ8VAloWuSksnOfQySsqtKUU0=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:37:56 2025 by rpki-client