Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdbdb5c9-f640-3c21-954a-a05e73f38fc6.roa
File:                     fdbdb5c9-f640-3c21-954a-a05e73f38fc6.roa (raw, json)
Hash identifier:          rnMVRhEwH6Oh1FRVet2+ETRX3QdT8HtiYFixBoKkYyI=
Subject key identifier:   7A:1C:B7:61:E5:42:FE:58:8C:F1:B4:5B:71:5C:B0:3E:19:DE:A4:11
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A841173BD4A6D028A2E0071A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdbdb5c9-f640-3c21-954a-a05e73f38fc6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        34.1.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:73:bd:4a:6d:02:8a:2e:00:71:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=61baae54-dafd-43b6-9d64-f3691661b49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fb:38:5d:6d:0b:e9:c0:bc:af:c3:25:2f:61:
                    90:af:41:88:cb:f2:d7:56:a3:8f:57:7b:c3:85:59:
                    4d:db:8a:a5:29:40:9b:94:22:bc:3c:d7:ae:de:f2:
                    cc:68:3a:d5:3f:25:41:27:4b:a0:ab:74:2e:fe:2f:
                    c9:cf:b8:52:f4:40:bb:47:60:11:9f:8c:83:96:83:
                    63:15:87:cf:f2:90:99:a5:46:7f:7b:b8:7b:0e:3c:
                    f6:01:df:ad:a4:43:af:c1:86:77:13:79:72:9b:6a:
                    ac:bc:10:3f:d3:b8:73:c8:28:70:00:aa:f7:7f:22:
                    68:1d:53:b6:a2:62:0a:f0:0c:f5:77:95:c0:b7:44:
                    02:0b:5e:39:65:ca:96:be:64:86:99:90:f9:b0:3e:
                    34:26:3f:b0:6d:47:3d:cd:45:45:a8:53:44:4a:0d:
                    b2:41:76:f4:32:b7:8e:5e:88:35:ec:70:de:12:59:
                    04:72:3e:2e:26:c1:d1:7f:57:7f:26:92:29:41:f8:
                    c6:79:f6:4c:2a:3f:aa:d7:64:dc:15:fd:4f:6e:5d:
                    61:ac:ac:62:e9:da:cc:81:0f:26:07:5a:07:68:3c:
                    c7:2c:17:54:c3:8d:72:94:8b:d9:d1:f5:11:f2:c6:
                    f6:30:37:cc:39:6d:05:af:97:ca:dd:0c:94:ba:2d:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1C:B7:61:E5:42:FE:58:8C:F1:B4:5B:71:5C:B0:3E:19:DE:A4:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdbdb5c9-f640-3c21-954a-a05e73f38fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:34:d9:e4:87:cf:d1:62:d1:eb:e8:c9:21:37:18:3f:36:59:
         7a:df:14:fc:bb:50:74:0d:0b:38:c0:be:4a:15:0d:27:4f:85:
         87:3d:dd:e5:e8:0c:35:99:92:15:60:5b:18:f6:24:b8:36:12:
         c2:4e:dd:19:bd:49:4d:2b:95:99:0d:4a:58:fe:28:b5:6a:9e:
         09:5a:85:8b:c6:dc:bb:81:84:de:91:4e:97:77:e7:fc:05:d3:
         26:57:f4:6a:f9:47:55:e2:b4:6b:11:10:0c:01:33:98:95:ca:
         8a:8a:8e:ae:a1:ea:7e:6a:18:0d:f7:c2:9c:32:fb:46:b4:b2:
         1e:0a:58:6c:3f:dd:0a:3f:08:8a:cc:0e:83:4e:0a:b2:2b:ba:
         2b:32:cf:8c:90:f3:72:ee:b7:52:69:6d:99:d4:2d:13:6d:1d:
         fb:f4:1f:6b:db:04:7c:c0:de:45:42:7f:15:da:ce:68:65:aa:
         f4:b0:a1:74:da:a7:e8:48:89:2f:32:7d:5b:87:ac:b6:23:15:
         52:ad:e8:f1:5b:13:fb:86:d3:f4:89:89:c2:38:31:63:09:5c:
         76:47:99:07:0c:bf:4c:c6:83:75:02:0d:3b:63:39:1b:4b:f2:
         90:32:7b:ed:b0:32:46:84:ac:e4:3e:60:03:84:36:b7:37:fe:
         aa:64:58:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXO9Sm0Cii4AcaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NjFiYWFlNTQtZGFmZC00M2I2LTlkNjQtZjM2OTE2NjFiNDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPs4XW0L6cC8r8MlL2GQr0GIy/LXVqOPV3vD
hVlN24qlKUCblCK8PNeu3vLMaDrVPyVBJ0ugq3Qu/i/Jz7hS9EC7R2ARn4yDloNj
FYfP8pCZpUZ/e7h7Djz2Ad+tpEOvwYZ3E3lym2qsvBA/07hzyChwAKr3fyJoHVO2
omIK8Az1d5XAt0QCC145ZcqWvmSGmZD5sD40Jj+wbUc9zUVFqFNESg2yQXb0MreO
Xog17HDeElkEcj4uJsHRf1d/JpIpQfjGefZMKj+q12TcFf1Pbl1hrKxi6drMgQ8m
B1oHaDzHLBdUw41ylIvZ0fUR8sb2MDfMOW0Fr5fK3QyUui3JWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHoct2HlQv5YjPG0W3FcsD4Z3qQRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmRiZGI1YzktZjY0MC0z
YzIxLTk1NGEtYTA1ZTczZjM4ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGI02eSHz9Fi0evoySE3GD82WXrfFPy7UHQNCzjAvkoVDSdPhYc93eXo
DDWZkhVgWxj2JLg2EsJO3Rm9SU0rlZkNSlj+KLVqnglahYvG3LuBhN6RTpd35/wF
0yZX9Gr5R1XitGsREAwBM5iVyoqKjq6h6n5qGA33wpwy+0a0sh4KWGw/3Qo/CIrM
DoNOCrIruisyz4yQ83Lut1JpbZnULRNtHfv0H2vbBHzA3kVCfxXazmhlqvSwoXTa
p+hIiS8yfVuHrLYjFVKt6PFbE/uG0/SJicI4MWMJXHZHmQcMv0zGg3UCDTtjORtL
8pAye+2wMkaErOQ+YAOENrc3/qpkWCs=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:20:31 2025 by rpki-client