Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ead14fad-c2a3-3cca-b165-d3f9e514759e.roa
File:                     ead14fad-c2a3-3cca-b165-d3f9e514759e.roa (raw, json)
Hash identifier:          1wuV1Sqkjfb1uhivZVVlve7SbKRmpAT02VbRbhNTUNk=
Subject key identifier:   9B:BF:8E:A4:D5:A6:E6:1D:12:66:DB:05:1A:70:FF:FF:CB:0F:0C:57
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B40B0337163AF29159B1E6900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ead14fad-c2a3-3cca-b165-d3f9e514759e.roa
Signing time:             Sat 20 Sep 2025 02:34:27 +0000
ROA not before:           Sat 20 Sep 2025 02:34:27 +0000
ROA not after:            Fri 19 Dec 2025 03:34:27 +0000
asID:                     11344
IP address blocks:        34.143.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:b0:33:71:63:af:29:15:9b:1e:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 20 02:34:27 2025 GMT
            Not After : Dec 19 03:34:27 2025 GMT
        Subject: CN=09685168-a83b-47e8-9887-c32c15950c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a3:c6:59:e0:ad:87:b2:bd:58:0f:00:9a:d2:
                    3d:65:66:c5:bb:29:89:52:02:9d:8c:76:d8:9d:bf:
                    32:e1:b7:68:c4:d3:cd:56:3a:f6:73:2a:fb:97:ab:
                    29:92:f6:68:b2:e9:65:5a:82:30:c9:c9:70:ef:38:
                    4b:98:81:43:9a:bd:49:56:9a:7d:b0:39:a2:c9:84:
                    18:62:39:d7:70:ea:c5:8b:30:e9:b2:6f:ed:bd:95:
                    b7:de:41:40:3d:11:71:72:8b:fb:5a:83:df:30:7a:
                    81:6a:7c:a3:d9:fb:07:3e:cc:1e:90:53:5b:d9:30:
                    e2:18:52:36:e7:8a:67:f6:f4:a3:34:e6:f0:2a:bb:
                    d0:82:9f:8d:0f:74:d3:83:37:f9:ca:02:ec:ad:5a:
                    ec:57:20:b5:2b:3e:f2:fc:05:3e:8b:77:81:3e:25:
                    38:f5:76:1d:3e:ad:a2:e5:6c:90:e8:cd:bb:6d:59:
                    2e:27:28:39:a9:6a:8f:e6:2b:9d:92:a5:7a:a0:0d:
                    d2:fa:c1:27:85:b0:8b:97:9f:26:6e:31:65:31:05:
                    02:f8:ec:43:12:26:4e:72:0c:e1:a5:71:b1:63:e5:
                    94:91:89:9a:50:4f:b6:06:cc:a8:c3:dc:10:75:18:
                    ea:0a:df:e4:ba:63:71:fb:43:ce:6c:00:a2:f8:ba:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BF:8E:A4:D5:A6:E6:1D:12:66:DB:05:1A:70:FF:FF:CB:0F:0C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ead14fad-c2a3-3cca-b165-d3f9e514759e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.143.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ae:7e:96:fa:ee:13:3b:0e:72:c1:61:d6:53:93:69:66:6f:
         dd:7a:1c:84:00:a9:90:d4:25:3d:69:c4:8a:86:37:63:e7:2e:
         fd:96:cf:6e:5e:7d:b7:18:05:11:28:31:fd:af:f6:ce:96:94:
         6e:5b:79:85:c5:d0:e6:d0:9d:87:9c:7d:b6:7f:fd:ec:5a:02:
         ca:9a:05:e1:57:a1:1d:ce:62:fe:04:39:c2:69:a8:b6:a4:1a:
         99:94:16:1d:2b:a4:f8:db:af:e7:3f:ce:c9:ef:86:ee:30:13:
         18:98:57:03:91:27:b3:e8:7b:35:a7:d7:9c:43:4a:fd:31:5d:
         64:49:67:41:69:96:48:c6:44:72:6f:c2:9d:4e:39:96:c9:f6:
         f7:7e:b8:b7:de:89:7b:75:e0:61:80:ac:96:da:2e:76:ea:48:
         45:88:6a:f7:2e:40:74:77:57:45:57:9d:cd:e0:86:0c:9e:34:
         85:b5:1e:f9:d0:0a:3e:b8:bd:cb:d7:86:b4:63:a4:ac:2c:d0:
         b9:e1:72:f0:3d:eb:a0:47:51:36:d6:c1:18:27:ef:80:f4:7e:
         e6:82:80:45:a2:ac:93:92:09:07:d1:42:9a:f2:b8:1a:c5:e4:
         76:26:48:b2:d1:94:31:74:5d:8e:53:4f:b1:61:f4:91:e7:47:
         68:23:09:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAsDNxY68pFZseaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDkyMDAyMzQyN1oXDTI1MTIxOTAzMzQyN1owLzEtMCsGA1UEAxMk
MDk2ODUxNjgtYTgzYi00N2U4LTk4ODctYzMyYzE1OTUwYzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6PGWeCth7K9WA8AmtI9ZWbFuymJUgKdjHbY
nb8y4bdoxNPNVjr2cyr7l6spkvZosullWoIwyclw7zhLmIFDmr1JVpp9sDmiyYQY
YjnXcOrFizDpsm/tvZW33kFAPRFxcov7WoPfMHqBanyj2fsHPswekFNb2TDiGFI2
54pn9vSjNObwKrvQgp+ND3TTgzf5ygLsrVrsVyC1Kz7y/AU+i3eBPiU49XYdPq2i
5WyQ6M27bVkuJyg5qWqP5iudkqV6oA3S+sEnhbCLl58mbjFlMQUC+OxDEiZOcgzh
pXGxY+WUkYmaUE+2Bsyow9wQdRjqCt/kumNx+0PObACi+Lr/MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJu/jqTVpuYdEmbbBRpw///LDwxXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWFkMTRmYWQtYzJhMy0z
Y2NhLWIxNjUtZDNmOWU1MTQ3NTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIo9YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISufpb67hM7DnLBYdZTk2lmb916HIQAqZDUJT1pxIqGN2PnLv2Wz25e
fbcYBREoMf2v9s6WlG5beYXF0ObQnYecfbZ//exaAsqaBeFXoR3OYv4EOcJpqLak
GpmUFh0rpPjbr+c/zsnvhu4wExiYVwORJ7PoezWn15xDSv0xXWRJZ0FplkjGRHJv
wp1OOZbJ9vd+uLfeiXt14GGArJbaLnbqSEWIavcuQHR3V0VXnc3ghgyeNIW1HvnQ
Cj64vcvXhrRjpKws0LnhcvA966BHUTbWwRgn74D0fuaCgEWirJOSCQfRQpryuBrF
5HYmSLLRlDF0XY5TT7Fh9JHnR2gjCa0=
-----END CERTIFICATE-----
Generated at Wed Oct 22 21:18:46 2025 by rpki-client