Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/31cc6585-64bc-3ce7-ba25-02c5c963d659.roa
File:                     31cc6585-64bc-3ce7-ba25-02c5c963d659.roa (raw, json)
Hash identifier:          FutWltRSn5E6XZhARrZUfRNZBLBS7fcQ/UXm30v7y7U=
Subject key identifier:   2C:66:C9:F3:48:B5:FD:B4:B6:A0:80:A0:DA:D1:51:9C:27:7C:C2:B6
Certificate issuer:       /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
Certificate serial:       010D0C9F4328584A6825FE16DBDCB458CA9B0840
Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/31cc6585-64bc-3ce7-ba25-02c5c963d659.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     16509
IP address blocks:        174.34.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:fe:16:db:dc:b4:58:ca:9b:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=3176731e-dd68-4475-812b-b4d4f35d4e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:7c:b2:91:dd:e5:5f:57:a0:40:da:2d:e0:
                    a8:5d:b1:ff:d0:62:1a:cc:2b:9d:c5:b9:4b:ff:71:
                    f9:72:43:dc:71:4b:b2:c4:5e:df:fc:1f:50:2c:74:
                    2b:15:b5:b7:ca:08:0a:6a:c0:be:c9:ee:6a:76:f8:
                    91:e7:42:24:a0:94:a7:e4:34:65:3f:23:4b:b4:66:
                    ec:72:ed:ae:12:b1:36:b3:1f:86:ad:55:21:2f:43:
                    6c:4e:15:92:75:20:4b:e9:a0:c2:21:12:42:4b:a7:
                    1d:07:db:30:3c:0b:2a:d0:3d:4b:42:a6:1f:64:37:
                    d7:1a:b0:5e:d3:f6:73:6c:6f:c5:74:d0:fd:94:f4:
                    e4:0c:78:15:b4:a4:fb:13:8b:fe:8a:65:02:a4:58:
                    b4:cf:4a:dd:07:f3:68:c8:ac:92:46:dc:d2:f2:95:
                    af:d8:6e:a1:6e:ab:7a:77:b2:1c:a3:89:f4:4f:19:
                    22:7c:d8:71:ab:89:9b:3e:1a:a0:e8:46:2c:48:1a:
                    69:91:d3:aa:b0:33:e4:a1:23:1c:bf:54:83:9c:af:
                    93:91:0d:96:c5:ef:02:f2:40:5f:b6:a0:30:68:d4:
                    ad:24:9a:28:aa:0c:aa:a6:aa:af:7d:6c:b8:88:7c:
                    76:3e:5e:4b:91:53:9d:a9:6e:7b:b8:d2:d7:fc:4e:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:66:C9:F3:48:B5:FD:B4:B6:A0:80:A0:DA:D1:51:9C:27:7C:C2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/31cc6585-64bc-3ce7-ba25-02c5c963d659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl

            X509v3 Authority Key Identifier:
                keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:37:e4:55:24:00:63:a6:be:16:b3:2f:45:27:77:43:b4:57:
         bb:06:6a:c0:07:91:41:e7:5e:90:76:db:b5:83:a6:cf:aa:8a:
         0a:10:76:00:9a:ca:05:b3:85:38:1c:58:9d:1c:b2:db:9b:a3:
         fa:a8:16:b0:c7:10:dc:40:d1:f1:bc:34:fb:1b:1a:ad:e4:af:
         6a:a7:a0:23:09:fc:ce:4c:a1:65:cc:e3:07:57:92:7e:fa:29:
         9a:05:93:de:41:31:0e:27:c6:45:33:0c:ba:7c:7f:c5:df:06:
         e9:26:31:be:ae:ce:9c:90:e0:8f:c6:a3:69:30:78:9d:39:b5:
         b7:67:4c:d7:43:db:91:39:32:2c:a5:48:37:9c:90:f7:de:26:
         3f:bd:82:1c:ff:29:4b:7b:f1:ff:1f:1b:e5:1b:9a:26:35:82:
         4a:a8:68:ae:10:4c:97:68:b0:41:ff:fd:1b:29:7d:7c:2f:61:
         5a:d3:60:2f:e0:47:1b:ae:15:d7:31:26:6b:e5:b3:29:6b:96:
         49:0e:2a:a8:33:b9:93:93:80:04:75:5a:e8:cf:81:2d:d1:4a:
         03:8b:c0:2f:1d:25:f9:e5:54:56:36:7e:65:94:43:76:b0:38:
         a5:a7:f9:3a:10:ce:32:ef:02:dd:b6:c3:9e:8e:7a:40:ad:86:
         4e:b3:5c:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJf4W29y0WMqbCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz
ZDhhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
MzE3NjczMWUtZGQ2OC00NDc1LTgxMmItYjRkNGYzNWQ0ZTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLh8spHd5V9XoEDaLeCoXbH/0GIazCudxblL
/3H5ckPccUuyxF7f/B9QLHQrFbW3yggKasC+ye5qdviR50IkoJSn5DRlPyNLtGbs
cu2uErE2sx+GrVUhL0NsThWSdSBL6aDCIRJCS6cdB9swPAsq0D1LQqYfZDfXGrBe
0/ZzbG/FdND9lPTkDHgVtKT7E4v+imUCpFi0z0rdB/NoyKySRtzS8pWv2G6hbqt6
d7Ico4n0TxkifNhxq4mbPhqg6EYsSBppkdOqsDPkoSMcv1SDnK+TkQ2Wxe8C8kBf
tqAwaNStJJooqgyqpqqvfWy4iHx2Pl5LkVOdqW57uNLX/E7jKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxmyfNItf20tqCAoNrRUZwnfMK2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi
Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvMzFjYzY1ODUtNjRiYy0z
Y2U3LWJhMjUtMDJjNWM5NjNkNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw
OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw
M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy
ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriLhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAY35FUkAGOmvhazL0Und0O0V7sGasAHkUHnXpB227WDps+qigoQdgCa
ygWzhTgcWJ0cstubo/qoFrDHENxA0fG8NPsbGq3kr2qnoCMJ/M5MoWXM4wdXkn76
KZoFk95BMQ4nxkUzDLp8f8XfBukmMb6uzpyQ4I/Go2kweJ05tbdnTNdD25E5Miyl
SDeckPfeJj+9ghz/KUt78f8fG+UbmiY1gkqoaK4QTJdosEH//RspfXwvYVrTYC/g
RxuuFdcxJmvlsylrlkkOKqgzuZOTgAR1WujPgS3RSgOLwC8dJfnlVFY2fmWUQ3aw
OKWn+ToQzjLvAt22w56OekCthk6zXDA=
-----END CERTIFICATE-----
Generated at Wed Jul 9 16:27:32 2025 by rpki-client