Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/221f7774-45b7-3260-8a2d-44a18e8f611d.roa
File:                     221f7774-45b7-3260-8a2d-44a18e8f611d.roa (raw, json)
Hash identifier:          J+mAKpdcXcjEfK50W/tBZjnSyCNPsCVEWms8SZn172o=
Subject key identifier:   75:E4:5E:CF:E1:64:1E:3C:19:EA:19:0C:27:A4:17:23:12:61:5F:0A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584973DEDEE1E7F7E3363B6DDE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/221f7774-45b7-3260-8a2d-44a18e8f611d.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     19527
IP address blocks:        34.1.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:de:e1:e7:f7:e3:36:3b:6d:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=f2556621-aeb6-49e0-924e-52518185abfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:bd:a3:f8:26:8d:51:df:8c:9b:14:50:10:
                    5f:99:91:04:6c:6e:8f:5e:b9:1b:c9:8d:e6:c0:c0:
                    61:fc:9c:25:b8:61:41:a0:66:1a:85:e7:65:c5:57:
                    bf:07:d6:82:cd:63:09:fb:5e:10:75:07:e8:9d:58:
                    e0:2b:7b:b9:bd:33:ef:7e:e0:2a:9b:35:56:5d:79:
                    91:cc:a3:ad:c0:bd:48:d0:4f:a6:e2:16:a0:2c:a4:
                    c0:c3:78:32:f9:31:71:07:61:c7:6e:0b:89:9a:cf:
                    5a:b8:de:19:34:ce:df:79:1c:19:bd:b1:39:d5:82:
                    34:1b:97:a5:71:5c:02:14:7f:4a:ec:61:a4:a3:98:
                    05:aa:5c:47:93:13:71:cc:18:a1:d6:bb:6a:3b:77:
                    3b:14:60:f8:0b:50:20:49:9b:28:61:51:81:54:1e:
                    96:47:9b:e4:cb:78:34:a1:9f:bb:b5:b0:f7:99:86:
                    e4:6f:e0:a7:33:48:eb:d2:d4:3b:c2:b9:ee:19:51:
                    65:6e:be:16:0e:ac:7b:04:47:2c:75:81:c0:f6:e8:
                    5a:20:c3:5e:6c:97:0c:af:7d:a4:a2:88:48:2b:9a:
                    c4:ce:1b:3c:0b:c4:aa:4d:95:71:94:d9:4a:ef:08:
                    5c:9d:5a:94:ab:f6:ea:5e:d8:13:c4:89:b2:cf:6b:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:5E:CF:E1:64:1E:3C:19:EA:19:0C:27:A4:17:23:12:61:5F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/221f7774-45b7-3260-8a2d-44a18e8f611d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:55:e0:fb:9e:8f:0f:7d:18:73:f3:df:68:1a:2c:d6:36:c5:
         87:60:f9:e5:60:22:2b:2a:0f:3f:60:70:e6:91:ee:5a:9d:98:
         74:eb:5e:db:59:a9:b6:60:d7:74:23:86:c3:90:26:4d:8f:fb:
         18:41:65:a7:84:8e:85:24:2c:1d:66:5d:5d:7c:e9:b1:b0:05:
         68:88:45:f6:81:00:5e:c4:0d:d3:99:00:f9:8b:97:8e:4e:de:
         18:16:08:c3:f1:fc:7c:ae:67:1e:c3:88:cd:be:33:fe:5e:f4:
         51:d0:22:e5:b1:70:37:89:7b:1b:80:a8:b6:7a:a2:1a:ad:9a:
         54:fa:e7:dc:1f:2f:af:20:23:19:2f:93:09:f4:34:71:dc:bc:
         d9:00:6d:c0:ee:55:a3:c4:f3:96:1c:46:4e:80:af:d9:61:cf:
         e1:c2:3e:40:6d:13:38:7a:97:0b:16:77:45:0a:ba:60:8a:2f:
         12:02:4a:65:8e:1f:49:85:10:96:c0:79:c2:90:da:6d:e5:fd:
         8e:25:ee:02:a4:ae:19:55:e2:90:75:63:96:73:11:ab:25:ce:
         bc:34:c5:50:18:81:24:c0:be:e0:3e:72:0a:6d:5c:ac:c3:eb:
         dd:8e:91:29:dd:2e:08:99:99:43:81:93:97:01:17:1b:43:b0:
         c0:8c:90:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3t7h5/fjNjtt3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
ZjI1NTY2MjEtYWViNi00OWUwLTkyNGUtNTI1MTgxODVhYmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr69o/gmjVHfjJsUUBBfmZEEbG6PXrkbyY3m
wMBh/JwluGFBoGYahedlxVe/B9aCzWMJ+14QdQfonVjgK3u5vTPvfuAqmzVWXXmR
zKOtwL1I0E+m4hagLKTAw3gy+TFxB2HHbguJms9auN4ZNM7feRwZvbE51YI0G5el
cVwCFH9K7GGko5gFqlxHkxNxzBih1rtqO3c7FGD4C1AgSZsoYVGBVB6WR5vky3g0
oZ+7tbD3mYbkb+CnM0jr0tQ7wrnuGVFlbr4WDqx7BEcsdYHA9uhaIMNebJcMr32k
oohIK5rEzhs8C8SqTZVxlNlK7whcnVqUq/bqXtgTxImyz2u3UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHXkXs/hZB48GeoZDCekFyMSYV8KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjIxZjc3NzQtNDViNy0z
MjYwLThhMmQtNDRhMThlOGY2MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKpV4Puejw99GHPz32gaLNY2xYdg+eVgIisqDz9gcOaR7lqdmHTrXttZ
qbZg13QjhsOQJk2P+xhBZaeEjoUkLB1mXV186bGwBWiIRfaBAF7EDdOZAPmLl45O
3hgWCMPx/HyuZx7DiM2+M/5e9FHQIuWxcDeJexuAqLZ6ohqtmlT659wfL68gIxkv
kwn0NHHcvNkAbcDuVaPE85YcRk6Ar9lhz+HCPkBtEzh6lwsWd0UKumCKLxICSmWO
H0mFEJbAecKQ2m3l/Y4l7gKkrhlV4pB1Y5ZzEaslzrw0xVAYgSTAvuA+cgptXKzD
692OkSndLgiZmUOBk5cBFxtDsMCMkBU=
-----END CERTIFICATE-----
Generated at Sun May 4 19:38:32 2025 by rpki-client