Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3183701f-09a0-3cb7-adc2-b652597c335e.roa
File:                     3183701f-09a0-3cb7-adc2-b652597c335e.roa (raw, json)
Hash identifier:          iWQjNm3kPFnQw9Mlh9GK0b5STDIaAqTqih2Au3lGOw4=
Subject key identifier:   EB:7A:A1:E8:A5:14:F9:F1:5A:CE:27:D2:F1:CF:77:9D:36:4A:B2:11
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797DA3E442D7ACC43EDFA30
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3183701f-09a0-3cb7-adc2-b652597c335e.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.96.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:da:3e:44:2d:7a:cc:43:ed:fa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=0cac4161-b4d7-4d92-9530-92293a3815b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:96:f6:d1:ef:0c:db:1c:73:36:16:7a:ce:
                    70:bc:67:ef:de:48:86:e0:34:98:a6:d1:38:36:d7:
                    6e:ec:a9:3c:dd:1c:ab:9b:63:9b:ab:76:0a:3b:7f:
                    2f:f0:0f:17:03:6e:2d:0d:1d:fc:10:b2:4b:86:7f:
                    2f:0d:68:44:28:f7:86:13:5d:e7:ee:fe:1a:4e:53:
                    51:04:a5:82:40:8a:2d:12:df:08:3d:08:aa:a1:60:
                    52:2e:e6:62:08:71:59:17:d2:1f:1c:77:e9:42:48:
                    88:da:44:16:97:58:98:de:2b:a8:9f:3a:b7:76:b0:
                    a4:8b:53:8b:d8:64:c4:f6:13:c0:a4:65:2f:3c:5e:
                    f2:84:79:08:f4:5d:42:87:29:97:85:58:f7:1c:8e:
                    8f:37:f4:3e:2d:bd:ab:a9:df:b8:4d:79:4e:de:74:
                    06:4d:6e:fd:03:dc:ce:e3:1c:e0:a3:aa:9e:d7:6c:
                    3a:92:bf:1f:18:80:4a:37:f0:e9:0f:22:e9:1c:0a:
                    4e:6b:58:98:e1:1c:15:5e:09:15:f9:85:1c:77:0f:
                    a4:7f:30:7b:ac:7d:93:94:4e:3e:6d:c4:9b:3b:fd:
                    85:54:3a:8b:87:de:6c:35:4f:84:d0:51:99:20:f9:
                    f6:e6:39:d2:3b:95:1e:84:92:78:ec:f1:40:c9:1d:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7A:A1:E8:A5:14:F9:F1:5A:CE:27:D2:F1:CF:77:9D:36:4A:B2:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3183701f-09a0-3cb7-adc2-b652597c335e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.96.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:c2:87:61:1f:90:1f:91:43:da:39:b8:ce:a6:f2:08:b8:
         28:95:40:1e:c6:c0:6d:7b:1e:b4:d6:db:42:71:4f:3b:90:a0:
         2c:7e:b5:7f:3a:33:92:22:ea:28:26:d9:5c:38:96:be:27:9b:
         8b:1b:bf:a0:01:2f:d6:da:26:7a:e9:a0:fd:17:7d:61:b7:38:
         d9:64:a7:ba:71:8a:78:7c:7d:5b:5f:52:de:ad:a1:f1:af:04:
         35:dc:74:62:36:db:e2:3e:d7:b9:bc:39:34:47:ae:12:d9:44:
         0d:bd:02:b8:15:54:5b:1c:83:62:4b:4b:97:19:dd:70:fd:a3:
         83:6a:77:ad:fa:0c:b7:4e:e1:8f:7d:53:fb:24:38:92:2b:ca:
         a5:b7:7a:80:ea:54:87:e3:66:e6:b0:09:64:8e:a7:c9:57:99:
         61:6f:87:b9:9f:fe:0a:31:57:70:d8:5d:75:c7:32:a0:f3:b2:
         96:7e:e6:e4:07:d3:c0:34:d3:fa:55:75:ff:1a:aa:da:93:ef:
         12:23:98:d9:66:88:96:fb:6b:86:ef:a1:8f:03:7b:f1:f6:c8:
         df:7c:d1:61:99:1b:fb:5c:0f:6a:b1:9d:e1:9e:92:69:83:f5:
         23:4c:89:9b:0c:fc:67:05:bf:54:97:91:c2:9b:1b:9c:23:a0:
         60:34:ec:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9o+RC16zEPt+jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
MGNhYzQxNjEtYjRkNy00ZDkyLTk1MzAtOTIyOTNhMzgxNWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWmW9tHvDNscczYWes5wvGfv3kiG4DSYptE4
Ntdu7Kk83Ryrm2Obq3YKO38v8A8XA24tDR38ELJLhn8vDWhEKPeGE13n7v4aTlNR
BKWCQIotEt8IPQiqoWBSLuZiCHFZF9IfHHfpQkiI2kQWl1iY3iuonzq3drCki1OL
2GTE9hPApGUvPF7yhHkI9F1ChymXhVj3HI6PN/Q+Lb2rqd+4TXlO3nQGTW79A9zO
4xzgo6qe12w6kr8fGIBKN/DpDyLpHApOa1iY4RwVXgkV+YUcdw+kfzB7rH2TlE4+
bcSbO/2FVDqLh95sNU+E0FGZIPn25jnSO5UehJJ47PFAyR3nDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOt6oeilFPnxWs4n0vHPd502SrIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE4MzcwMWYtMDlhMC0z
Y2I3LWFkYzItYjY1MjU5N2MzMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFj9wodhH5AfkUPaObjOpvIIuCiVQB7GwG17HrTW20JxTzuQoCx+tX86
M5Ii6igm2Vw4lr4nm4sbv6ABL9baJnrpoP0XfWG3ONlkp7pxinh8fVtfUt6tofGv
BDXcdGI22+I+17m8OTRHrhLZRA29ArgVVFscg2JLS5cZ3XD9o4Nqd636DLdO4Y99
U/skOJIryqW3eoDqVIfjZuawCWSOp8lXmWFvh7mf/goxV3DYXXXHMqDzspZ+5uQH
08A00/pVdf8aqtqT7xIjmNlmiJb7a4bvoY8De/H2yN980WGZG/tcD2qxneGekmmD
9SNMiZsM/GcFv1SXkcKbG5wjoGA07Kw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:41 2025 by rpki-client