Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/318b7687-26fa-394b-8507-56cff5517524.roa
File:                     318b7687-26fa-394b-8507-56cff5517524.roa (raw, json)
Hash identifier:          Iz+8XSAdTu3GWh4Zh7C/EF/EAOBVgFBmi8txXiK49og=
Subject key identifier:   1D:6A:B6:A2:39:6A:A3:FF:18:97:9D:40:E1:C2:0D:74:BB:DD:5D:C1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB6A706939FB1C9CD0B4B0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/318b7687-26fa-394b-8507-56cff5517524.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        34.101.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:6a:70:69:39:fb:1c:9c:d0:b4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=31eec1a6-6646-45f8-b854-b83bbb8c65e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:2d:55:36:07:47:1a:07:14:4d:1e:de:d0:
                    45:79:42:e8:03:52:4d:ee:1d:5d:48:4f:77:1d:d7:
                    8f:05:4d:c8:91:50:8a:21:0c:38:85:f5:e4:eb:92:
                    35:18:e7:ee:30:c6:8b:20:78:12:10:99:c9:40:b6:
                    d2:38:81:1d:58:e4:12:0b:62:1e:69:ef:bc:96:33:
                    a6:4c:8c:5d:f3:da:1f:50:ee:91:ec:b1:91:7a:ec:
                    08:88:69:05:fd:26:b8:48:6a:1c:d7:52:2b:a4:dc:
                    d9:38:41:f4:de:53:e4:8e:fe:f2:7d:d2:8a:fc:79:
                    72:61:ff:8f:3c:af:d0:0c:25:7a:ae:ed:b8:fe:9f:
                    59:f0:5e:ec:1a:8f:7c:16:c1:3b:ce:99:bd:7f:6b:
                    51:8b:4f:86:c4:32:91:89:0b:32:1d:77:a5:f6:44:
                    3f:11:7b:c1:5d:ff:87:a8:51:26:30:e5:76:2c:fb:
                    12:69:61:85:e0:9f:cb:5c:b6:12:85:2e:89:47:73:
                    b4:01:84:e3:81:d0:21:46:ef:5f:98:45:56:b9:48:
                    85:66:23:95:1d:d0:82:02:8a:5b:ef:14:15:10:e7:
                    0b:61:f4:84:38:7c:d7:40:52:f7:77:17:2a:54:01:
                    dd:74:b2:a3:96:bb:ec:41:d2:d0:9f:cf:e5:c2:76:
                    ec:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6A:B6:A2:39:6A:A3:FF:18:97:9D:40:E1:C2:0D:74:BB:DD:5D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/318b7687-26fa-394b-8507-56cff5517524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.101.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:d0:2a:a5:01:ce:93:18:db:f7:6d:49:0c:1b:a9:4f:5e:
         72:35:81:8c:9e:5c:a4:f7:8e:ba:50:f0:99:6e:e6:82:06:3b:
         48:ef:93:a0:65:8c:bd:e4:38:a0:f6:42:0e:f3:d2:6b:1a:06:
         a0:48:fb:dd:32:9c:76:2c:04:18:e7:da:bc:dd:ee:38:08:64:
         e1:79:de:c2:2c:89:0e:0a:55:0a:00:15:7c:de:f4:9b:a9:02:
         0b:83:f7:b6:26:65:e6:6b:22:f9:2b:52:d8:a0:60:1d:dd:52:
         49:8f:0e:63:4f:33:e0:54:79:3d:04:f4:9b:dc:66:a9:a9:11:
         56:dd:5a:5b:25:8c:d5:66:41:04:9d:2d:ed:56:13:f0:42:60:
         b8:75:71:fb:6e:2c:f5:7b:32:c8:e0:e4:55:14:42:cb:94:fc:
         f0:bb:04:5c:07:01:9d:e8:ed:77:11:07:7e:4b:90:d3:84:20:
         56:2b:09:18:5a:ec:28:e1:58:44:5a:cb:62:4c:a9:71:0f:c9:
         38:bf:74:fe:f9:60:fb:50:e4:80:44:7d:08:8d:ce:0e:ff:ae:
         ea:89:c0:13:35:da:08:2b:ed:b7:90:e3:e2:4b:75:5c:ae:42:
         31:c8:34:0e:b3:ab:7d:dc:c5:c7:ea:d2:53:fe:ea:3c:be:fc:
         dc:f6:f1:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2pwaTn7HJzQtLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MzFlZWMxYTYtNjY0Ni00NWY4LWI4NTQtYjgzYmJiOGM2NWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqotVTYHRxoHFE0e3tBFeULoA1JN7h1dSE93
HdePBU3IkVCKIQw4hfXk65I1GOfuMMaLIHgSEJnJQLbSOIEdWOQSC2Ieae+8ljOm
TIxd89ofUO6R7LGReuwIiGkF/Sa4SGoc11IrpNzZOEH03lPkjv7yfdKK/HlyYf+P
PK/QDCV6ru24/p9Z8F7sGo98FsE7zpm9f2tRi0+GxDKRiQsyHXel9kQ/EXvBXf+H
qFEmMOV2LPsSaWGF4J/LXLYShS6JR3O0AYTjgdAhRu9fmEVWuUiFZiOVHdCCAopb
7xQVEOcLYfSEOHzXQFL3dxcqVAHddLKjlrvsQdLQn8/lwnbseQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1qtqI5aqP/GJedQOHCDXS73V3BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE4Yjc2ODctMjZmYS0z
OTRiLTg1MDctNTZjZmY1NTE3NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDt0CqlAc6TGNv3bUkMG6lPXnI1gYyeXKT3jrpQ8Jlu5oIGO0jvk6Bl
jL3kOKD2Qg7z0msaBqBI+90ynHYsBBjn2rzd7jgIZOF53sIsiQ4KVQoAFXze9Jup
AguD97YmZeZrIvkrUtigYB3dUkmPDmNPM+BUeT0E9JvcZqmpEVbdWlsljNVmQQSd
Le1WE/BCYLh1cftuLPV7Msjg5FUUQsuU/PC7BFwHAZ3o7XcRB35LkNOEIFYrCRha
7CjhWERay2JMqXEPyTi/dP75YPtQ5IBEfQiNzg7/ruqJwBM12ggr7beQ4+JLdVyu
QjHINA6zq33cxcfq0lP+6jy+/Nz28a8=
-----END CERTIFICATE-----
Generated at Sun May 4 19:56:52 2025 by rpki-client