Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b88cfd-4f17-3b38-bb86-ff5ab8ef5f6b.roa
File:                     34b88cfd-4f17-3b38-bb86-ff5ab8ef5f6b.roa (raw, json)
Hash identifier:          KjALJj6GDDfiTA0zyUWwTk74XZD2Dd/Nen/Mb4C4ME8=
Subject key identifier:   C0:D1:B1:B5:59:7A:6A:64:0F:08:F9:E7:E5:E3:40:74:52:EA:97:60
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B2A2C4EE33B154FD919D95154
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b88cfd-4f17-3b38-bb86-ff5ab8ef5f6b.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        34.3.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:4e:e3:3b:15:4f:d9:19:d9:51:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=aefcb810-37b2-4ed6-809d-21c2441173a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:81:5b:8c:cd:51:b9:d8:0f:34:01:ac:32:
                    0d:bc:ce:e6:74:72:eb:a6:89:35:e0:6d:01:4d:73:
                    54:f4:cb:b6:da:65:ba:cf:0a:fb:03:cd:d6:47:92:
                    31:dc:84:4f:43:34:76:ee:a6:7e:4d:87:f0:22:ba:
                    44:3f:6a:60:bb:c8:b9:b5:4a:48:1b:7b:79:37:fe:
                    df:b1:08:ba:f4:39:6a:42:5a:3b:fe:fc:81:e0:a6:
                    b5:15:92:e3:79:69:44:57:e7:d2:c2:8b:76:4d:87:
                    8c:b7:42:a1:83:c3:9f:d9:d0:e8:69:2c:94:57:f9:
                    2b:4e:9b:21:cc:8a:15:a5:29:cc:ee:80:0b:48:08:
                    52:9c:87:7c:16:ea:f8:e0:6d:77:a7:e0:30:23:d0:
                    d2:06:33:79:af:ce:97:27:04:46:a9:f3:07:cd:41:
                    03:81:45:70:13:51:55:88:37:8d:23:3d:72:d5:3e:
                    a6:87:31:7f:70:89:70:27:76:46:64:16:de:89:59:
                    1f:09:a5:81:a9:0b:e1:16:91:c8:8d:4b:00:b4:29:
                    01:2c:9a:a7:15:01:9f:01:b6:ae:90:d2:6b:81:5e:
                    60:7b:5b:2b:7a:3f:3b:a0:58:25:f9:01:05:19:17:
                    7f:17:23:ed:09:59:62:c6:92:c5:84:ef:69:d0:9a:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D1:B1:B5:59:7A:6A:64:0F:08:F9:E7:E5:E3:40:74:52:EA:97:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b88cfd-4f17-3b38-bb86-ff5ab8ef5f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:be:84:5e:1d:76:8a:31:5e:f9:d1:66:f6:26:f9:54:93:da:
         17:66:d9:f0:ed:d9:d1:33:83:de:b6:5b:b4:f7:38:fa:e9:76:
         c2:ec:5b:2e:5f:e7:b5:82:ec:9c:a8:b2:d5:07:b4:3a:c2:db:
         d8:53:fb:cb:4a:87:33:8b:73:93:6c:fc:1f:af:df:ac:19:86:
         b3:1e:78:21:00:b9:99:50:86:df:3a:fc:80:55:4a:e8:fd:76:
         f5:79:97:e1:9a:de:3d:d5:4c:01:36:83:07:fd:70:4c:f7:eb:
         8d:4e:bb:c7:d4:b8:3f:9f:29:f9:48:23:4b:0c:bd:6a:22:89:
         72:df:c2:09:c1:4e:c1:ab:6d:89:41:bf:0a:b3:71:ab:7b:e7:
         5f:bc:2b:77:ba:54:1e:71:f3:20:d5:01:44:c4:32:a9:94:2e:
         9c:21:9a:17:80:83:fa:13:78:fd:65:09:f9:b8:c3:3e:aa:71:
         35:9e:0a:7f:30:ff:2c:cb:42:2e:8f:b5:d6:37:d5:71:55:b1:
         09:e9:95:06:ad:63:00:8b:39:ff:1d:e7:5e:e3:6a:c7:59:4f:
         b0:96:15:c8:30:01:11:78:97:e2:fd:bf:36:21:ed:66:a6:c3:
         7e:44:df:13:33:8a:18:58:fb:d1:a3:4b:27:ab:e2:1c:0f:57:
         58:b8:0a:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLE7jOxVP2RnZUVQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
YWVmY2I4MTAtMzdiMi00ZWQ2LTgwOWQtMjFjMjQ0MTE3M2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsReBW4zNUbnYDzQBrDINvM7mdHLrpok14G0B
TXNU9Mu22mW6zwr7A83WR5Ix3IRPQzR27qZ+TYfwIrpEP2pgu8i5tUpIG3t5N/7f
sQi69DlqQlo7/vyB4Ka1FZLjeWlEV+fSwot2TYeMt0Khg8Of2dDoaSyUV/krTpsh
zIoVpSnM7oALSAhSnId8Fur44G13p+AwI9DSBjN5r86XJwRGqfMHzUEDgUVwE1FV
iDeNIz1y1T6mhzF/cIlwJ3ZGZBbeiVkfCaWBqQvhFpHIjUsAtCkBLJqnFQGfAbau
kNJrgV5ge1srej87oFgl+QEFGRd/FyPtCVlixpLFhO9p0JocrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDRsbVZempkDwj55+XjQHRS6pdgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzRiODhjZmQtNGYxNy0z
YjM4LWJiODYtZmY1YWI4ZWY1ZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgMcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKS+hF4ddooxXvnRZvYm+VST2hdm2fDt2dEzg962W7T3OPrpdsLsWy5f
57WC7JyostUHtDrC29hT+8tKhzOLc5Ns/B+v36wZhrMeeCEAuZlQht86/IBVSuj9
dvV5l+Ga3j3VTAE2gwf9cEz3641Ou8fUuD+fKflII0sMvWoiiXLfwgnBTsGrbYlB
vwqzcat751+8K3e6VB5x8yDVAUTEMqmULpwhmheAg/oTeP1lCfm4wz6qcTWeCn8w
/yzLQi6PtdY31XFVsQnplQatYwCLOf8d517jasdZT7CWFcgwARF4l+L9vzYh7Wam
w35E3xMzihhY+9GjSyer4hwPV1i4Cmg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:26:53 2025 by rpki-client