Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47b143c0-9b4f-3641-bbfc-4bc029f6d68f.roa
File:                     47b143c0-9b4f-3641-bbfc-4bc029f6d68f.roa (raw, json)
Hash identifier:          w4J1YMNtcxW3UAN5EscrdMm/ktqDm2dPU+00Oy1I+lo=
Subject key identifier:   31:94:72:53:31:0B:FF:3C:8D:47:96:E9:13:AB:D9:4D:BE:8F:C9:06
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B67976D8166EBE47572EC4F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47b143c0-9b4f-3641-bbfc-4bc029f6d68f.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.129.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:6d:81:66:eb:e4:75:72:ec:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=a862202c-b462-448c-9824-16f22c8bd39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:dc:df:a4:d5:76:e0:59:e2:44:c4:60:27:
                    79:c6:89:44:bd:26:b9:63:2a:e6:f6:f6:bf:ce:f7:
                    fc:32:26:10:e2:48:d2:f8:e1:c2:a0:37:25:3a:e2:
                    c3:18:7e:d6:ce:5d:f0:2b:51:8b:ae:a3:0b:7a:b9:
                    c2:df:90:e7:05:df:26:5b:f4:46:78:1b:13:9a:ee:
                    62:10:cc:4a:84:4f:53:1d:75:26:d5:d7:42:0a:41:
                    cb:bd:27:a9:b9:40:81:1c:d2:68:a4:f6:b9:95:bc:
                    97:78:9f:41:cb:6d:ce:9d:85:52:b5:8f:86:87:87:
                    cc:9a:7d:a9:eb:cd:e1:8b:cd:82:86:10:23:c3:79:
                    8c:8a:d1:b9:75:b4:27:17:a6:89:c9:0e:58:61:28:
                    26:b1:30:e5:75:e6:de:47:47:1d:2a:58:65:20:1f:
                    45:9a:56:82:5c:b8:26:6b:11:e5:7f:59:ad:36:2b:
                    fb:fe:ae:0c:4d:af:ba:f2:40:29:71:55:fd:6a:fb:
                    89:9c:69:1d:39:15:84:87:67:bb:87:e9:da:c6:5c:
                    a6:51:35:94:c5:77:3a:ec:15:55:46:fd:ee:4c:a4:
                    45:95:e5:cc:46:6b:a2:dc:74:4d:58:83:a0:37:7a:
                    5e:d4:e6:47:5b:3f:26:e3:91:2f:17:5a:0c:c8:95:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:72:53:31:0B:FF:3C:8D:47:96:E9:13:AB:D9:4D:BE:8F:C9:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47b143c0-9b4f-3641-bbfc-4bc029f6d68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:09:ca:69:f8:89:50:eb:6e:fb:47:de:43:79:6b:0a:f6:2f:
         f5:3a:e8:17:ce:b9:81:c4:f9:a8:83:32:46:91:58:3f:af:0d:
         b7:90:5d:8a:55:de:05:38:a9:51:82:b7:53:40:7a:8d:bb:bb:
         33:95:e7:8f:f6:bb:a6:95:7d:c1:da:ea:a8:22:e3:be:3b:01:
         65:a2:c1:89:4e:bd:46:e0:57:33:8c:b8:6d:b5:5c:4f:1e:e9:
         91:0a:51:d6:3b:20:ca:02:e5:74:74:ff:16:1d:78:21:05:16:
         4b:b8:61:57:51:f1:c2:2d:8e:62:67:4d:c0:38:ee:1f:73:63:
         1d:fd:1d:f4:99:8d:56:25:39:32:72:4a:e8:19:e3:21:5d:e1:
         db:c7:74:46:c3:fa:fe:f8:1f:31:53:a0:78:97:77:fb:2c:ce:
         6e:1a:86:5b:f7:8f:ac:c3:24:35:8e:7a:5e:9b:3f:69:99:16:
         98:88:c9:be:88:22:60:7c:b2:d7:75:b5:d5:a8:84:23:21:f0:
         3c:58:70:77:cf:cc:7f:da:14:84:47:d8:46:48:a7:b7:56:71:
         94:de:13:20:d6:e5:58:99:0b:32:43:ca:c0:40:4f:7e:46:0c:
         6d:89:fd:1a:e6:59:50:8d:f0:a4:ca:a3:6c:e6:7a:9e:90:f9:
         7c:e0:e7:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl22BZuvkdXLsT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
YTg2MjIwMmMtYjQ2Mi00NDhjLTk4MjQtMTZmMjJjOGJkMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJjc36TVduBZ4kTEYCd5xolEvSa5Yyrm9va/
zvf8MiYQ4kjS+OHCoDclOuLDGH7Wzl3wK1GLrqMLernC35DnBd8mW/RGeBsTmu5i
EMxKhE9THXUm1ddCCkHLvSepuUCBHNJopPa5lbyXeJ9By23OnYVStY+Gh4fMmn2p
683hi82ChhAjw3mMitG5dbQnF6aJyQ5YYSgmsTDldebeR0cdKlhlIB9FmlaCXLgm
axHlf1mtNiv7/q4MTa+68kApcVX9avuJnGkdORWEh2e7h+naxlymUTWUxXc67BVV
Rv3uTKRFleXMRmui3HRNWIOgN3pe1OZHWz8m45EvF1oMyJU+CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGUclMxC/88jUeW6ROr2U2+j8kGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDdiMTQzYzAtOWI0Zi0z
NjQxLWJiZmMtNGJjMDI5ZjZkNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUJymn4iVDrbvtH3kN5awr2L/U66BfOuYHE+aiDMkaRWD+vDbeQXYpV
3gU4qVGCt1NAeo27uzOV54/2u6aVfcHa6qgi4747AWWiwYlOvUbgVzOMuG21XE8e
6ZEKUdY7IMoC5XR0/xYdeCEFFku4YVdR8cItjmJnTcA47h9zYx39HfSZjVYlOTJy
SugZ4yFd4dvHdEbD+v74HzFToHiXd/sszm4ahlv3j6zDJDWOel6bP2mZFpiIyb6I
ImB8std1tdWohCMh8DxYcHfPzH/aFIRH2EZIp7dWcZTeEyDW5ViZCzJDysBAT35G
DG2J/RrmWVCN8KTKo2zmep6Q+Xzg52A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:47 2025 by rpki-client