Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68414107-5c7c-3600-9e22-54e96c2fb8ca.roa
File:                     68414107-5c7c-3600-9e22-54e96c2fb8ca.roa (raw, json)
Hash identifier:          I4e5DbqqDodi/whxN+hhzhiB+/Cw7GtAoB0pPJ55GQs=
Subject key identifier:   C6:35:C2:D2:50:83:19:A1:20:D9:5B:DD:F7:43:97:0A:58:1F:D0:22
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE29698ED8AB12CF5E5600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68414107-5c7c-3600-9e22-54e96c2fb8ca.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     19527
IP address blocks:        34.1.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:29:69:8e:d8:ab:12:cf:5e:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d5af9eb5-7c96-4c13-836c-127b3a394c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:27:24:08:5c:7a:bb:7b:df:d1:e6:03:17:b9:
                    9e:60:f4:a1:9e:91:61:73:c9:a2:88:bd:7f:75:c8:
                    ce:3c:ac:07:22:0d:2f:8e:ba:3d:84:22:bb:2d:ca:
                    31:58:f7:f5:b1:b3:b7:66:75:d3:9f:47:f0:33:19:
                    d8:ef:71:99:62:44:02:b3:fe:f8:31:94:ef:5f:cb:
                    eb:f3:94:a9:2e:78:c0:e9:b5:27:18:0c:d5:59:36:
                    ba:b6:66:cf:a5:d7:c5:86:b0:6b:8a:b3:e6:0f:f1:
                    83:3b:55:be:c2:d8:26:de:ff:1f:c8:66:a2:10:b0:
                    b3:4f:a3:c0:ea:9a:8f:51:46:a5:cc:d2:13:b7:a7:
                    d2:69:af:c2:05:44:7b:81:3f:94:69:af:31:85:04:
                    f2:c3:b3:e8:ab:7a:e0:25:40:f0:e3:d8:a0:c0:f0:
                    b2:6d:04:34:31:13:ab:b4:a5:5d:7b:e9:02:98:fb:
                    f1:c8:84:50:3b:e5:99:9f:8b:0d:6c:f8:1d:97:92:
                    44:82:92:d1:30:cc:04:19:b9:7c:f1:5d:d9:87:5c:
                    14:bd:be:61:5f:da:14:1a:54:f0:7c:52:b8:a2:7a:
                    68:c3:26:9b:33:80:ca:0d:2b:37:7a:8c:b5:13:60:
                    6a:99:26:7f:88:9e:63:c2:02:73:a2:f7:3c:6f:01:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:35:C2:D2:50:83:19:A1:20:D9:5B:DD:F7:43:97:0A:58:1F:D0:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68414107-5c7c-3600-9e22-54e96c2fb8ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:30:e1:10:7e:bc:db:7f:f7:74:a9:6a:eb:fe:f1:19:65:1a:
         58:ff:0a:dc:cc:21:09:17:ba:bb:38:6d:98:bf:8f:cc:ff:f2:
         4d:c7:54:af:ba:01:5e:04:d6:e6:3d:ee:2d:d3:4b:dd:6a:3f:
         9a:77:e6:49:80:b2:4b:da:cd:08:11:98:90:86:bb:c9:4f:37:
         07:a2:ab:8a:08:7f:89:71:c7:6e:dc:aa:2d:e7:ce:46:da:de:
         b8:88:63:fd:39:78:41:4c:e7:02:94:5d:de:08:e0:73:c4:ae:
         c8:df:76:5e:93:de:db:09:4a:a7:b1:d3:39:8e:0a:6b:8f:4e:
         7a:e6:b4:a6:bb:5c:94:30:e3:60:b4:f9:30:25:bb:f2:73:1c:
         f7:ff:f9:a5:a7:82:c4:7e:1b:b1:8a:33:b7:4c:5c:ec:e8:14:
         fe:d8:81:cb:34:3a:e7:da:73:2b:73:e2:95:1a:a0:71:d6:5c:
         b5:9c:fc:db:f2:a1:14:60:69:c4:ae:ae:90:d8:65:8f:27:c4:
         a7:6c:fd:e4:03:68:95:fb:09:48:c0:08:d9:8c:12:2d:4d:ff:
         13:f2:5f:56:86:84:9b:bf:63:bb:2e:a3:5d:2b:fc:23:55:7f:
         ab:b0:2f:a2:99:9d:5d:50:36:59:3d:84:92:f5:2e:45:6a:ef:
         f7:cb:73:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzilpjtirEs9eVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZDVhZjllYjUtN2M5Ni00YzEzLTgzNmMtMTI3YjNhMzk0YzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSckCFx6u3vf0eYDF7meYPShnpFhc8miiL1/
dcjOPKwHIg0vjro9hCK7LcoxWPf1sbO3ZnXTn0fwMxnY73GZYkQCs/74MZTvX8vr
85SpLnjA6bUnGAzVWTa6tmbPpdfFhrBrirPmD/GDO1W+wtgm3v8fyGaiELCzT6PA
6pqPUUalzNITt6fSaa/CBUR7gT+Uaa8xhQTyw7Poq3rgJUDw49igwPCybQQ0MROr
tKVde+kCmPvxyIRQO+WZn4sNbPgdl5JEgpLRMMwEGbl88V3Zh1wUvb5hX9oUGlTw
fFK4onpowyabM4DKDSs3eoy1E2BqmSZ/iJ5jwgJzovc8bwHwJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMY1wtJQgxmhINlb3fdDlwpYH9AiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjg0MTQxMDctNWM3Yy0z
NjAwLTllMjItNTRlOTZjMmZiOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQw4RB+vNt/93Spauv+8RllGlj/CtzMIQkXurs4bZi/j8z/8k3HVK+6
AV4E1uY97i3TS91qP5p35kmAskvazQgRmJCGu8lPNweiq4oIf4lxx27cqi3nzkba
3riIY/05eEFM5wKUXd4I4HPErsjfdl6T3tsJSqex0zmOCmuPTnrmtKa7XJQw42C0
+TAlu/JzHPf/+aWngsR+G7GKM7dMXOzoFP7Ygcs0Oufacytz4pUaoHHWXLWc/Nvy
oRRgacSurpDYZY8nxKds/eQDaJX7CUjACNmMEi1N/xPyX1aGhJu/Y7suo10r/CNV
f6uwL6KZnV1QNlk9hJL1LkVq7/fLc5E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:21:40 2025 by rpki-client