Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77652e58-3b08-3362-881a-beddcc736f80.roa
File:                     77652e58-3b08-3362-881a-beddcc736f80.roa (raw, json)
Hash identifier:          NaCaaKR6NAwHkNcAH2ylKLgOSCqC2dDrXhXD6RR6PlE=
Subject key identifier:   DB:7F:E3:FF:B8:C8:5D:06:42:36:5C:A1:4E:20:2C:F1:71:58:8E:BE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B63674EB9DEE94C2593838DA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77652e58-3b08-3362-881a-beddcc736f80.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        34.157.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4e:b9:de:e9:4c:25:93:83:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=56254652-b6c3-4bda-adf4-e8384fce0a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:ee:d9:a6:af:04:8f:95:e0:88:bc:7d:50:
                    39:1e:a8:39:ea:95:cb:f7:de:b6:ea:7d:ea:b0:f1:
                    dd:73:bd:1c:e3:8c:2c:7a:33:c6:81:63:79:5c:53:
                    d6:67:67:ea:c7:3c:24:40:42:b2:7c:19:6c:f4:c1:
                    f2:53:1f:3e:91:f7:b0:96:4a:78:40:0a:32:57:9d:
                    d4:ee:25:55:65:6a:e2:87:bd:84:3d:5c:92:79:49:
                    2c:01:f9:f1:20:3a:53:e6:4c:05:1a:99:a3:26:df:
                    b7:68:47:b6:20:a8:ba:b0:56:df:74:10:af:f7:b1:
                    d5:1e:6e:fa:56:00:6d:59:e8:89:ba:ac:7f:70:75:
                    e3:87:53:96:67:c1:f0:7b:91:95:e0:bd:f8:45:d3:
                    ba:97:03:7d:a7:02:d4:33:62:69:2d:0d:fd:69:95:
                    74:0a:3f:9e:41:48:45:ff:dc:c1:d4:1a:20:df:42:
                    b6:e3:2a:db:27:c2:8d:b0:4e:4c:37:50:d2:22:32:
                    d0:9c:a4:f7:a4:d6:32:46:5e:42:4e:d0:85:7b:f6:
                    26:f2:d5:61:3c:bd:ef:9a:2a:2e:92:2c:5c:83:da:
                    9c:af:77:de:b9:d3:32:2d:4c:79:77:9e:a5:04:6a:
                    57:ca:15:ee:65:44:22:58:0f:10:a3:d7:27:32:0e:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7F:E3:FF:B8:C8:5D:06:42:36:5C:A1:4E:20:2C:F1:71:58:8E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77652e58-3b08-3362-881a-beddcc736f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.157.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:80:37:9a:a3:68:35:58:51:8f:51:d7:27:e7:09:cb:8b:
         90:7f:1a:68:dd:61:07:26:53:36:d7:66:19:d5:d1:9e:af:0d:
         75:6d:fd:9b:0c:58:cc:7a:3e:ba:3d:32:e0:09:0c:5f:c7:86:
         41:3d:88:18:22:fa:58:51:7b:a8:59:29:f4:a5:6d:32:c4:3b:
         ac:91:a9:1f:d6:2e:76:c3:a1:27:d9:7c:00:00:f1:8e:ef:6f:
         7c:d0:a0:5b:c0:52:fe:64:4e:d3:59:3c:05:4f:80:9d:11:67:
         8b:cb:aa:02:6c:59:85:da:d1:97:e4:a8:ab:96:59:2c:fa:b3:
         4e:49:7a:67:45:38:bf:fa:6d:58:81:af:40:6d:65:b0:a6:c9:
         20:69:de:23:7d:0c:2b:da:4b:a6:04:fe:2f:d0:cb:f9:55:07:
         97:ae:24:2f:98:15:10:04:23:be:2d:32:10:bf:53:fd:d2:43:
         02:f7:22:d8:02:c0:bd:23:d5:63:41:4e:f1:fb:fb:f1:f3:3a:
         dd:41:e6:3a:87:70:c0:22:3b:99:d7:cb:3d:c0:d0:7b:5f:ed:
         af:8c:fe:ed:b8:bd:f5:48:94:28:7a:ed:a8:c0:f8:53:c8:41:
         ea:4b:48:b0:45:e4:ae:de:07:77:23:95:d4:c5:f1:9a:e1:43:
         9e:3f:36:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0653ulMJZODjaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk
NTYyNTQ2NTItYjZjMy00YmRhLWFkZjQtZTgzODRmY2UwYTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOru2aavBI+V4Ii8fVA5Hqg56pXL99626n3q
sPHdc70c44wsejPGgWN5XFPWZ2fqxzwkQEKyfBls9MHyUx8+kfewlkp4QAoyV53U
7iVVZWrih72EPVySeUksAfnxIDpT5kwFGpmjJt+3aEe2IKi6sFbfdBCv97HVHm76
VgBtWeiJuqx/cHXjh1OWZ8Hwe5GV4L34RdO6lwN9pwLUM2JpLQ39aZV0Cj+eQUhF
/9zB1Bog30K24yrbJ8KNsE5MN1DSIjLQnKT3pNYyRl5CTtCFe/Ym8tVhPL3vmiou
kixcg9qcr3feudMyLUx5d56lBGpXyhXuZUQiWA8Qo9cnMg7aYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNt/4/+4yF0GQjZcoU4gLPFxWI6+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzc2NTJlNTgtM2IwOC0z
MzYyLTg4MWEtYmVkZGNjNzM2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIp0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDkgDeao2g1WFGPUdcn5wnLi5B/GmjdYQcmUzbXZhnV0Z6vDXVt/ZsM
WMx6Pro9MuAJDF/HhkE9iBgi+lhRe6hZKfSlbTLEO6yRqR/WLnbDoSfZfAAA8Y7v
b3zQoFvAUv5kTtNZPAVPgJ0RZ4vLqgJsWYXa0ZfkqKuWWSz6s05JemdFOL/6bViB
r0BtZbCmySBp3iN9DCvaS6YE/i/Qy/lVB5euJC+YFRAEI74tMhC/U/3SQwL3ItgC
wL0j1WNBTvH7+/HzOt1B5jqHcMAiO5nXyz3A0Htf7a+M/u24vfVIlCh67ajA+FPI
QepLSLBF5K7eB3cjldTF8ZrhQ54/NtI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:15 2025 by rpki-client