Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/912eaf3e-eb5a-36c1-a726-f205a25f70c2.roa
File:                     912eaf3e-eb5a-36c1-a726-f205a25f70c2.roa (raw, json)
Hash identifier:          oynL9U9lljZLjqw9roSHCLLgONz/B77hnavq4JH/dS4=
Subject key identifier:   67:98:61:ED:7D:FA:71:09:E0:16:F3:93:C9:DC:48:51:A2:7B:1A:20
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B72C1EA4E8954019ED7BE9600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/912eaf3e-eb5a-36c1-a726-f205a25f70c2.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     396982
IP address blocks:        34.140.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:ea:4e:89:54:01:9e:d7:be:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=98535206-ff60-49f8-bc70-962eea9a3cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:e0:b6:a5:66:08:97:cc:bb:45:ed:d0:c8:
                    41:3d:ab:33:60:53:53:a8:e5:7b:90:f0:76:89:72:
                    c5:c1:5d:c5:85:b4:87:70:21:fd:ae:07:38:27:4d:
                    70:3a:18:c1:56:a4:d3:7d:f8:13:87:27:eb:b6:50:
                    ff:7b:80:0a:48:d7:70:c0:01:c9:92:0f:18:a4:44:
                    2b:55:46:8c:b4:91:1e:15:ff:fd:22:7c:d2:6d:11:
                    79:ca:d4:60:b1:8b:b6:da:e7:b3:be:a6:fe:34:a6:
                    40:f8:62:32:5b:7d:a2:9d:20:cf:67:e5:6d:09:b5:
                    27:d4:09:2b:a5:77:c8:ce:ad:fc:94:06:8d:a7:b8:
                    47:23:bb:d8:f6:2e:43:dc:3c:d1:f8:4f:3a:db:02:
                    c6:03:62:42:ab:06:c8:15:8d:e1:af:2c:a0:2c:e9:
                    60:77:65:15:07:36:11:0e:c0:81:77:69:01:2e:f8:
                    bd:27:18:c1:86:cc:67:d6:38:ef:ef:1e:35:b0:c9:
                    e8:d6:39:30:6c:40:ea:a0:f8:1b:9f:1b:82:56:aa:
                    f6:52:2a:04:8c:2e:59:9e:aa:3d:b3:ce:3f:09:a1:
                    41:1e:bf:1b:71:eb:42:a6:07:4e:31:7f:d9:e1:03:
                    e1:8a:52:1b:c2:a4:46:84:36:a5:33:e3:e4:db:2e:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:98:61:ED:7D:FA:71:09:E0:16:F3:93:C9:DC:48:51:A2:7B:1A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/912eaf3e-eb5a-36c1-a726-f205a25f70c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f7:5a:ec:47:d4:36:c6:89:dd:56:8d:fc:8e:d7:ae:b8:44:
         6b:8a:24:d5:8e:76:95:65:a3:83:b8:14:96:9f:21:1a:9f:3f:
         8b:8e:48:e5:a1:84:11:53:4f:7b:8e:c9:5d:09:d4:31:c2:c2:
         d4:7e:c2:7e:6e:28:4a:74:24:45:73:0c:a9:a1:f4:30:18:e3:
         e1:8b:ee:ac:61:40:50:53:69:ac:f3:94:21:02:b1:7f:f2:32:
         74:2c:2d:62:bf:9c:cd:ee:27:b3:7a:dd:8a:f9:ec:93:01:ea:
         5b:03:3b:04:71:0b:d3:6f:bd:27:91:e1:a2:18:91:82:ea:f5:
         ed:f2:14:7e:e7:14:ca:7c:9e:5e:b0:9e:e1:a9:32:fe:70:00:
         3e:0a:be:b1:2e:17:b1:7c:36:06:ca:40:bd:96:2f:7a:90:41:
         b5:a0:99:17:0b:c2:3b:f2:d0:40:37:82:c7:31:65:db:fa:82:
         52:7c:cc:9b:ba:f1:d4:ef:b4:48:6e:4f:59:b9:d8:5a:5f:4d:
         69:30:dc:27:f2:b3:ba:53:48:dd:df:7b:18:12:f6:76:5d:cd:
         9d:28:f8:fe:05:a9:82:55:04:83:0b:2e:c0:fa:05:86:52:c1:
         65:4f:f5:e2:a5:f3:8a:5b:05:74:86:75:a5:5a:a2:a7:5a:ca:
         09:45:35:d8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtywepOiVQBnte+lgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk
OTg1MzUyMDYtZmY2MC00OWY4LWJjNzAtOTYyZWVhOWEzY2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gXgtqVmCJfMu0Xt0MhBPaszYFNTqOV7kPB2
iXLFwV3FhbSHcCH9rgc4J01wOhjBVqTTffgThyfrtlD/e4AKSNdwwAHJkg8YpEQr
VUaMtJEeFf/9InzSbRF5ytRgsYu22uezvqb+NKZA+GIyW32inSDPZ+VtCbUn1Akr
pXfIzq38lAaNp7hHI7vY9i5D3DzR+E862wLGA2JCqwbIFY3hryygLOlgd2UVBzYR
DsCBd2kBLvi9JxjBhsxn1jjv7x41sMno1jkwbEDqoPgbnxuCVqr2UioEjC5Znqo9
s84/CaFBHr8bcetCpgdOMX/Z4QPhilIbwqRGhDalM+Pk2y4smQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGeYYe19+nEJ4Bbzk8ncSFGiexogMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTEyZWFmM2UtZWI1YS0z
NmMxLWE3MjYtZjIwNWEyNWY3MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIowwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYfda7EfUNsaJ3VaN/I7XrrhEa4ok1Y52lWWjg7gUlp8hGp8/i45I5aGE
EVNPe47JXQnUMcLC1H7Cfm4oSnQkRXMMqaH0MBjj4YvurGFAUFNprPOUIQKxf/Iy
dCwtYr+cze4ns3rdivnskwHqWwM7BHEL02+9J5HhohiRgur17fIUfucUynyeXrCe
4aky/nAAPgq+sS4XsXw2BspAvZYvepBBtaCZFwvCO/LQQDeCxzFl2/qCUnzMm7rx
1O+0SG5PWbnYWl9NaTDcJ/KzulNI3d97GBL2dl3NnSj4/gWpglUEgwsuwPoFhlLB
ZU/14qXzilsFdIZ1pVqip1rKCUU12A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:30 2025 by rpki-client