Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9545a4b7-a30b-3913-b98a-21f841bd49da.roa
File:                     9545a4b7-a30b-3913-b98a-21f841bd49da.roa (raw, json)
Hash identifier:          nNEVpnXS6NzPUhwiriFnu6uMUML4645nfJJPii1ZBoY=
Subject key identifier:   4F:CC:F6:09:7F:B7:DC:C7:6D:94:07:E0:D6:C7:CA:D0:A4:2B:D0:60
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797A2A457234D0DD2221B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9545a4b7-a30b-3913-b98a-21f841bd49da.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.68.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:a2:a4:57:23:4d:0d:d2:22:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=35541f95-07db-4154-9a29-56f516375c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:95:86:bf:f0:d1:64:46:06:b0:39:28:4b:
                    9a:a4:cb:d3:b8:10:98:29:d5:b0:5d:37:1c:39:21:
                    6e:94:16:26:cc:b3:a4:f4:54:b2:4c:03:1c:31:1d:
                    b2:d0:aa:9d:fc:06:03:1c:be:73:96:47:32:25:85:
                    43:b3:53:4d:bd:92:6c:7a:7b:58:4c:26:01:ed:ef:
                    a4:f9:d7:79:8d:e6:16:22:4e:f5:76:5a:2f:76:98:
                    2e:79:83:78:dc:54:47:84:41:72:28:d2:34:5f:2c:
                    5e:df:4b:d0:10:66:10:d1:c6:df:58:3e:3d:34:85:
                    e8:40:f1:67:ac:aa:a1:47:13:52:ae:31:5b:a8:44:
                    3c:19:44:24:4d:32:30:f1:69:83:b3:58:f8:e4:a1:
                    53:6d:b9:17:81:07:15:9a:7b:c1:3d:38:68:23:fd:
                    24:1d:a6:da:71:2e:46:45:e9:92:7c:e2:6d:e4:6d:
                    52:52:68:02:a0:85:e5:e2:99:ec:0f:07:30:9d:34:
                    cd:ad:05:d5:0d:85:e0:0f:ad:2a:be:89:e3:c9:10:
                    2a:96:c6:f6:31:d7:fd:7e:4d:2b:10:e9:63:a9:7b:
                    a9:13:db:63:6a:01:b6:66:6e:1a:05:3b:b6:c6:09:
                    38:da:ba:a9:ce:54:3f:8d:14:e3:66:a9:83:4e:ad:
                    ae:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CC:F6:09:7F:B7:DC:C7:6D:94:07:E0:D6:C7:CA:D0:A4:2B:D0:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9545a4b7-a30b-3913-b98a-21f841bd49da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.68.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b4:b4:09:59:d8:10:95:dd:3f:a0:25:9e:98:d3:da:cb:8c:
         bb:39:30:3c:6d:9b:57:07:fe:d3:ef:d1:99:6d:11:48:78:44:
         78:ff:66:c8:5f:ff:5d:97:a4:18:f1:f9:55:f1:73:7d:41:bd:
         9a:aa:ce:1a:58:1d:cd:44:5d:dc:72:25:41:69:a0:5b:e6:86:
         18:39:31:dd:e2:c5:a8:7a:d9:8b:3e:2e:f0:09:08:79:f4:bf:
         8f:20:20:dd:87:c2:05:01:c9:d3:c5:2a:8b:e1:4f:bd:4d:5c:
         28:83:9e:0b:6a:1f:84:86:e2:d9:db:80:db:79:56:cf:4c:d0:
         5b:3c:94:9e:c4:05:e7:ae:f5:c8:ed:bc:dd:fc:39:f4:dc:e2:
         6c:44:cb:9f:fe:ce:a4:8f:d9:d8:c6:32:c5:9c:a1:80:2c:93:
         aa:75:f4:54:aa:9d:b2:6a:d3:ab:1c:89:fc:ad:44:5e:83:c9:
         92:b7:bd:94:50:e2:9e:ba:35:8d:e4:84:d8:e5:af:b0:50:db:
         95:9f:d5:f3:d8:b1:30:ee:bd:81:e1:43:44:2e:e5:eb:e8:01:
         51:12:8e:11:e4:7a:8a:ea:e5:d0:0e:47:e4:fd:12:93:b2:aa:
         bd:9e:80:84:89:ea:c9:a6:b9:50:1a:d7:72:7b:fb:2c:57:ae:
         c0:b1:c2:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6KkVyNNDdIiG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
MzU1NDFmOTUtMDdkYi00MTU0LTlhMjktNTZmNTE2Mzc1Yzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxSVhr/w0WRGBrA5KEuapMvTuBCYKdWwXTcc
OSFulBYmzLOk9FSyTAMcMR2y0Kqd/AYDHL5zlkcyJYVDs1NNvZJsentYTCYB7e+k
+dd5jeYWIk71dlovdpgueYN43FRHhEFyKNI0Xyxe30vQEGYQ0cbfWD49NIXoQPFn
rKqhRxNSrjFbqEQ8GUQkTTIw8WmDs1j45KFTbbkXgQcVmnvBPThoI/0kHabacS5G
RemSfOJt5G1SUmgCoIXl4pnsDwcwnTTNrQXVDYXgD60qvonjyRAqlsb2Mdf9fk0r
EOljqXupE9tjagG2Zm4aBTu2xgk42rqpzlQ/jRTjZqmDTq2udQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/M9gl/t9zHbZQH4NbHytCkK9BgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTU0NWE0YjctYTMwYi0z
OTEzLWI5OGEtMjFmODQxYmQ0OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFC0tAlZ2BCV3T+gJZ6Y09rLjLs5MDxtm1cH/tPv0ZltEUh4RHj/Zshf
/12XpBjx+VXxc31BvZqqzhpYHc1EXdxyJUFpoFvmhhg5Md3ixah62Ys+LvAJCHn0
v48gIN2HwgUBydPFKovhT71NXCiDngtqH4SG4tnbgNt5Vs9M0Fs8lJ7EBeeu9cjt
vN38OfTc4mxEy5/+zqSP2djGMsWcoYAsk6p19FSqnbJq06scifytRF6DyZK3vZRQ
4p66NY3khNjlr7BQ25Wf1fPYsTDuvYHhQ0Qu5evoAVESjhHkeorq5dAOR+T9EpOy
qr2egISJ6smmuVAa13J7+yxXrsCxwkw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:03:40 2025 by rpki-client