Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa
File:                     975f556a-44d8-3bc2-8767-535d89bbaf8d.roa (raw, json)
Hash identifier:          GIzprwocEkZaYuQOefoQNFZORP+7mqjQ1BwhxHKCN3Y=
Subject key identifier:   75:EE:12:CB:E0:04:F9:02:7E:9A:F8:3E:BB:03:13:A6:85:4A:B0:4D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B25FC43C75617487F23139B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     19527
IP address blocks:        34.1.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:43:c7:56:17:48:7f:23:13:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=c9c7021b-cece-463d-8c45-5477902f2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b5:d5:40:d2:f2:de:ff:ee:d7:7c:2f:50:02:
                    e2:79:95:fa:39:9a:ca:ab:7b:db:c6:72:ce:6f:93:
                    2d:b4:85:c0:c1:87:0b:bd:b9:f8:4e:b3:4d:48:dc:
                    89:f2:a5:7a:6e:d7:ac:e1:49:59:13:25:24:08:5f:
                    94:5d:a1:a1:e8:ec:c6:05:53:d6:57:c5:bc:e5:b6:
                    34:2a:9c:12:47:36:00:ad:ee:92:59:f1:68:38:46:
                    fb:99:dd:6e:37:78:da:3f:b0:41:14:c5:32:3d:20:
                    01:6a:1b:b2:4e:58:7c:9e:70:26:77:be:74:79:3a:
                    db:ae:13:f2:96:fa:64:23:96:2d:ef:45:12:23:0d:
                    eb:f3:67:09:55:16:b7:1c:92:6e:89:3e:66:a1:70:
                    b2:50:cf:f6:60:6a:60:36:69:21:f9:75:84:67:99:
                    02:1b:3b:06:f9:e0:c6:a9:87:af:42:54:74:f7:f3:
                    29:5c:29:4e:3e:70:99:df:c3:c3:0f:28:1b:d2:c5:
                    05:83:68:3d:e8:91:5f:c8:61:e2:5c:52:29:fd:02:
                    c5:33:2d:6e:e5:9f:f3:3f:e2:e0:0f:b3:ee:c1:d4:
                    1b:f9:78:ac:c2:1b:b6:26:61:8f:29:d8:0a:27:79:
                    7f:47:55:5e:61:6e:4d:13:7d:76:9f:ac:64:6f:e1:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:12:CB:E0:04:F9:02:7E:9A:F8:3E:BB:03:13:A6:85:4A:B0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:be:93:5d:61:24:db:b3:97:83:4a:65:72:6c:ba:33:f2:45:
         f5:00:06:22:1b:1c:84:ea:a7:d8:ca:71:ae:da:f9:46:05:89:
         db:08:7b:75:e8:77:ba:82:36:0c:ab:54:6b:ac:34:47:65:b0:
         69:7e:49:3d:99:0d:b2:81:ae:47:41:67:1b:fe:a2:9e:1a:b0:
         e8:f9:88:58:69:5e:76:3c:93:8c:3f:4a:7f:26:45:e4:7e:76:
         bd:9b:e0:f4:d7:06:f6:7e:0b:65:ca:d3:e7:47:55:81:fb:35:
         fb:84:ee:3f:70:aa:73:ea:0d:5c:82:f0:1c:2e:2d:75:bd:44:
         e8:67:35:21:7d:58:3d:d4:5a:fd:5c:ea:36:22:46:8e:55:14:
         8c:36:a4:eb:2e:9d:9f:65:a3:d7:3f:2d:cd:fe:89:dd:9d:0e:
         03:24:be:a6:89:f0:72:26:03:c5:56:94:10:3a:65:78:fd:f6:
         e6:ae:75:59:49:77:9c:3f:0d:8a:3c:ab:64:a6:0d:b9:78:2d:
         ec:d5:e4:dd:59:0e:94:5e:ea:4d:5e:84:b3:50:d8:47:fe:45:
         fe:59:a1:b0:a5:3d:5f:a8:6c:ed:54:e3:b3:d7:d1:e9:4c:1c:
         26:f6:0b:d6:f5:0b:7c:43:77:da:5a:8d:76:c5:0a:19:33:bf:
         91:59:09:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EPHVhdIfyMTm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk
YzljNzAyMWItY2VjZS00NjNkLThjNDUtNTQ3NzkwMmYyMDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7XVQNLy3v/u13wvUALieZX6OZrKq3vbxnLO
b5MttIXAwYcLvbn4TrNNSNyJ8qV6btes4UlZEyUkCF+UXaGh6OzGBVPWV8W85bY0
KpwSRzYAre6SWfFoOEb7md1uN3jaP7BBFMUyPSABahuyTlh8nnAmd750eTrbrhPy
lvpkI5Yt70USIw3r82cJVRa3HJJuiT5moXCyUM/2YGpgNmkh+XWEZ5kCGzsG+eDG
qYevQlR09/MpXClOPnCZ38PDDygb0sUFg2g96JFfyGHiXFIp/QLFMy1u5Z/zP+Lg
D7PuwdQb+Xiswhu2JmGPKdgKJ3l/R1VeYW5NE312n6xkb+HiGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHXuEsvgBPkCfpr4PrsDE6aFSrBNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTc1ZjU1NmEtNDRkOC0z
YmMyLTg3NjctNTM1ZDg5YmJhZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFe+k11hJNuzl4NKZXJsujPyRfUABiIbHITqp9jKca7a+UYFidsIe3Xo
d7qCNgyrVGusNEdlsGl+ST2ZDbKBrkdBZxv+op4asOj5iFhpXnY8k4w/Sn8mReR+
dr2b4PTXBvZ+C2XK0+dHVYH7NfuE7j9wqnPqDVyC8BwuLXW9ROhnNSF9WD3UWv1c
6jYiRo5VFIw2pOsunZ9lo9c/Lc3+id2dDgMkvqaJ8HImA8VWlBA6ZXj99uaudVlJ
d5w/DYo8q2SmDbl4LezV5N1ZDpRe6k1ehLNQ2Ef+Rf5ZobClPV+obO1U47PX0elM
HCb2C9b1C3xDd9pajXbFChkzv5FZCZg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:13 2025 by rpki-client