Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa
File:                     975f556a-44d8-3bc2-8767-535d89bbaf8d.roa (raw, json)
Hash identifier:          8yDGzNGReMPvgbA8TNSg4WHPHNcjfyodrep3ySIG9W0=
Subject key identifier:   16:B9:43:4F:F9:58:D0:BA:F4:D9:36:A4:BA:F1:E4:42:73:84:B0:58
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A4540460EDB430657C510D500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     19527
IP address blocks:        34.1.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:46:0e:db:43:06:57:c5:10:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=041067dc-2716-4989-b358-af90598449ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:af:d9:83:e0:07:a4:2d:c1:19:77:da:68:
                    55:ce:d0:77:7e:57:a8:a9:4d:9c:c4:a0:42:8c:26:
                    b9:40:15:15:f6:b9:b9:f0:34:85:a1:ca:e7:5b:00:
                    88:e4:89:c1:ad:de:30:e8:4c:48:56:8d:a0:ee:9d:
                    43:72:ce:7e:a6:9e:3e:0d:d9:62:a2:47:e5:24:07:
                    7f:16:f8:7b:8e:4d:2e:89:8b:f5:01:f7:db:09:fe:
                    90:57:7a:e5:95:68:9b:e6:a5:2c:69:e1:40:96:67:
                    3b:03:64:a3:72:50:96:10:18:70:50:1b:79:49:4f:
                    14:50:b2:f5:a6:ed:3c:6c:c5:96:67:6a:4d:37:9d:
                    e3:e9:ed:58:12:83:2a:27:0b:44:ab:c4:43:f1:4b:
                    a1:f6:95:2b:fb:78:8b:ab:bb:b7:8b:aa:2a:02:c8:
                    a6:57:ad:82:db:30:0c:97:12:a3:9a:c2:3c:3f:17:
                    e1:60:11:c6:25:e0:f5:74:73:c1:bf:bb:66:07:53:
                    bb:33:a9:82:58:03:3f:53:41:65:91:f1:35:fc:b1:
                    eb:cb:5c:e4:4c:22:0b:18:c1:c4:0f:0f:7e:48:50:
                    5c:23:3e:31:29:6f:34:7e:a1:3a:1a:8d:24:63:17:
                    13:ce:db:cd:08:47:b5:98:0d:f1:72:19:bb:27:16:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B9:43:4F:F9:58:D0:BA:F4:D9:36:A4:BA:F1:E4:42:73:84:B0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:e9:54:6d:e4:03:3d:7e:9c:86:eb:6f:4f:fe:ac:a0:ff:
         f7:21:2b:63:b2:c0:18:07:b8:ea:c2:27:f5:78:35:d8:b3:72:
         6a:55:39:ec:84:07:3e:35:31:69:b2:c3:a6:a1:c7:0b:c6:65:
         40:56:1c:7e:f9:c5:2a:9c:84:ad:4c:fa:84:d0:36:45:ac:a6:
         e2:ab:12:d0:c2:e6:a3:aa:21:80:62:1b:1c:95:b4:0e:ee:cb:
         a1:59:a3:05:9f:cf:7c:cf:2a:01:1a:51:47:7a:bf:88:82:2f:
         b6:83:a9:de:6d:c8:7b:51:e9:f9:2e:8b:3d:32:31:0d:91:97:
         cc:81:03:4c:2d:40:fc:74:9f:60:53:5e:91:2a:b3:c8:d4:ac:
         ce:19:5e:9a:a3:d0:9c:c2:46:74:61:f1:2b:eb:80:58:e8:dc:
         59:9e:db:f8:0f:a6:b7:f5:84:0b:af:57:57:54:c2:c0:ed:00:
         35:ef:fb:bb:14:53:f1:c1:ab:b0:bd:b7:29:65:5a:4f:cd:53:
         04:93:aa:8b:25:8c:fe:85:01:ff:a8:cd:95:44:de:93:9c:cd:
         9f:07:8a:c0:4d:15:2f:f0:18:fa:ae:df:52:5b:9e:93:64:32:
         b0:3d:57:6d:d4:5b:2e:7c:46:ac:61:de:c0:b6:ad:89:f0:0b:
         17:a1:ad:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQEYO20MGV8UQ1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk
MDQxMDY3ZGMtMjcxNi00OTg5LWIzNTgtYWY5MDU5ODQ0OWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrGv2YPgB6QtwRl32mhVztB3fleoqU2cxKBC
jCa5QBUV9rm58DSFocrnWwCI5InBrd4w6ExIVo2g7p1Dcs5+pp4+DdliokflJAd/
Fvh7jk0uiYv1AffbCf6QV3rllWib5qUsaeFAlmc7A2SjclCWEBhwUBt5SU8UULL1
pu08bMWWZ2pNN53j6e1YEoMqJwtEq8RD8Uuh9pUr+3iLq7u3i6oqAsimV62C2zAM
lxKjmsI8PxfhYBHGJeD1dHPBv7tmB1O7M6mCWAM/U0FlkfE1/LHry1zkTCILGMHE
Dw9+SFBcIz4xKW80fqE6Go0kYxcTztvNCEe1mA3xchm7JxY70wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBa5Q0/5WNC69Nk2pLrx5EJzhLBYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTc1ZjU1NmEtNDRkOC0z
YmMyLTg3NjctNTM1ZDg5YmJhZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYN6VRt5AM9fpyG629P/qyg//chK2OywBgHuOrCJ/V4NdizcmpVOeyE
Bz41MWmyw6ahxwvGZUBWHH75xSqchK1M+oTQNkWspuKrEtDC5qOqIYBiGxyVtA7u
y6FZowWfz3zPKgEaUUd6v4iCL7aDqd5tyHtR6fkuiz0yMQ2Rl8yBA0wtQPx0n2BT
XpEqs8jUrM4ZXpqj0JzCRnRh8SvrgFjo3Fme2/gPprf1hAuvV1dUwsDtADXv+7sU
U/HBq7C9tyllWk/NUwSTqosljP6FAf+ozZVE3pOczZ8HisBNFS/wGPqu31JbnpNk
MrA9V23UWy58Rqxh3sC2rYnwCxehrTE=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:17:39 2025 by rpki-client