Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a75dddf8-02df-3b76-b915-c696c124696b.roa
File:                     a75dddf8-02df-3b76-b915-c696c124696b.roa (raw, json)
Hash identifier:          +ULFoYfBLGNMfuquOA8u5eOJO0dn2hyHMpi757FG35s=
Subject key identifier:   C8:A1:46:C5:B9:3F:6B:7C:21:E4:37:66:22:83:90:7C:58:E6:56:0E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849B17B371631B7BA04C8C3BE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a75dddf8-02df-3b76-b915-c696c124696b.roa
Signing time:             Wed 30 Apr 2025 02:40:10 +0000
ROA not before:           Wed 30 Apr 2025 02:40:10 +0000
ROA not after:            Tue 29 Jul 2025 02:40:10 +0000
asID:                     396982
IP address blocks:        34.132.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:7b:37:16:31:b7:ba:04:c8:c3:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 30 02:40:10 2025 GMT
            Not After : Jul 29 02:40:10 2025 GMT
        Subject: CN=6779dcda-63de-481c-8163-3ad8af8ddab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:45:8f:2d:04:d7:08:4a:f2:13:04:fb:e8:
                    a8:7a:d6:6a:de:7b:af:14:8f:36:bc:b7:8a:e6:ee:
                    f4:ca:d6:22:a7:77:09:21:9e:e5:ad:5f:fd:82:2b:
                    f9:36:de:f7:53:6d:69:a1:5b:7f:1b:01:d2:a3:6d:
                    7e:09:79:7f:60:53:4b:41:f4:f8:80:6a:96:96:ae:
                    dc:82:10:6b:85:2d:e6:15:c3:ed:57:21:e2:b2:23:
                    b7:1b:f3:30:b8:88:ea:e6:d7:30:9b:8c:00:17:69:
                    62:d5:78:c7:98:8c:a2:64:a6:7e:57:20:7d:f9:22:
                    c1:aa:15:5b:07:67:04:d3:0d:8b:9c:d1:27:c5:79:
                    b6:c2:6f:0c:37:f6:95:90:50:da:f8:b1:8c:07:3d:
                    90:3e:ff:bc:84:01:b3:16:f7:c0:4d:20:44:bf:15:
                    c1:a6:02:2d:0c:01:97:37:a9:73:0c:bc:94:94:17:
                    1d:d6:28:43:74:1b:ed:33:80:51:61:88:5f:c2:da:
                    cd:16:4e:0d:49:74:eb:12:77:94:f5:a5:1b:54:80:
                    3f:b1:61:93:55:12:1b:b4:7a:78:fb:83:c9:c1:07:
                    13:aa:4d:cd:93:a4:8d:a2:37:7d:29:90:5d:22:00:
                    3e:a6:ba:cd:32:4d:63:68:f3:b2:f7:cf:08:2a:5f:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A1:46:C5:B9:3F:6B:7C:21:E4:37:66:22:83:90:7C:58:E6:56:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a75dddf8-02df-3b76-b915-c696c124696b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.132.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:0a:fe:54:6e:0e:68:e8:8d:c2:33:2b:79:ab:19:f1:89:
         31:54:31:e2:84:04:f0:7f:2b:78:ff:44:38:b5:17:88:4f:7b:
         05:4c:84:95:8c:62:01:94:97:09:82:3a:4d:82:8e:36:e3:c9:
         ed:2c:80:35:96:b8:19:af:5f:00:97:96:65:1c:45:0e:75:3f:
         75:66:b2:ae:91:1d:4f:d3:e1:67:07:f3:5e:2a:6d:70:be:f4:
         f8:de:58:e7:e2:e9:6b:9f:2e:1a:41:0b:21:b8:6e:b0:1d:95:
         f9:32:47:9b:5d:8e:bf:0e:ee:98:70:b2:ea:89:cd:15:99:26:
         c5:60:15:fc:59:39:1a:cf:79:1e:23:13:81:1b:94:41:9b:24:
         d1:2b:ce:25:61:57:0d:cc:53:e4:9d:65:fd:57:38:5f:64:9e:
         08:36:73:37:68:11:b3:85:a2:c3:be:ce:45:71:0d:5d:07:08:
         67:88:bc:21:f8:c6:6b:2c:d5:e1:76:66:bc:7b:b6:f5:05:54:
         48:50:29:03:62:db:11:52:39:39:e8:b0:f2:86:70:f2:8c:c1:
         24:c6:1f:df:0d:89:e1:74:0b:61:38:78:b6:17:d9:be:be:af:
         0b:65:af:bb:a1:a7:9f:a8:54:d5:06:bf:94:79:da:0e:f4:ae:
         27:c4:2f:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxezcWMbe6BMjDvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQzMDAyNDAxMFoXDTI1MDcyOTAyNDAxMFowLzEtMCsGA1UEAxMk
Njc3OWRjZGEtNjNkZS00ODFjLTgxNjMtM2FkOGFmOGRkYWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH5Fjy0E1whK8hME++ioetZq3nuvFI82vLeK
5u70ytYip3cJIZ7lrV/9giv5Nt73U21poVt/GwHSo21+CXl/YFNLQfT4gGqWlq7c
ghBrhS3mFcPtVyHisiO3G/MwuIjq5tcwm4wAF2li1XjHmIyiZKZ+VyB9+SLBqhVb
B2cE0w2LnNEnxXm2wm8MN/aVkFDa+LGMBz2QPv+8hAGzFvfATSBEvxXBpgItDAGX
N6lzDLyUlBcd1ihDdBvtM4BRYYhfwtrNFk4NSXTrEneU9aUbVIA/sWGTVRIbtHp4
+4PJwQcTqk3Nk6SNojd9KZBdIgA+prrNMk1jaPOy988IKl+IXQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMihRsW5P2t8IeQ3ZiKDkHxY5lYOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTc1ZGRkZjgtMDJkZi0z
Yjc2LWI5MTUtYzY5NmMxMjQ2OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIoQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVowK/lRuDmjojcIzK3mrGfGJMVQx4oQE8H8reP9EOLUXiE97BUyElYxi
AZSXCYI6TYKONuPJ7SyANZa4Ga9fAJeWZRxFDnU/dWayrpEdT9PhZwfzXiptcL70
+N5Y5+Lpa58uGkELIbhusB2V+TJHm12Ovw7umHCy6onNFZkmxWAV/Fk5Gs95HiMT
gRuUQZsk0SvOJWFXDcxT5J1l/Vc4X2SeCDZzN2gRs4Wiw77ORXENXQcIZ4i8IfjG
ayzV4XZmvHu29QVUSFApA2LbEVI5Oeiw8oZw8ozBJMYf3w2J4XQLYTh4thfZvr6v
C2Wvu6Gnn6hU1Qa/lHnaDvSuJ8QvlQ==
-----END CERTIFICATE-----
Generated at Sun May 4 18:42:38 2025 by rpki-client