Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a987f01c-6f3b-37a5-9635-ee12918e0b4f.roa
File:                     a987f01c-6f3b-37a5-9635-ee12918e0b4f.roa (raw, json)
Hash identifier:          zJtCpa4bsoODpVhfiYWuliHqr91JIkCrGyCfUgRxODI=
Subject key identifier:   C3:81:51:A2:04:65:C0:F5:14:89:11:02:02:89:E0:33:26:87:8C:55
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B679787AA8066AD6960A7D6E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a987f01c-6f3b-37a5-9635-ee12918e0b4f.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.201.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:87:aa:80:66:ad:69:60:a7:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=151771e4-90b5-417c-ad9e-b21a82482991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:66:fc:9a:bb:38:fc:71:56:bd:08:92:2d:
                    4c:e1:f9:82:af:0e:01:12:c3:08:38:84:45:d6:dd:
                    a7:72:5c:b3:de:b6:aa:aa:d9:9a:f5:74:92:4e:e7:
                    ea:b5:c5:54:8c:8d:06:90:27:48:d4:66:05:cb:9b:
                    3b:51:42:ee:2c:c6:74:40:fa:a7:41:0c:93:7d:a8:
                    61:b9:d7:b1:81:a8:92:39:e7:0d:d9:84:3b:3e:fc:
                    69:3d:7c:b4:6d:91:b0:77:d6:e9:bd:9a:f1:ca:3d:
                    8c:c9:18:cf:9e:9c:af:87:aa:ab:83:d1:d0:20:c1:
                    07:fe:51:88:1a:2c:b7:0a:dc:c5:54:33:3e:ca:13:
                    c2:01:51:12:63:95:f8:37:8e:e4:85:95:9d:b1:77:
                    56:7d:2b:c6:3b:5d:87:7e:37:7d:b4:54:52:ad:13:
                    04:b6:17:a4:7c:ca:53:bd:44:f7:54:22:5d:86:f4:
                    97:b6:d8:bc:dc:34:d9:60:5c:c2:01:93:88:a5:cd:
                    e6:b7:84:51:91:7e:cc:08:e2:c1:83:68:ad:14:0e:
                    24:4c:14:b3:fe:b2:64:fd:41:6b:e2:72:76:28:63:
                    9d:bf:c2:18:3b:f1:1f:99:28:e4:60:02:f9:f6:1b:
                    f4:5f:bb:8d:e0:85:be:ab:71:62:93:08:4f:53:00:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:81:51:A2:04:65:C0:F5:14:89:11:02:02:89:E0:33:26:87:8C:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a987f01c-6f3b-37a5-9635-ee12918e0b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.201.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:65:30:5b:f7:2b:ee:ac:08:71:18:02:f2:21:2c:31:51:06:
         07:ca:22:e3:06:82:84:ee:0f:a3:23:78:68:77:50:91:8d:6a:
         97:d8:71:51:64:c3:3b:92:21:ef:84:2f:cf:9e:ba:18:53:26:
         3e:32:e5:20:84:3e:17:2d:8c:24:a5:f4:73:a9:d8:0a:50:14:
         87:31:d9:03:e7:35:d1:4e:ff:3d:9b:01:90:d0:d1:72:46:35:
         74:a2:d8:4a:8f:ca:6d:d2:b4:6c:d6:13:3c:bb:1b:71:ce:39:
         ac:2e:ee:63:b1:9f:32:ea:b0:59:d9:de:d2:93:4e:27:1f:2f:
         42:f3:75:14:ce:f2:03:65:cb:2d:3c:06:a0:1d:2f:5e:eb:01:
         9f:91:da:8e:ee:97:a1:f6:5f:97:1d:33:5f:2f:42:c1:de:2a:
         12:bb:ad:fe:f9:2c:b8:b0:a5:05:35:38:7a:25:a5:c7:83:32:
         67:90:28:1d:34:12:37:8c:76:8e:7e:a6:2a:1d:58:15:ea:69:
         c4:86:89:46:18:44:85:35:15:bf:92:33:e7:aa:ea:f7:3d:d2:
         44:dc:c2:e3:05:77:f7:37:b9:90:cf:d7:84:fc:fa:03:0b:cb:
         18:82:c1:08:91:22:92:3c:ec:48:9f:2e:19:35:02:a0:08:03:
         4b:6c:15:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4eqgGataWCn1uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
MTUxNzcxZTQtOTBiNS00MTdjLWFkOWUtYjIxYTgyNDgyOTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkJm/Jq7OPxxVr0Iki1M4fmCrw4BEsMIOIRF
1t2nclyz3raqqtma9XSSTufqtcVUjI0GkCdI1GYFy5s7UULuLMZ0QPqnQQyTfahh
udexgaiSOecN2YQ7PvxpPXy0bZGwd9bpvZrxyj2MyRjPnpyvh6qrg9HQIMEH/lGI
Giy3CtzFVDM+yhPCAVESY5X4N47khZWdsXdWfSvGO12Hfjd9tFRSrRMEthekfMpT
vUT3VCJdhvSXtti83DTZYFzCAZOIpc3mt4RRkX7MCOLBg2itFA4kTBSz/rJk/UFr
4nJ2KGOdv8IYO/EfmSjkYAL59hv0X7uN4IW+q3FikwhPUwAXuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOBUaIEZcD1FIkRAgKJ4DMmh4xVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTk4N2YwMWMtNmYzYi0z
N2E1LTk2MzUtZWUxMjkxOGUwYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8kiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZlMFv3K+6sCHEYAvIhLDFRBgfKIuMGgoTuD6MjeGh3UJGNapfYcVFk
wzuSIe+EL8+euhhTJj4y5SCEPhctjCSl9HOp2ApQFIcx2QPnNdFO/z2bAZDQ0XJG
NXSi2EqPym3StGzWEzy7G3HOOawu7mOxnzLqsFnZ3tKTTicfL0LzdRTO8gNlyy08
BqAdL17rAZ+R2o7ul6H2X5cdM18vQsHeKhK7rf75LLiwpQU1OHolpceDMmeQKB00
EjeMdo5+piodWBXqacSGiUYYRIU1Fb+SM+eq6vc90kTcwuMFd/c3uZDP14T8+gML
yxiCwQiRIpI87EifLhk1AqAIA0tsFWU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:14 2025 by rpki-client