Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4fd86cb-762a-353d-a937-901e2bd43a6d.roa
File:                     c4fd86cb-762a-353d-a937-901e2bd43a6d.roa (raw, json)
Hash identifier:          wEwFSImTF3T6pQJdivB3KMIt6DyC/YevV8SuCdE6jAM=
Subject key identifier:   8E:69:A7:99:17:CB:8C:89:FC:4E:B9:82:C8:F7:3D:53:2D:D6:CC:04
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784DA2B5BFABA7D0574DB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4fd86cb-762a-353d-a937-901e2bd43a6d.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.176.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:da:2b:5b:fa:ba:7d:05:74:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=1c362006-d5ea-4c69-a3b2-a4ad90ede444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:9c:75:77:c2:1b:16:a2:59:7b:17:b6:b2:
                    64:9e:1a:3e:78:3a:38:af:0a:17:66:10:61:41:34:
                    12:e7:6e:ae:3f:09:5f:e2:2b:fb:23:a9:61:16:2b:
                    78:47:d9:a3:78:d7:b6:bd:e4:73:3b:47:32:9c:20:
                    ac:69:74:5b:87:ab:04:a6:fa:a3:31:6d:aa:b9:be:
                    a3:85:75:97:27:e1:36:d9:80:10:88:87:a7:68:d5:
                    88:fb:9f:fa:b5:84:55:ad:a3:80:e8:c4:ce:38:68:
                    64:e0:70:4d:d9:d5:a0:01:fc:3a:ef:fd:82:ae:4d:
                    df:48:83:84:b7:a6:a1:fc:59:2a:ac:44:d9:21:38:
                    70:88:08:a9:c0:98:12:1b:18:77:61:e8:3e:b0:13:
                    e5:0c:94:49:72:26:a4:c1:98:fb:29:fc:c1:e4:83:
                    cb:ac:06:1e:9d:6d:51:af:3b:76:7f:d8:ce:80:20:
                    5a:b3:07:75:0b:55:b4:9c:c9:f4:cd:a4:a4:4e:ea:
                    dd:f7:75:bc:67:61:57:c8:c7:d0:2c:b6:71:d4:ed:
                    20:00:16:25:99:f1:29:9d:bc:69:fb:1b:54:69:a0:
                    98:cb:90:52:d3:85:07:82:b6:c6:e8:52:51:33:b9:
                    5e:a2:c6:1b:d1:03:b9:93:80:17:6c:56:17:82:ef:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:69:A7:99:17:CB:8C:89:FC:4E:B9:82:C8:F7:3D:53:2D:D6:CC:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4fd86cb-762a-353d-a937-901e2bd43a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.176.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:90:43:17:fd:a0:6c:f4:f2:9b:86:c1:7b:ab:14:30:0f:31:
         d1:09:0d:27:e5:29:db:a9:1c:63:7e:43:a5:ed:ad:cf:b4:8e:
         ee:68:2a:64:0c:28:89:1b:bf:3e:84:a7:c0:31:00:3a:2b:0a:
         d6:bf:38:fb:5d:1a:89:9f:a7:38:21:a7:c6:d6:92:8e:a8:01:
         20:88:76:3f:7f:8c:f2:4c:a2:95:08:c2:d9:b7:b8:e2:b9:83:
         55:7a:5f:ea:bb:9b:0d:de:85:eb:7d:3c:b2:34:aa:c9:9b:51:
         45:a6:c2:49:10:71:6f:3b:1a:ba:44:74:3d:70:74:ab:8c:c5:
         3c:42:3b:72:73:5c:c7:68:09:b1:05:6a:4f:2c:36:33:68:9c:
         82:bf:60:c3:e5:6d:d3:5b:d7:90:fa:2b:62:8d:40:ab:bf:77:
         af:79:80:6f:93:08:fc:8a:0d:82:6a:d7:49:39:d5:14:f0:7f:
         79:90:8d:b1:6b:4f:49:eb:18:c3:96:59:c3:d8:ee:81:d7:f6:
         a2:72:98:17:9e:50:0e:fd:e1:fc:07:ea:b7:9b:a3:ae:b2:7e:
         bd:9f:8f:84:e1:bb:79:56:ab:8b:2b:24:4d:b6:c8:44:be:ae:
         06:d9:ee:57:a6:0e:55:6b:79:64:4a:7f:a9:af:63:64:aa:d6:
         41:95:41:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNorW/q6fQV02wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
MWMzNjIwMDYtZDVlYS00YzY5LWEzYjItYTRhZDkwZWRlNDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjicdXfCGxaiWXsXtrJknho+eDo4rwoXZhBh
QTQS526uPwlf4iv7I6lhFit4R9mjeNe2veRzO0cynCCsaXRbh6sEpvqjMW2qub6j
hXWXJ+E22YAQiIenaNWI+5/6tYRVraOA6MTOOGhk4HBN2dWgAfw67/2Crk3fSIOE
t6ah/FkqrETZIThwiAipwJgSGxh3Yeg+sBPlDJRJciakwZj7KfzB5IPLrAYenW1R
rzt2f9jOgCBaswd1C1W0nMn0zaSkTurd93W8Z2FXyMfQLLZx1O0gABYlmfEpnbxp
+xtUaaCYy5BS04UHgrbG6FJRM7leosYb0QO5k4AXbFYXgu+PsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5pp5kXy4yJ/E65gsj3PVMt1swEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzRmZDg2Y2ItNzYyYS0z
NTNkLWE5MzctOTAxZTJiZDQzYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuQQxf9oGz08puGwXurFDAPMdEJDSflKdupHGN+Q6Xtrc+0ju5oKmQM
KIkbvz6Ep8AxADorCta/OPtdGomfpzghp8bWko6oASCIdj9/jPJMopUIwtm3uOK5
g1V6X+q7mw3ehet9PLI0qsmbUUWmwkkQcW87GrpEdD1wdKuMxTxCO3JzXMdoCbEF
ak8sNjNonIK/YMPlbdNb15D6K2KNQKu/d695gG+TCPyKDYJq10k51RTwf3mQjbFr
T0nrGMOWWcPY7oHX9qJymBeeUA794fwH6rebo66yfr2fj4Thu3lWq4srJE22yES+
rgbZ7lemDlVreWRKf6mvY2Sq1kGVQYI=
-----END CERTIFICATE-----
Generated at Sun May 4 18:55:04 2025 by rpki-client