Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c81aaf01-96dd-36bb-9604-567c8169cb13.roa
File:                     c81aaf01-96dd-36bb-9604-567c8169cb13.roa (raw, json)
Hash identifier:          k6BxgTQbl3qJYuLWNq6ibxcuWK4E66xPcKIx55RCc4I=
Subject key identifier:   09:82:B7:2B:A9:E7:C7:D5:20:58:D2:42:86:3B:54:94:20:9F:21:A1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797A43E2611DE0BE8B69D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c81aaf01-96dd-36bb-9604-567c8169cb13.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        34.150.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:a4:3e:26:11:de:0b:e8:b6:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=f4fc6bd4-a966-4acf-91e3-e270227f29e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:7a:25:e0:4d:bc:0c:8d:0b:3c:6d:1d:44:
                    f6:5b:f6:06:53:0e:a0:dd:a6:97:45:0a:82:fb:ee:
                    7b:12:bc:a4:41:15:bd:52:be:36:b9:1d:a2:bc:7d:
                    15:cd:35:e7:eb:12:d9:8f:70:24:22:da:c8:e5:5b:
                    7e:d0:b5:10:57:e1:31:af:4b:1c:83:6d:7d:ba:aa:
                    8a:88:c4:1d:c8:80:e9:97:eb:08:e0:45:f0:a2:7d:
                    a3:9c:da:f7:c6:6e:97:1b:7e:f4:b2:9b:f7:4c:b6:
                    30:45:5a:15:0e:4b:4c:df:fd:d7:61:20:91:36:76:
                    8b:25:7b:ac:2e:bb:e3:d4:61:06:49:3e:6b:10:41:
                    0c:2e:57:ff:dd:a5:36:56:46:08:3b:29:41:6a:ea:
                    0b:40:8f:92:5c:84:8e:57:2d:7b:e5:47:9a:ea:59:
                    78:99:23:32:4d:10:d7:8e:ea:6e:77:af:f7:90:59:
                    31:6d:03:40:8b:f1:fb:00:ff:60:3b:d6:da:b1:ea:
                    a2:e2:44:db:88:7a:3d:ea:11:82:2a:b5:3d:c1:83:
                    5b:8d:46:5d:23:4e:01:02:d4:12:64:2f:c4:b4:40:
                    f2:a9:08:aa:0c:d9:47:d7:d1:fc:d4:0b:43:15:6f:
                    b8:02:e9:91:5f:19:1a:6a:16:54:60:49:9e:7d:3f:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:B7:2B:A9:E7:C7:D5:20:58:D2:42:86:3B:54:94:20:9F:21:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c81aaf01-96dd-36bb-9604-567c8169cb13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.150.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:28:87:fa:f8:af:c2:c4:7d:9e:63:86:5b:3e:4b:3d:60:4e:
         2a:20:45:0b:7b:4e:96:69:78:86:43:42:d4:08:b5:d5:26:31:
         2a:24:80:b4:40:ce:21:ac:1c:5d:ce:b3:d3:d7:98:57:40:38:
         76:45:4e:9b:09:2c:6a:bf:07:18:18:d4:6e:ac:12:f8:96:5d:
         ea:bf:96:50:d9:47:a7:13:29:67:8c:04:91:07:71:e3:9b:5f:
         46:c8:81:a7:21:e2:b8:f4:6c:a1:13:b0:c9:51:11:cb:31:a3:
         43:9c:08:db:bf:8e:70:ca:9a:a2:e4:c5:d3:32:5c:d3:d6:4a:
         27:c6:da:5c:82:3f:80:01:15:23:8e:f5:01:13:1f:8c:a5:58:
         be:87:68:6a:16:0d:59:dc:3c:fa:91:c5:6c:42:96:1c:34:01:
         51:54:f3:6d:74:88:30:96:8d:39:04:0d:7e:d8:0f:7f:f8:3d:
         5d:95:2b:a2:e3:03:e7:aa:a2:a8:13:d9:7d:a5:d3:35:e7:bc:
         be:5e:4a:08:58:28:1f:a7:76:40:58:51:76:42:5f:15:17:b6:
         83:0b:46:d7:34:c5:f2:ce:61:ad:48:21:37:37:61:d9:85:d3:
         a6:21:ee:33:da:31:df:6c:91:69:30:c0:1e:f0:75:92:5a:81:
         3c:cc:50:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6Q+JhHeC+i2nQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZjRmYzZiZDQtYTk2Ni00YWNmLTkxZTMtZTI3MDIyN2YyOWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoh6JeBNvAyNCzxtHUT2W/YGUw6g3aaXRQqC
++57ErykQRW9Ur42uR2ivH0VzTXn6xLZj3AkItrI5Vt+0LUQV+Exr0scg219uqqK
iMQdyIDpl+sI4EXwon2jnNr3xm6XG370spv3TLYwRVoVDktM3/3XYSCRNnaLJXus
Lrvj1GEGST5rEEEMLlf/3aU2VkYIOylBauoLQI+SXISOVy175Uea6ll4mSMyTRDX
jupud6/3kFkxbQNAi/H7AP9gO9baseqi4kTbiHo96hGCKrU9wYNbjUZdI04BAtQS
ZC/EtEDyqQiqDNlH19H81AtDFW+4AumRXxkaahZUYEmefT/UDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmCtyup58fVIFjSQoY7VJQgnyGhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzgxYWFmMDEtOTZkZC0z
NmJiLTk2MDQtNTY3YzgxNjljYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcoh/r4r8LEfZ5jhls+Sz1gTiogRQt7TpZpeIZDQtQItdUmMSokgLRA
ziGsHF3Os9PXmFdAOHZFTpsJLGq/BxgY1G6sEviWXeq/llDZR6cTKWeMBJEHceOb
X0bIgach4rj0bKETsMlREcsxo0OcCNu/jnDKmqLkxdMyXNPWSifG2lyCP4ABFSOO
9QETH4ylWL6HaGoWDVncPPqRxWxClhw0AVFU8210iDCWjTkEDX7YD3/4PV2VK6Lj
A+eqoqgT2X2l0zXnvL5eSghYKB+ndkBYUXZCXxUXtoMLRtc0xfLOYa1IITc3YdmF
06Yh7jPaMd9skWkwwB7wdZJagTzMUGo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:33:43 2025 by rpki-client