Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6b1e75f4-7a0f-311d-a839-0a65746ed042.roa
File:                     6b1e75f4-7a0f-311d-a839-0a65746ed042.roa (raw, json)
Hash identifier:          DdLlWPh9oELB4+jazIgfmK3pb8hd4fQJg7ZmkULiUzQ=
Subject key identifier:   33:9F:42:47:25:8B:28:69:72:54:DE:B6:72:80:FB:B1:E1:39:23:00
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A1F90291CBDD3759C8BE33380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6b1e75f4-7a0f-311d-a839-0a65746ed042.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     19527
IP address blocks:        34.0.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:29:1c:bd:d3:75:9c:8b:e3:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=b77c21be-01c0-479e-93a0-43da51bcfc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:02:0d:eb:25:89:98:1a:38:13:94:aa:2c:
                    9d:aa:da:10:c1:0a:50:0d:a9:cb:f1:32:c9:74:56:
                    e2:f5:01:72:8a:2d:b5:00:ed:5c:72:7f:72:ce:64:
                    bd:9e:c4:7f:26:9d:2c:38:a7:00:31:bb:19:02:42:
                    22:70:a8:a8:f2:37:0f:4c:ad:dd:02:1c:db:70:ec:
                    b4:96:0a:97:59:09:d3:8d:2d:b5:35:0b:bb:23:6b:
                    bf:d5:63:55:25:ba:2e:67:9e:68:e3:f1:9a:13:55:
                    e4:3f:79:e5:0d:6b:63:30:09:25:0b:56:52:b8:fe:
                    1f:b8:b4:fc:2d:b1:41:3c:77:f6:b0:af:6f:ab:48:
                    4f:32:ab:8e:8e:a2:31:5a:3c:d6:4b:2e:61:f5:10:
                    e4:8b:a8:4e:e7:33:33:48:a4:40:21:c7:8b:02:0e:
                    34:2a:c7:a2:70:e1:eb:b1:42:c4:b3:c3:ab:d2:97:
                    8d:21:19:97:3b:d1:41:77:d5:20:de:0d:ae:6e:5d:
                    5a:dc:bc:26:8b:97:ec:a0:c4:7a:27:4d:2b:d9:ac:
                    aa:b2:fe:61:a8:19:99:5f:b3:48:9c:61:42:97:d3:
                    e0:15:9d:8c:c0:27:f9:3a:14:9c:0b:10:4f:c5:01:
                    23:9b:1c:ec:55:bd:76:4e:6f:0e:c1:1d:e2:66:95:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:42:47:25:8B:28:69:72:54:DE:B6:72:80:FB:B1:E1:39:23:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6b1e75f4-7a0f-311d-a839-0a65746ed042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:26:0d:c4:a1:9e:61:0c:f1:bf:f7:c7:36:80:dd:8a:6d:0e:
         a9:92:30:c8:7a:ec:ec:a6:12:f0:10:84:e3:46:8e:4a:cb:16:
         cc:94:b8:03:85:6e:a1:5e:59:1d:b0:7e:c9:4e:59:de:e0:ca:
         c0:13:7c:fd:4a:16:50:b6:7b:39:45:19:3d:8f:a8:19:78:7a:
         a2:0c:0c:87:9d:62:f5:9e:65:0b:2d:20:9f:1a:cc:87:30:3f:
         23:43:0b:75:6e:6b:da:1c:71:fc:5a:5d:a3:ab:17:30:74:fd:
         5c:f1:58:61:79:18:a6:72:bd:1a:df:47:9c:20:8a:64:6b:d3:
         93:5b:2e:09:4d:fa:b8:48:78:d4:1b:be:e0:43:46:95:ac:c2:
         c1:68:c9:34:2c:35:fa:3d:87:a0:e6:41:4a:31:e2:29:35:23:
         9a:c7:03:dc:a7:73:be:64:55:2b:ee:b5:11:74:18:77:20:35:
         4b:0f:06:8f:7e:52:14:fb:17:f8:2f:ff:6b:64:46:77:62:50:
         eb:83:b2:57:ef:bb:a8:8b:e7:67:24:68:52:1d:9f:dd:5c:bd:
         ff:8c:88:c8:3d:78:6c:73:90:b2:0a:2c:de:dd:f2:2d:7b:3b:
         23:40:53:0e:80:4e:49:4b:c2:6c:87:c0:58:cc:96:00:c2:e4:
         fd:b8:80:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCkcvdN1nIvjM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
Yjc3YzIxYmUtMDFjMC00NzllLTkzYTAtNDNkYTUxYmNmYzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDwCDesliZgaOBOUqiydqtoQwQpQDanL8TLJ
dFbi9QFyii21AO1ccn9yzmS9nsR/Jp0sOKcAMbsZAkIicKio8jcPTK3dAhzbcOy0
lgqXWQnTjS21NQu7I2u/1WNVJbouZ55o4/GaE1XkP3nlDWtjMAklC1ZSuP4fuLT8
LbFBPHf2sK9vq0hPMquOjqIxWjzWSy5h9RDki6hO5zMzSKRAIceLAg40KseicOHr
sULEs8Or0peNIRmXO9FBd9Ug3g2ubl1a3Lwmi5fsoMR6J00r2ayqsv5hqBmZX7NI
nGFCl9PgFZ2MwCf5OhScCxBPxQEjmxzsVb12Tm8OwR3iZpX/MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOfQkcliyhpclTetnKA+7HhOSMAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmIxZTc1ZjQtN2EwZi0z
MTFkLWE4MzktMGE2NTc0NmVkMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABImDcShnmEM8b/3xzaA3YptDqmSMMh67OymEvAQhONGjkrLFsyUuAOF
bqFeWR2wfslOWd7gysATfP1KFlC2ezlFGT2PqBl4eqIMDIedYvWeZQstIJ8azIcw
PyNDC3Vua9occfxaXaOrFzB0/VzxWGF5GKZyvRrfR5wgimRr05NbLglN+rhIeNQb
vuBDRpWswsFoyTQsNfo9h6DmQUox4ik1I5rHA9ync75kVSvutRF0GHcgNUsPBo9+
UhT7F/gv/2tkRndiUOuDslfvu6iL52ckaFIdn91cvf+MiMg9eGxzkLIKLN7d8i17
OyNAUw6ATklLwmyHwFjMlgDC5P24gAU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:05:31 2025 by rpki-client