Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
File:                     aa7a7287-b1dc-3e23-925f-c1a9de542259.roa (raw, json)
Hash identifier:          Reqbd16GWShFMdpUyRwPT6UFoVtNwES/IpIhsnVJ2Q4=
Subject key identifier:   B4:E1:2B:55:FA:A7:A0:F6:F9:78:5B:AD:44:B2:8C:D9:1E:35:A1:58
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84119028D59FF8F447ABFEC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     11344
IP address blocks:        34.104.39.208/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:90:28:d5:9f:f8:f4:47:ab:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b967adb8-03c2-4474-a158-8d6943bfb4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:8e:42:ce:91:9e:e8:9e:e8:9d:6a:ec:b3:
                    0c:1f:d1:ce:98:ae:65:1c:90:74:8f:f9:34:f5:a1:
                    59:61:be:e7:61:d8:03:5b:41:ae:19:59:c9:ef:ea:
                    cf:d0:c6:80:9c:a1:39:5f:34:f5:4f:8b:b0:b9:03:
                    21:7f:01:78:ea:d4:19:86:8c:03:e6:bc:d2:a6:08:
                    42:d3:11:e6:ec:5a:96:21:ff:dc:c9:b4:cd:20:66:
                    f4:ea:40:21:76:35:8f:37:84:12:b4:47:32:05:d7:
                    71:73:89:dd:9a:b3:cd:34:39:dd:12:7b:70:49:95:
                    57:ad:b8:28:e4:41:9b:f5:13:78:3f:7f:dd:1f:4d:
                    6c:a7:14:e9:cd:5d:46:7d:16:7d:f0:4c:df:1c:94:
                    33:75:91:56:19:84:2e:15:c6:9d:d9:a4:f0:8b:89:
                    9e:70:07:22:ff:aa:85:07:dd:f4:13:97:c8:65:62:
                    62:15:b2:8c:62:6c:5b:34:37:82:ce:bd:5f:76:bf:
                    d4:ab:de:16:f7:f7:73:b5:62:f4:79:6f:e4:9e:9b:
                    1d:af:e1:d5:b3:d1:7a:d7:3c:f4:bc:a9:39:6f:e4:
                    c2:77:42:c6:73:68:8e:ad:46:40:7f:12:e1:0a:c5:
                    3a:3a:9e:d6:be:ca:7c:a1:e6:4f:c8:a8:f3:7b:c3:
                    cb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E1:2B:55:FA:A7:A0:F6:F9:78:5B:AD:44:B2:8C:D9:1E:35:A1:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.39.208/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:54:29:65:ff:b6:9b:f8:01:dc:70:54:9b:b2:39:0f:8c:a6:
         b6:cb:b3:da:60:ff:70:71:60:90:1a:39:02:db:27:ff:7f:9f:
         68:0a:37:f0:57:47:f1:8b:f8:f6:98:5e:08:5d:6e:a9:76:5a:
         c0:9a:9e:0d:0d:6f:a4:ed:8a:90:32:0b:8d:6c:cf:e1:ad:bd:
         59:a3:ad:40:6f:f2:1b:26:4f:e6:2b:d8:42:72:59:33:81:e9:
         66:20:c9:39:03:66:19:ae:08:9a:3b:f9:7c:6e:89:1c:73:e5:
         63:df:01:2f:bf:33:68:8e:83:05:81:0f:bd:3b:ae:d8:9a:e1:
         93:23:a0:34:d0:89:8b:f6:2e:22:11:1a:ee:85:30:8c:e0:31:
         e7:d1:c2:45:04:88:f3:a4:cf:ba:0b:1b:0b:27:ef:92:9b:05:
         cf:32:27:09:65:04:8e:5f:ec:46:7c:2b:96:b7:94:95:fc:94:
         d7:2f:2a:77:a4:f4:49:04:e9:b9:df:5f:9e:98:ff:bc:52:d7:
         3c:13:41:c4:ae:28:d8:69:72:4f:5e:76:00:ac:35:bf:ff:af:
         a7:c8:6c:f1:bb:95:1e:35:22:b7:19:93:9c:1f:02:f1:55:b5:
         88:73:82:4c:8f:3b:05:71:d5:69:a6:e9:f1:e2:14:11:a1:e0:
         9e:d6:fe:6c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqEEZAo1Z/49Eer/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
Yjk2N2FkYjgtMDNjMi00NDc0LWExNTgtOGQ2OTQzYmZiNGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm2OQs6Rnuie6J1q7LMMH9HOmK5lHJB0j/k0
9aFZYb7nYdgDW0GuGVnJ7+rP0MaAnKE5XzT1T4uwuQMhfwF46tQZhowD5rzSpghC
0xHm7FqWIf/cybTNIGb06kAhdjWPN4QStEcyBddxc4ndmrPNNDndEntwSZVXrbgo
5EGb9RN4P3/dH01spxTpzV1GfRZ98EzfHJQzdZFWGYQuFcad2aTwi4mecAci/6qF
B930E5fIZWJiFbKMYmxbNDeCzr1fdr/Uq94W9/dztWL0eW/knpsdr+HVs9F61zz0
vKk5b+TCd0LGc2iOrUZAfxLhCsU6Op7Wvsp8oeZPyKjze8PLLwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLThK1X6p6D2+XhbrUSyjNkeNaFYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE3YTcyODctYjFkYy0z
ZTIzLTkyNWYtYzFhOWRlNTQyMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEImgn0DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAaVCll/7ab+AHccFSbsjkPjKa2y7PaYP9wcWCQGjkC2yf/f59oCjfw
V0fxi/j2mF4IXW6pdlrAmp4NDW+k7YqQMguNbM/hrb1Zo61Ab/IbJk/mK9hCclkz
gelmIMk5A2YZrgiaO/l8bokcc+Vj3wEvvzNojoMFgQ+9O67YmuGTI6A00ImL9i4i
ERruhTCM4DHn0cJFBIjzpM+6CxsLJ++SmwXPMicJZQSOX+xGfCuWt5SV/JTXLyp3
pPRJBOm531+emP+8Utc8E0HErijYaXJPXnYArDW//6+nyGzxu5UeNSK3GZOcHwLx
VbWIc4JMjzsFcdVppunx4hQRoeCe1v5s
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:56 2025 by rpki-client