Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa
File:                     efaf8585-044d-334f-ae1a-da5be895ed5c.roa (raw, json)
Hash identifier:          VPKMdwVTgwWr1n1OwxvxZ2hdq2a8XICXyVBTk892gUY=
Subject key identifier:   45:50:99:BC:DF:6B:99:35:AD:33:03:CF:61:7E:7E:E7:24:C8:95:36
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784EBCDFD263196441BC180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.172.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:eb:cd:fd:26:31:96:44:1b:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=762d1ba0-daad-4a2e-aac8-829474f0a1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:01:9e:4a:1c:23:1a:03:02:dd:6d:11:d3:
                    bd:f2:7a:3a:9a:48:4d:58:5a:f0:a3:39:5a:86:aa:
                    86:98:76:f8:14:d9:7a:11:82:dd:9d:c9:3e:8e:64:
                    a6:84:ab:59:cf:46:e3:a0:47:c3:2c:bd:bc:d8:29:
                    3c:b1:60:88:ea:eb:c2:41:ec:d4:bf:22:eb:a3:7f:
                    5c:ea:e5:73:7e:f1:7a:99:80:05:6e:0e:50:2b:1d:
                    0c:33:64:0d:61:49:02:bb:58:5c:aa:1d:06:ca:dc:
                    a0:d9:8b:88:7a:2f:96:d8:f9:73:37:48:51:d2:dc:
                    62:c2:83:14:73:9c:6c:e5:08:3f:63:6f:2f:ca:b5:
                    16:c5:60:07:c8:46:c2:fc:72:56:f1:19:90:43:e7:
                    08:3a:5d:b4:83:61:e8:75:3e:4b:9d:42:5a:97:2a:
                    22:db:08:fd:70:f9:1f:6e:e5:03:e3:fa:56:f3:9e:
                    30:8e:76:a3:16:fd:be:4e:a5:f4:1c:34:bc:40:60:
                    5e:80:f4:80:16:a6:2a:75:46:6b:9e:07:b4:3a:01:
                    73:1e:7e:fa:e8:1d:d5:9a:3b:b2:d0:11:81:22:ac:
                    0a:84:5c:46:3a:8e:3b:57:73:4c:7c:bb:55:4c:b0:
                    23:af:57:32:f5:f4:b9:4b:3f:cb:5c:32:2a:62:c4:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:99:BC:DF:6B:99:35:AD:33:03:CF:61:7E:7E:E7:24:C8:95:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.172.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c0:74:84:e4:80:9b:4f:de:61:7c:e0:27:7f:29:f9:e8:6b:
         f5:b8:bd:ca:1d:1a:dc:e6:f5:dd:cf:0d:aa:84:8c:47:48:88:
         04:bd:f6:71:d4:5d:95:55:2d:69:61:98:0a:85:c3:f3:62:29:
         ee:dc:75:80:26:0f:9d:97:b1:0e:f2:30:03:de:fa:a2:02:ad:
         ca:c8:31:ea:a3:25:55:bc:0b:6c:95:a2:d4:03:27:ac:88:fb:
         be:df:88:b7:18:20:a2:f6:1d:06:ee:1d:75:9f:59:5b:e6:12:
         f4:44:9b:4e:79:f8:48:3a:e3:7c:01:0d:a0:ce:f8:d2:1b:80:
         67:7b:b1:2a:5f:1f:37:f5:b4:30:a6:19:8f:f4:e8:04:2f:4a:
         69:8e:ca:88:b2:f0:0f:44:1d:70:1a:da:89:cd:8a:0c:19:27:
         56:09:fb:5d:53:7b:47:fa:ed:25:77:1f:99:67:5d:09:cf:80:
         c8:4b:09:82:ad:71:36:c5:87:b3:a7:db:2f:03:29:98:0c:a1:
         a6:a8:0e:1a:50:3e:3d:dc:db:ef:f4:db:1a:02:a3:6d:d3:a1:
         5c:2c:cd:4a:ea:61:83:94:c3:c8:3c:cd:1a:2d:df:15:fb:1b:
         4d:9f:a5:28:d1:64:d1:30:bd:81:98:65:e7:25:36:4c:ce:8d:
         f0:58:cb:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOvN/SYxlkQbwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
NzYyZDFiYTAtZGFhZC00YTJlLWFhYzgtODI5NDc0ZjBhMWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7ABnkocIxoDAt1tEdO98no6mkhNWFrwozla
hqqGmHb4FNl6EYLdnck+jmSmhKtZz0bjoEfDLL282Ck8sWCI6uvCQezUvyLro39c
6uVzfvF6mYAFbg5QKx0MM2QNYUkCu1hcqh0Gytyg2YuIei+W2PlzN0hR0txiwoMU
c5xs5Qg/Y28vyrUWxWAHyEbC/HJW8RmQQ+cIOl20g2HodT5LnUJalyoi2wj9cPkf
buUD4/pW854wjnajFv2+TqX0HDS8QGBegPSAFqYqdUZrnge0OgFzHn766B3Vmjuy
0BGBIqwKhFxGOo47V3NMfLtVTLAjr1cy9fS5Sz/LXDIqYsSQEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEVQmbzfa5k1rTMDz2F+fuckyJU2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWZhZjg1ODUtMDQ0ZC0z
MzRmLWFlMWEtZGE1YmU4OTVlZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbAdITkgJtP3mF84Cd/Kfnoa/W4vcodGtzm9d3PDaqEjEdIiAS99nHU
XZVVLWlhmAqFw/NiKe7cdYAmD52XsQ7yMAPe+qICrcrIMeqjJVW8C2yVotQDJ6yI
+77fiLcYIKL2HQbuHXWfWVvmEvREm055+Eg643wBDaDO+NIbgGd7sSpfHzf1tDCm
GY/06AQvSmmOyoiy8A9EHXAa2onNigwZJ1YJ+11Te0f67SV3H5lnXQnPgMhLCYKt
cTbFh7On2y8DKZgMoaaoDhpQPj3c2+/02xoCo23ToVwszUrqYYOUw8g8zRot3xX7
G02fpSjRZNEwvYGYZeclNkzOjfBYy58=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:25:18 2025 by rpki-client