Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06bb3115-807f-3f08-9dc3-3b51d4bb4a15.roa
File:                     06bb3115-807f-3f08-9dc3-3b51d4bb4a15.roa (raw, json)
Hash identifier:          U489lFMNJNwfZxVuFiQg+aErXEk3EY5hX54FRDftzfM=
Subject key identifier:   F8:EA:97:4E:DD:7D:42:E2:5F:00:61:F5:95:F5:5E:C4:C7:C0:31:D7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB5A764D9CA44AFE335300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06bb3115-807f-3f08-9dc3-3b51d4bb4a15.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        34.108.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:5a:76:4d:9c:a4:4a:fe:33:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=cf893e86-9151-4fba-b2db-93221ef9b987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:61:dc:6c:4a:2b:59:aa:72:aa:b4:02:4e:
                    a2:0a:41:d6:f9:e8:4d:2f:f1:6e:ac:25:f6:3f:f3:
                    86:67:94:46:fc:c8:a7:e0:95:82:f7:06:5f:16:87:
                    4b:ac:20:89:08:33:20:66:f8:5e:09:15:82:2f:a2:
                    3c:dc:d6:7f:b4:4a:49:a5:74:c5:f4:47:ef:9a:d8:
                    03:ee:e3:66:9c:c2:a1:cb:ea:69:7d:da:4c:20:1f:
                    c2:fb:93:9d:30:e2:4c:4b:96:6e:75:24:9e:14:79:
                    73:36:c0:5a:f0:e1:5e:a7:ea:ce:bc:35:80:56:6c:
                    91:b1:bb:f5:ee:8e:3b:87:c0:16:3b:80:13:b5:75:
                    da:9d:c8:f6:4e:82:11:04:48:71:e1:49:97:af:5e:
                    f1:c1:f2:cb:09:6a:90:ec:7e:d5:a0:eb:65:f2:aa:
                    2a:e2:68:e1:4e:3d:37:90:84:46:0d:1e:47:6f:a1:
                    83:a9:7b:19:25:ef:3b:9c:95:b8:ab:74:c4:55:46:
                    1b:ed:8d:fe:51:53:7a:5a:7a:aa:c5:14:fb:45:69:
                    d8:03:8c:af:71:02:a0:53:ce:4c:b8:78:ae:26:06:
                    cc:4f:33:30:aa:50:24:e6:87:05:93:39:ba:37:90:
                    2e:f6:ab:67:8a:f6:af:b5:cf:7f:c6:79:86:59:18:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:97:4E:DD:7D:42:E2:5F:00:61:F5:95:F5:5E:C4:C7:C0:31:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06bb3115-807f-3f08-9dc3-3b51d4bb4a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.108.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:1f:bb:1c:0f:9d:50:df:01:9b:24:1e:de:8a:98:a3:d1:
         1a:f4:91:57:84:d4:10:3b:85:4d:66:3b:53:b0:ac:1d:1d:f6:
         df:e3:cc:4e:52:14:f3:e7:65:f6:32:76:76:69:d5:bd:9b:a5:
         9f:83:56:02:75:02:71:93:9e:1d:da:3a:ea:9d:cb:67:97:a5:
         2d:db:19:7d:51:6a:3c:fb:42:a6:12:cf:0b:94:bb:af:6b:b5:
         3d:12:bc:a1:04:de:70:c6:75:15:5b:9f:cc:27:db:0d:b4:f0:
         01:ba:66:73:0b:82:ac:54:c1:3a:17:59:12:eb:93:ee:7c:25:
         88:c0:94:2e:c2:09:04:7b:88:34:a2:ad:6a:1d:6c:f2:72:d6:
         8e:c7:9c:b2:f3:b6:18:97:e7:16:bc:0c:cf:e8:91:9f:8d:0c:
         33:4b:f6:75:b4:a8:2b:bb:49:88:1c:c8:ac:fd:e5:11:ee:0b:
         88:42:59:88:87:64:f9:c0:a6:fe:1e:a1:ae:0c:7b:92:da:1f:
         10:da:4d:a3:48:7f:09:a0:f2:1a:01:66:d7:86:c7:45:5f:e4:
         ff:3c:49:57:0d:1f:38:f1:84:3c:06:2b:5f:f7:32:a0:b9:34:
         01:65:21:76:12:21:66:a8:f0:d1:f4:f3:2e:73:12:20:0b:b7:
         c7:e5:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:46:59 2025 by rpki-client