Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09632844-9c41-3193-b58c-7e1dd982b169.roa
File:                     09632844-9c41-3193-b58c-7e1dd982b169.roa (raw, json)
Hash identifier:          /Fz6XfyJThtM4kbG1hU8K/QhtwiuKFCxqyqi/PCBp0A=
Subject key identifier:   5E:B9:62:E2:91:1C:5B:B8:95:74:97:6F:C5:F3:7E:10:12:8A:DB:92
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584AA590F1D7425DB2960178CF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09632844-9c41-3193-b58c-7e1dd982b169.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        34.190.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:f1:d7:42:5d:b2:96:01:78:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=e9a0478b-8565-40fe-a095-b54cf722ce2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:d3:67:79:ed:68:04:31:ba:a9:77:73:38:
                    cc:cd:0f:e7:d3:42:81:71:d7:7f:b4:cf:ba:65:c9:
                    a3:e4:70:9c:51:6d:5c:e3:7d:73:24:cf:2d:bb:93:
                    95:79:78:90:25:b0:c0:ca:58:9a:81:0d:95:34:a6:
                    be:72:7a:4b:b8:ad:4c:f6:43:fe:fa:a1:ee:9a:6b:
                    c8:9f:40:e2:60:65:97:b9:a6:cb:f7:20:81:b6:0f:
                    ef:0f:ff:6f:4e:53:62:2d:1d:7e:70:2b:a7:09:59:
                    99:46:58:02:33:ed:04:95:24:bb:bf:84:eb:97:27:
                    9c:e9:ce:0b:08:e9:17:b3:78:0c:cc:53:ce:5b:28:
                    0e:ee:c3:67:47:f4:37:45:cf:8b:13:90:c4:f1:d4:
                    97:df:1b:a4:df:a4:83:6a:eb:19:ce:5b:d5:0b:4a:
                    80:72:a7:4e:04:91:4d:c9:98:f5:24:0d:e8:cf:91:
                    08:f5:90:92:c7:37:49:80:9a:6a:96:4f:01:0c:da:
                    f5:6d:60:d8:17:3f:c1:0f:ba:43:c5:28:c5:1e:a3:
                    81:6d:e9:0d:dc:b2:2e:2e:1c:88:c3:6e:c0:14:d8:
                    13:f7:e8:7b:95:07:7e:fa:a6:fb:92:85:cb:2d:25:
                    9f:0c:1e:24:b9:ab:fa:b1:23:14:7d:e0:36:95:2a:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B9:62:E2:91:1C:5B:B8:95:74:97:6F:C5:F3:7E:10:12:8A:DB:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09632844-9c41-3193-b58c-7e1dd982b169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f7:32:47:e2:14:ea:93:80:b8:4d:83:08:49:76:6d:e9:07:
         76:b1:3d:00:23:3c:0b:cd:3b:dc:da:0d:17:55:79:ad:5b:f0:
         dd:82:f7:d9:60:45:bf:cd:1b:2c:bd:c7:24:52:2c:1c:44:32:
         53:dd:33:d9:24:9a:6b:d2:18:86:44:be:ba:de:d7:e5:d8:c8:
         d2:b6:d5:53:8c:6a:52:ce:5d:6c:b1:00:5f:29:e5:c9:06:6e:
         5b:17:3f:1e:87:13:be:1e:6e:47:0e:6f:42:56:09:f9:73:24:
         60:b5:89:2c:6b:b7:43:b7:3d:e4:4f:b4:be:19:dd:b6:00:9b:
         e3:a3:3f:4d:7a:7f:f9:42:ad:78:3e:1a:0a:f1:17:f1:d6:35:
         c9:f9:4f:87:b0:7c:6a:5a:94:b0:26:7f:c0:05:95:e9:4c:07:
         c3:5e:dc:d8:ca:32:e6:a3:01:bf:d3:c6:87:13:fd:c1:ec:79:
         ab:81:90:08:d3:c8:4a:02:2f:b9:21:f6:39:38:60:08:16:ba:
         53:92:be:bc:4d:39:24:2b:7f:cf:cc:15:dc:ad:08:f3:63:32:
         4c:3c:25:3a:58:f0:7b:b9:1f:3f:c8:dd:21:a7:50:ae:a0:69:
         8c:e1:f3:a7:44:78:5d:6a:25:6e:15:65:d6:a2:b7:e8:7d:f8:
         31:09:14:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:12 2025 by rpki-client