Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11bb5c87-d89b-320a-be71-7a094bd80937.roa
File:                     11bb5c87-d89b-320a-be71-7a094bd80937.roa (raw, json)
Hash identifier:          WmAiJhgEdIC3fLRFiQIAkBMjC0vDm3tc/FIwrLZT/kA=
Subject key identifier:   02:2E:53:87:7E:D5:31:EA:EF:09:CD:9C:50:E0:BE:06:1B:9D:F6:0A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849FCAA96B3273CC92C324E6380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11bb5c87-d89b-320a-be71-7a094bd80937.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     19527
IP address blocks:        34.2.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:96:b3:27:3c:c9:2c:32:4e:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=70806495-4ae4-4b75-8537-96d6ef79613c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2f:59:32:d3:77:1a:62:84:9c:7f:8f:66:f9:
                    be:92:59:46:e6:7a:42:59:8e:61:a4:97:4c:da:aa:
                    6d:c1:56:d8:32:cc:45:5e:5d:d7:b4:a2:04:07:b3:
                    ea:37:92:4b:0e:e8:92:40:6c:70:a4:11:a3:fc:27:
                    1c:0a:6b:e6:36:4d:e7:04:24:a7:a6:74:1b:07:52:
                    43:38:f5:7c:31:fb:fb:43:83:5b:66:4e:66:6e:ae:
                    f8:a5:04:f4:5a:21:63:ae:53:ff:0f:49:6d:00:59:
                    1b:a7:48:a7:64:c4:f5:fe:ab:3b:0d:9f:01:36:ce:
                    47:7e:b8:92:f8:47:b1:74:93:b8:4e:91:6e:70:1d:
                    27:c3:60:f8:e3:2e:70:29:6f:69:5b:9f:58:55:6f:
                    3e:04:1b:ff:0e:32:ef:f9:a5:ba:0f:b3:1c:22:5f:
                    3a:3d:13:61:0b:30:51:19:6b:40:57:da:5d:db:39:
                    84:74:18:0c:21:24:8e:a5:c7:a0:21:c3:12:57:10:
                    8d:6f:87:e0:31:fd:e1:04:c1:13:ec:89:f3:0e:51:
                    ba:61:7b:ae:78:f2:36:bd:f0:4e:a9:b1:da:e8:38:
                    e6:4d:61:9e:94:36:43:96:9e:09:12:d4:c8:09:b4:
                    4f:69:23:8d:9c:2a:55:6e:ef:23:91:1c:69:46:b8:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2E:53:87:7E:D5:31:EA:EF:09:CD:9C:50:E0:BE:06:1B:9D:F6:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11bb5c87-d89b-320a-be71-7a094bd80937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:5e:ac:99:57:6e:61:c0:99:9f:d2:00:0b:20:54:b6:38:
         3d:d5:f2:ee:6c:23:f3:84:12:80:2b:f6:01:72:df:2b:74:96:
         40:02:a3:ff:03:91:01:71:49:62:62:46:ca:c8:95:fc:ab:99:
         b2:76:91:32:65:26:50:2b:47:a3:e4:cb:5c:40:0a:45:77:13:
         b9:15:5b:45:29:4e:43:6a:e2:6f:50:c9:7d:02:57:16:15:76:
         c6:0b:0e:2b:f8:9c:b1:67:6a:17:57:c3:c7:90:24:e4:e1:dc:
         7b:d3:56:46:60:28:97:26:f7:71:ba:08:ba:09:01:4b:36:26:
         2f:cb:9d:da:31:65:38:6c:41:d8:67:83:74:08:72:a2:df:ff:
         dd:01:b1:dc:1a:ce:d0:e7:ed:c0:ac:48:b0:04:d1:3a:53:a6:
         ad:b2:bb:ba:47:51:4d:2a:b8:e2:85:7d:0c:96:a8:eb:ca:99:
         9f:dc:6a:3d:ae:23:62:26:66:60:70:69:20:27:48:6f:7b:47:
         e7:23:bc:f1:12:5c:f7:d4:11:9a:8f:e4:5c:b0:19:9a:dd:ff:
         e4:7a:6a:47:9b:1f:57:3a:96:86:a5:69:62:cd:50:24:97:5a:
         19:41:6c:b5:55:b5:a5:c2:04:ce:87:40:89:8b:17:56:2e:7a:
         3e:f9:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:43:57 2025 by rpki-client