Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/13ebb606-7a88-35dd-a7bf-3c581895834a.roa
File:                     13ebb606-7a88-35dd-a7bf-3c581895834a.roa (raw, json)
Hash identifier:          jKzXY5VGf92IJZ8jQZE/m0nW1m6E0WX9kzknZPJtr8I=
Subject key identifier:   01:83:78:74:6E:73:5E:61:E0:F9:30:92:9C:D3:0A:63:47:9C:6F:E6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584973DEDE5DA05F7E559C0197C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/13ebb606-7a88-35dd-a7bf-3c581895834a.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     139190
IP address blocks:        34.2.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:de:5d:a0:5f:7e:55:9c:01:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=e75450af-e71a-4bc7-b93a-077a98fdd5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:84:9b:60:78:29:a3:1c:58:fc:08:a9:19:
                    ba:75:fd:bc:d4:ca:e7:e2:8c:a1:5a:56:04:ac:28:
                    41:cf:1f:f7:bb:2d:a8:63:80:48:66:e1:87:79:78:
                    e6:fe:49:84:9b:40:e9:96:82:00:33:48:c2:81:61:
                    bc:29:49:58:e7:37:67:e0:61:3c:42:bc:0c:51:5a:
                    75:35:6d:f0:1d:9b:25:d7:43:10:e6:dc:ab:03:c9:
                    5e:86:01:8f:d3:f1:f9:96:16:52:f5:ab:6a:a4:50:
                    9d:22:82:ca:b3:25:de:61:01:6e:57:4c:b1:04:aa:
                    7f:bb:96:87:ba:c1:ce:2f:13:62:b5:99:1e:fe:b8:
                    c1:3c:e7:91:8c:9f:23:37:6d:b7:64:3c:08:96:22:
                    20:a4:85:ca:31:b4:21:3c:c3:3c:76:c8:9b:c6:c8:
                    61:6b:07:e5:36:f3:43:12:d5:2b:b9:a9:e1:36:8e:
                    4c:fe:cd:50:b4:a2:4c:ef:aa:a4:f6:99:8f:d4:0f:
                    dc:7f:0a:b6:37:9e:56:f7:3b:0b:ab:d2:17:75:ce:
                    9c:03:0b:44:2f:ff:35:00:5f:8a:b7:cb:70:72:a7:
                    07:6e:3e:8b:da:72:74:a3:36:fd:97:de:13:3b:08:
                    3f:bb:c6:77:13:4f:3f:ae:f0:af:f4:30:07:2a:3d:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:83:78:74:6E:73:5E:61:E0:F9:30:92:9C:D3:0A:63:47:9C:6F:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/13ebb606-7a88-35dd-a7bf-3c581895834a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:28:35:e6:0b:49:70:d6:f5:42:6c:57:f4:19:49:e9:88:b6:
         53:05:48:89:ec:7a:7c:5b:ee:c6:7d:a1:73:ab:ff:28:f5:3b:
         c7:95:37:da:4c:4c:30:97:33:77:e8:23:2d:d2:80:b3:90:b0:
         d4:19:ff:46:04:04:d9:45:89:5e:4a:9e:d5:72:26:6a:a4:0a:
         0d:a4:fa:6c:52:d5:ea:08:38:10:83:a5:84:dc:76:a1:47:db:
         c5:d2:3a:43:7e:40:34:46:31:e2:b3:00:c3:13:14:3e:13:d1:
         c0:87:49:48:ff:f8:9c:88:58:8c:44:80:e1:64:6a:95:ae:6b:
         2d:e4:9d:3c:0c:c6:ba:51:20:4f:ed:f3:48:a0:dd:f2:6c:28:
         95:12:e2:c2:5a:67:19:af:1c:93:f0:16:4b:b0:f2:46:c3:66:
         c3:a2:09:93:35:d0:f9:47:9e:7b:be:63:b5:88:b0:5c:da:20:
         53:b3:ae:e9:9d:99:c4:4e:66:5a:53:f2:5a:d9:4d:ac:3b:37:
         cd:36:df:81:64:b3:2e:ed:a0:dc:50:7d:ea:fe:f9:2e:30:90:
         a4:00:eb:a8:6e:a3:67:d7:77:2f:49:07:ae:1d:87:50:01:07:
         f5:6b:16:27:e6:b7:ef:58:83:e4:e5:80:a4:8c:ba:67:80:e0:
         19:23:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:02:14 2025 by rpki-client