Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d949260-57e5-3a99-99a6-56484e4cb37f.roa
File:                     2d949260-57e5-3a99-99a6-56484e4cb37f.roa (raw, json)
Hash identifier:          HnIRCgQ6XWi10dAS42Zwoh/42BA12kS4yPZt3EGCzLg=
Subject key identifier:   EB:B0:08:71:58:62:1D:B5:B9:0B:8B:3D:EC:82:B5:F1:C4:85:F0:CE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A785078D22438EDB301AA080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d949260-57e5-3a99-99a6-56484e4cb37f.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.135.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:07:8d:22:43:8e:db:30:1a:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=11d73103-26f5-4428-bee9-df91866b6417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:73:a0:b2:fd:96:f5:2e:2e:a6:cd:66:e2:
                    ef:5d:68:34:38:cc:eb:7c:98:39:a1:ff:e3:e7:0f:
                    aa:66:c9:68:33:85:0e:da:ff:76:a3:4c:12:9b:3d:
                    cb:cf:22:7a:24:82:a7:fe:89:aa:80:a8:e0:72:6e:
                    75:91:01:81:e1:91:90:e0:b8:d5:68:06:78:fa:ef:
                    83:a7:81:23:e7:8e:17:cb:c4:11:8b:b1:1f:ce:ee:
                    70:27:a0:2a:7e:04:61:f1:31:c1:cb:94:7c:be:e6:
                    ec:fb:4a:17:f4:e8:0c:1f:78:d2:d1:4a:f3:f9:08:
                    b0:6e:6e:77:74:d5:07:79:e1:c3:22:e0:a9:ea:bb:
                    6c:c4:1a:19:a9:0b:39:1b:a4:6c:98:d7:72:c6:4b:
                    fd:b5:63:fa:92:7f:eb:a2:b6:7a:a8:33:9e:4e:6a:
                    dd:86:1c:54:28:ed:50:f0:ee:bd:5a:a1:73:5c:44:
                    7c:d5:d0:63:59:3e:1d:15:ad:df:ca:34:34:39:b7:
                    48:12:71:ec:7c:10:25:0e:d3:c7:42:5f:a7:c6:4c:
                    e6:75:44:88:cc:72:f5:e5:3f:4a:39:68:f3:ec:ef:
                    81:db:23:23:9a:f9:9d:45:51:b8:51:93:af:42:22:
                    a0:a5:3a:c1:de:e3:23:0a:32:b7:89:16:e8:80:66:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B0:08:71:58:62:1D:B5:B9:0B:8B:3D:EC:82:B5:F1:C4:85:F0:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d949260-57e5-3a99-99a6-56484e4cb37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.135.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:53:6a:3c:13:07:a0:b1:e7:7d:6b:0a:e6:a8:c5:b7:d1:20:
         d9:44:9c:0d:bd:b0:e7:08:ea:39:49:1a:22:80:26:2d:3c:5c:
         c4:d6:bd:b9:9b:53:e5:40:98:8a:76:92:56:25:2d:81:b7:cd:
         4c:ca:63:fd:41:79:4b:64:52:f8:69:55:2b:24:76:c2:52:95:
         e1:81:89:dd:cf:53:0b:c7:a2:19:9c:5b:79:b2:61:07:c0:a4:
         93:1d:ef:ba:44:a8:fe:85:f1:cd:0e:0e:00:99:df:fb:e5:84:
         2d:bc:ee:87:72:9f:3a:56:fe:28:4e:a4:7e:9b:e2:13:82:69:
         6c:ff:da:f8:99:d0:0b:22:1b:af:fa:25:9c:f5:7e:e1:60:15:
         4c:8e:a1:f8:d4:e1:3d:b6:91:cc:88:50:eb:21:16:99:e9:62:
         7f:30:2d:7b:22:01:d3:dd:bf:05:e1:df:ff:57:9b:8d:6c:9a:
         95:27:7f:b7:18:24:6b:6d:b6:f9:a9:e3:76:59:82:bb:43:70:
         33:6f:ee:50:38:97:2d:9d:c3:21:71:6f:44:f1:d6:cc:96:a4:
         6f:c8:47:5b:75:9d:d7:d6:77:a0:fd:59:eb:92:b9:f5:c7:f5:
         ef:a8:90:99:a8:ef:49:80:88:01:70:83:05:2b:8c:23:50:29:
         74:21:70:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:22:17 2025 by rpki-client