Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c4eec78-4357-377d-a00f-601bbfc95c15.roa
File:                     3c4eec78-4357-377d-a00f-601bbfc95c15.roa (raw, json)
Hash identifier:          KlGYVcpHTIDSIBH1ccm8VzDeeaVrjM7whqolUfxq8ZA=
Subject key identifier:   9C:AF:0F:03:F2:8B:7C:B7:39:F9:83:DE:B7:42:DA:4D:D8:1A:F8:89
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784F1B6FAFDDF007C047480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c4eec78-4357-377d-a00f-601bbfc95c15.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        34.129.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:f1:b6:fa:fd:df:00:7c:04:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=45f219b4-68d5-4135-9e5c-4fd159619311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:27:54:df:25:4c:31:84:59:55:ad:ad:fe:
                    02:df:f2:0a:ab:37:dd:6b:8f:27:27:3e:3a:89:5d:
                    86:db:64:63:15:dd:8c:95:95:7b:a8:ea:b4:94:11:
                    76:fe:17:3a:27:66:1b:4f:bb:bd:38:6a:45:27:fa:
                    90:fc:3e:02:c8:f2:90:a2:7c:54:b3:8b:4e:6d:83:
                    2c:f1:ea:b3:19:a0:0b:0e:fd:29:f4:42:84:f5:b3:
                    de:4a:86:cc:26:22:f2:d0:dd:3e:d9:f8:67:bb:98:
                    c8:85:a8:08:eb:33:29:1b:ef:d1:3f:b9:57:b8:fc:
                    c3:42:05:7d:85:06:72:a1:b2:39:6f:8a:c7:17:cc:
                    d3:4a:b6:72:e7:55:36:ac:04:ec:53:8d:5b:58:8b:
                    e6:05:c5:f3:eb:1c:7f:de:80:94:19:e1:fa:1e:a6:
                    a9:a5:2a:f5:57:a8:86:b6:8b:5c:fb:a8:ae:79:4a:
                    62:a8:07:48:ac:cd:4e:7f:4b:3a:99:8d:e5:dc:8f:
                    69:c8:d6:e2:e4:b6:94:37:d7:52:0f:40:21:9c:63:
                    8a:d8:5f:a6:a1:49:03:f2:75:4f:5f:4b:7e:4c:45:
                    b7:ed:9f:bf:fa:4d:2f:f3:97:c3:02:30:e9:a2:7d:
                    11:20:3a:6e:d4:36:43:fc:cc:ec:15:c8:0e:5e:30:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AF:0F:03:F2:8B:7C:B7:39:F9:83:DE:B7:42:DA:4D:D8:1A:F8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c4eec78-4357-377d-a00f-601bbfc95c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fb:7b:24:75:04:70:65:30:c6:19:c2:83:66:ca:54:d5:5b:
         cb:92:fa:c6:ff:46:06:a8:24:58:8d:16:b6:2c:6b:77:d5:dc:
         cd:c5:77:08:dd:af:13:d3:42:0b:73:67:85:76:83:2f:8e:f2:
         d6:6e:04:c9:73:0e:9d:c6:e5:2f:0f:ff:c5:b1:a9:73:9c:3d:
         26:12:b0:75:f7:70:c1:88:f8:ff:9c:61:14:9d:b6:3c:b6:c8:
         ee:44:2a:09:84:3a:8f:8d:3f:7c:10:c1:5e:d9:7f:6e:e8:99:
         16:cd:ec:7d:3a:14:4b:88:90:c0:99:1a:1d:87:fe:eb:c2:46:
         f0:30:6f:0f:29:f0:4d:9c:da:96:56:07:3d:7e:6c:bb:8d:d6:
         eb:7f:d4:fb:7b:b5:98:b5:e0:9f:1b:74:13:c4:1d:d6:f6:5e:
         7c:63:9c:73:e3:c8:45:ff:79:f5:e7:50:ca:c3:3a:85:e7:cb:
         d2:d2:87:e6:c7:00:0a:f0:bd:10:4d:fd:4e:51:32:16:9d:f7:
         b4:3a:cf:27:6e:5d:7d:e6:57:92:06:10:25:2a:16:d7:66:d5:
         12:87:7d:2b:8c:3f:ba:1b:35:f7:7f:f1:06:2b:e0:52:eb:a7:
         4d:27:e8:b8:6a:15:47:52:95:00:dc:0f:f0:09:bc:eb:70:cf:
         c8:26:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:55:38 2025 by rpki-client