Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/75361c25-d7a2-3191-8b18-b7999902c7d0.roa
File:                     75361c25-d7a2-3191-8b18-b7999902c7d0.roa (raw, json)
Hash identifier:          tHBhz11m+9HJiYzmTW64CMjI1oxAQAC8qxHNpR68Frk=
Subject key identifier:   90:DB:21:28:F4:5A:ED:30:A8:9C:BB:AC:00:93:50:5E:FC:38:9F:91
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7851F61ECA7234B3CFA6680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/75361c25-d7a2-3191-8b18-b7999902c7d0.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:1f:61:ec:a7:23:4b:3c:fa:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=b833096a-d659-4da5-b85b-9f4b1278616b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:ef:af:c7:7f:a3:89:49:77:c2:33:1d:59:
                    6e:42:1f:03:fe:da:b5:5d:14:b3:6c:72:04:ba:81:
                    c3:39:c5:00:31:9a:9b:98:33:ae:21:d4:77:da:f2:
                    13:d0:64:f5:21:2a:65:86:f6:0f:20:b7:42:ae:21:
                    ec:0f:f8:52:1f:b0:9c:e9:35:64:14:69:97:f3:af:
                    f1:a7:3e:d9:6b:93:09:6d:52:f0:7b:58:85:4c:17:
                    d7:f4:51:b6:4b:df:81:6b:60:03:ff:7d:b4:4c:59:
                    ac:b4:7f:71:a0:bc:6a:3e:da:16:4e:82:6d:77:6e:
                    8a:44:07:a8:86:0d:72:99:7f:c5:02:98:87:19:f6:
                    a5:68:a3:cb:82:df:85:72:a5:c3:99:3d:c2:4f:5d:
                    24:13:e6:ae:e1:e2:14:61:0a:e9:c5:49:2e:f5:2b:
                    2b:72:d3:0e:08:b5:07:f3:5f:e4:68:aa:99:4a:3f:
                    14:7c:44:48:fd:86:2c:1b:fa:0e:c1:06:fa:8b:a2:
                    f0:84:e9:14:60:7b:14:71:14:80:cc:10:f7:25:27:
                    ea:77:6e:63:eb:c6:9f:0b:c7:06:98:c8:23:d3:11:
                    f3:6a:1a:d9:87:fb:71:2b:7a:ac:1e:5e:7b:3f:bc:
                    0c:24:e0:b7:a2:31:b1:1d:f1:f6:a0:f3:c3:31:06:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DB:21:28:F4:5A:ED:30:A8:9C:BB:AC:00:93:50:5E:FC:38:9F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/75361c25-d7a2-3191-8b18-b7999902c7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:00:5e:8c:bd:23:e6:35:bd:11:01:a3:90:70:22:f4:1e:e7:
         22:35:69:44:71:ad:cb:fe:fe:1a:da:cc:16:dd:53:c6:90:12:
         fe:41:ad:40:56:4e:84:3e:bc:23:92:f5:e9:27:54:b9:0c:42:
         87:a1:39:53:4c:c8:77:17:8d:ec:c1:20:7d:02:ea:5f:4c:4b:
         25:ea:10:35:a5:a9:26:45:83:7b:0a:24:0e:6c:e3:52:86:05:
         bb:33:31:1c:a0:67:eb:33:44:a6:c5:f9:b1:31:01:54:24:59:
         02:6b:87:95:bd:ee:42:33:e4:7b:96:05:dc:89:1f:0e:4a:12:
         db:dd:90:18:73:a6:02:33:5a:2c:72:c7:5d:04:35:4d:35:a4:
         ab:37:e0:e3:21:b3:57:a7:78:40:70:31:1f:0e:a4:3a:52:14:
         87:29:2e:0e:c5:fc:e2:37:60:2a:83:05:b7:fc:ff:c7:34:4e:
         c9:74:7c:fe:fb:46:74:5e:1e:17:f4:3e:5e:cf:ed:36:f9:da:
         2e:4a:df:c2:72:23:70:43:93:f5:08:e6:17:4a:cb:65:04:8f:
         fc:94:6a:54:1d:12:ca:ee:14:e2:a6:e0:72:a3:80:2b:34:00:
         e5:91:58:f2:b6:28:dd:01:75:90:17:39:11:5c:11:c8:b9:ef:
         5c:00:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:59 2025 by rpki-client