Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9be5497a-de34-39d2-8ab5-2c0682b18ec2.roa
File:                     9be5497a-de34-39d2-8ab5-2c0682b18ec2.roa (raw, json)
Hash identifier:          He4mzv93AjDMQCYORWnbTpJzh+Zm3pK/aRQkjY/cm20=
Subject key identifier:   3D:C1:BF:4C:41:0D:3A:F4:E8:AA:7B:96:62:B0:45:EF:A3:EC:CF:E4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB741E60FBD2F96BF01E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9be5497a-de34-39d2-8ab5-2c0682b18ec2.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        34.101.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:74:1e:60:fb:d2:f9:6b:f0:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=99bd4cec-a3b6-4a99-8eec-5c634c3bc3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:4e:01:b8:53:0d:b3:ec:8e:62:a0:7a:a1:
                    fc:42:c3:ee:cc:b5:90:9d:90:fb:9e:45:ab:a0:1f:
                    63:19:63:82:27:09:c5:73:38:86:24:75:14:fd:f6:
                    e1:f0:ca:c6:f0:12:39:49:75:2a:1d:57:4d:4d:ad:
                    9d:5a:72:c8:1c:b4:1c:b2:e1:03:ba:9b:e4:9f:bc:
                    b6:67:b7:13:a1:32:f9:4e:8e:17:c6:f6:00:d7:25:
                    78:e3:b9:00:1b:f5:6c:87:44:ea:11:da:47:24:d0:
                    56:e2:15:45:ce:57:f8:64:67:83:0b:13:0c:bb:db:
                    3b:e3:f7:ba:75:f3:a5:8a:30:07:fb:a5:e9:fc:fb:
                    fd:bc:35:d7:ea:de:86:ba:aa:c8:38:85:6c:6c:04:
                    f0:80:a7:ab:40:d6:f3:ba:2e:25:0d:cf:c7:d9:65:
                    bc:02:d5:ed:23:1b:d1:4b:e7:a2:39:ce:37:1c:33:
                    95:2e:07:12:83:3e:b8:be:e5:46:85:01:ee:17:4e:
                    c2:1c:8b:3a:2c:9c:d2:e8:af:10:a3:23:1f:f2:1b:
                    07:71:b9:86:14:a3:bf:72:66:d2:f7:f6:d5:f6:bf:
                    c7:22:1b:dd:d3:22:b0:12:3e:6d:c4:8e:58:ac:c4:
                    ab:8f:6d:cd:4d:e2:0b:46:f3:58:62:0e:de:27:bf:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C1:BF:4C:41:0D:3A:F4:E8:AA:7B:96:62:B0:45:EF:A3:EC:CF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9be5497a-de34-39d2-8ab5-2c0682b18ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.101.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:f1:26:ff:e3:be:76:40:4f:e1:e8:29:47:77:f9:65:8d:
         33:31:62:99:0b:69:4c:05:67:d6:c4:57:9c:d7:4b:5f:71:67:
         1b:17:db:f5:b1:ce:d0:03:48:fc:d5:75:84:b6:9e:0e:53:3e:
         63:49:e8:ca:39:d2:00:71:80:4c:b9:52:29:fd:f7:03:2d:b7:
         38:11:32:35:28:74:cc:b3:2d:d8:67:ec:8c:70:b9:6e:ea:40:
         03:e4:7e:be:f5:fb:89:a0:c0:7b:1e:d6:13:35:f3:27:52:0e:
         92:60:c7:cd:2d:0f:03:0d:80:b7:0b:22:57:97:24:e8:6e:5f:
         e9:06:28:c1:50:b8:90:79:f9:a3:8d:bc:18:10:0f:32:3a:d2:
         2b:eb:10:d5:bb:6e:d4:f1:e9:6e:30:40:2a:95:a1:f7:b8:de:
         b7:d8:78:03:3b:0a:51:69:a0:c3:cd:e5:77:1f:55:a4:b3:27:
         21:77:cb:52:3c:2b:fe:70:78:ee:4f:d6:d5:17:ab:a5:47:d0:
         27:1a:e6:f1:1e:d1:08:b3:d6:44:ab:c3:9a:67:8d:95:14:df:
         43:d7:f5:32:e4:e8:eb:8f:69:9c:07:c6:72:53:45:2d:ba:4d:
         0e:84:3f:06:cd:78:f3:4b:59:a8:aa:1c:2d:94:54:b5:aa:c9:
         a5:be:35:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:08 2025 by rpki-client