Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b54451a8-165a-3b6c-806c-f415d0b0dd22.roa
File:                     b54451a8-165a-3b6c-806c-f415d0b0dd22.roa (raw, json)
Hash identifier:          ljVjvclzpyHYIodcIbrjmGYfaf45lSGEwuOVsEkLcKo=
Subject key identifier:   27:2C:9D:7E:FC:A0:11:8E:41:A8:68:F4:4B:30:E4:D3:EF:D2:93:16
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584AA590E7C1C33494CB8E666700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b54451a8-165a-3b6c-806c-f415d0b0dd22.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     19527
IP address blocks:        34.191.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:e7:c1:c3:34:94:cb:8e:66:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=672da73c-dcc6-4aca-8c50-2f18d3a9c2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:c9:e6:a4:29:41:b6:bb:56:9e:1a:2b:15:
                    b7:ca:34:86:1b:d3:e5:0d:bc:54:03:99:31:f8:0e:
                    6b:4e:3b:fb:ec:4a:16:f9:c2:34:f3:1c:f2:f9:97:
                    e0:86:b5:08:4f:56:fd:8e:c7:6e:7d:b6:e7:41:47:
                    b7:57:0d:e5:8b:c6:73:e5:88:a9:3f:33:74:39:cd:
                    d4:1e:d6:43:7e:98:32:b8:39:73:02:d1:ce:f3:28:
                    03:3f:b1:d6:e6:d9:70:0f:13:72:a3:98:7f:d7:d9:
                    40:62:94:33:bd:a5:2e:4e:27:6a:9e:65:c1:93:ea:
                    68:55:77:04:0e:74:2b:7c:7e:58:7a:46:7a:31:c3:
                    e2:3a:fd:d1:81:b0:b6:fe:a3:88:38:b7:fd:6c:ac:
                    5f:2f:62:ac:0b:f2:06:0e:88:17:42:34:8f:a7:2b:
                    15:cc:6c:49:b1:db:00:a4:4f:02:12:19:09:1d:9a:
                    ae:1c:51:67:fe:c3:7d:71:d7:bb:66:24:ac:4c:a4:
                    69:02:f4:45:8b:38:6d:43:7b:a2:5c:d1:5a:8e:ac:
                    fd:79:cd:7b:17:7b:b8:aa:8c:fd:3a:1d:50:ee:04:
                    f3:50:87:30:4b:ce:df:52:0f:ff:49:f2:1f:ce:a3:
                    26:07:8e:cf:14:6a:df:72:33:e1:ba:e0:91:76:47:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2C:9D:7E:FC:A0:11:8E:41:A8:68:F4:4B:30:E4:D3:EF:D2:93:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b54451a8-165a-3b6c-806c-f415d0b0dd22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.191.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:f8:3b:b7:58:d4:c1:c0:86:aa:7b:a0:ab:51:39:29:1e:
         7d:39:d1:99:d8:31:ce:57:5e:3c:15:cd:63:fa:a8:27:24:cf:
         5a:18:61:60:46:25:92:e0:88:c4:4b:b7:01:e7:3d:6c:f0:c0:
         6b:0d:f4:51:d0:1c:ae:e0:4a:1f:df:e5:88:23:11:02:8d:19:
         7e:e9:94:5c:cd:ee:b1:28:4a:dc:2c:8d:db:3a:9e:39:29:ad:
         74:aa:ab:3c:cd:1b:77:ae:98:40:a4:a0:d6:a8:e0:32:3d:88:
         79:98:2e:0f:8d:eb:bb:19:98:7a:d9:23:da:51:c3:44:e3:75:
         30:c4:70:00:02:d7:8b:71:a0:78:d7:42:de:8a:d9:31:44:18:
         e3:d2:87:50:76:89:6e:d1:40:e6:e8:ec:a2:2e:ba:be:ea:4d:
         36:a3:c2:fd:0e:8b:df:a3:82:bd:e4:cc:59:29:40:a4:59:8b:
         79:3f:58:76:60:c4:da:ad:c7:4c:21:0a:62:1e:37:7d:94:53:
         0f:97:12:7d:ac:b2:36:01:5a:57:62:fd:8c:d4:aa:a2:af:7c:
         ee:88:d1:78:bb:15:6b:83:2b:5e:bc:36:82:a1:57:76:7e:26:
         c4:70:18:b8:f4:07:fc:a3:9b:5b:69:90:4a:8e:fa:da:9a:8b:
         b6:0e:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:13 2025 by rpki-client