Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/2e01dfae-a94d-3422-ba1e-0d731fd73efe.roa
File:                     2e01dfae-a94d-3422-ba1e-0d731fd73efe.roa (raw, json)
Hash identifier:          zJ3MRG+swot5KKvjpRoPeY77Gi//2tLDx4XMuFrOOWM=
Subject key identifier:   23:CF:F1:06:47:3D:7E:DD:2E:62:98:5D:29:47:88:93:1B:10:F4:33
Certificate issuer:       /CN=95cc1176-f33c-4294-a79a-4ace8f16f714
Certificate serial:       010D0C9F43285849CE9A397261EC29271C7C2900
Authority key identifier: 5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/2e01dfae-a94d-3422-ba1e-0d731fd73efe.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        52.119.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:39:72:61:ec:29:27:1c:7c:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cc1176-f33c-4294-a79a-4ace8f16f714
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=cedafd52-68f6-4c35-883b-48e5e0d1c7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5e:dd:2d:93:84:9c:4c:77:1d:63:14:d6:6f:
                    fc:98:48:d7:f6:0e:17:b7:98:e2:06:97:7a:28:e3:
                    d7:88:d9:99:ff:1d:8d:9e:b9:48:16:2d:7c:f3:82:
                    74:f7:33:47:4e:e2:33:3e:78:c7:77:c9:f8:93:7e:
                    7b:a5:80:57:c4:0e:8d:ca:ac:58:44:d5:40:e2:5e:
                    a3:33:55:9a:8f:25:63:22:e5:91:d5:fc:8e:ed:28:
                    33:0a:74:5d:de:21:23:f0:59:33:db:25:aa:82:44:
                    35:1c:75:93:a7:09:1d:f7:c5:f5:6c:72:70:7b:b6:
                    16:15:15:f3:14:c0:2e:76:cb:c2:39:cd:38:86:5d:
                    42:69:70:01:3b:26:65:56:d8:2d:d6:be:ff:68:2f:
                    a3:40:15:5f:f1:df:95:0f:6b:f3:4e:19:86:76:66:
                    22:e7:28:f9:9a:a2:f5:0e:21:ea:c9:d5:3a:c3:9b:
                    2f:10:f7:0f:62:81:32:cf:be:46:50:b8:14:e3:fd:
                    4b:e3:0a:31:5f:b0:7c:89:88:63:85:c5:a1:4e:f5:
                    b1:c6:ef:68:fc:d8:47:c3:6e:4c:b3:83:c5:15:40:
                    f4:9a:07:cd:9d:84:d3:b9:8f:ff:26:c1:bb:30:1a:
                    ca:75:b2:a8:77:7b:5c:55:b0:ab:61:88:00:1a:93:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CF:F1:06:47:3D:7E:DD:2E:62:98:5D:29:47:88:93:1B:10:F4:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/2e01dfae-a94d-3422-ba1e-0d731fd73efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.crl

            X509v3 Authority Key Identifier:
                keyid:5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:23:6c:52:11:c3:a8:a1:00:47:95:3c:a1:5a:8e:56:ea:a3:
         c3:71:c8:2f:57:c5:d7:49:09:e2:16:c8:5a:43:82:02:b4:18:
         e2:65:c3:d0:d6:06:75:7c:a7:40:03:8c:b1:04:67:c1:d8:2d:
         61:8a:89:43:c6:2a:1d:7c:0b:b2:28:4f:9d:30:bb:39:5b:ca:
         e4:14:83:af:98:fb:ef:11:32:86:2b:77:2b:5a:0e:7b:11:6e:
         5e:bc:22:3d:8a:90:66:ff:7f:52:5e:c4:32:8d:a2:87:5b:9b:
         7a:6f:a6:7e:19:fe:74:64:d2:63:8a:1a:92:22:97:99:fb:de:
         55:6e:54:ef:d2:5e:21:6d:6a:c5:a5:31:c1:7f:47:7f:5a:45:
         1a:ba:23:d5:3c:8b:c3:57:14:93:24:4f:6f:ef:ed:37:d3:c3:
         19:e6:7d:41:00:58:8d:ce:af:cc:70:3a:a7:d0:a4:59:4a:02:
         98:7f:0e:fd:db:5f:ee:92:9e:f4:84:78:3d:16:8f:a0:8d:67:
         23:0e:1d:2a:8a:d6:da:86:d5:52:62:68:dd:7b:22:e6:fd:2a:
         1c:07:76:ac:14:60:9a:de:79:4d:51:07:24:5a:1b:27:d9:11:
         f0:08:4b:e8:77:48:51:1f:e9:cb:3e:dd:35:49:33:f8:99:9e:
         d4:8b:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:35 2025 by rpki-client