Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/8e099e1c-8c89-361b-bc31-d649231f7f2e.roa
File:                     8e099e1c-8c89-361b-bc31-d649231f7f2e.roa (raw, json)
Hash identifier:          2LS/KqPRqOyXelH24MCZSCYekimPIwaktA1Pdoyywx4=
Subject key identifier:   DB:61:DB:80:B0:1D:10:14:EA:1B:B8:77:C3:20:F8:4B:57:C6:DC:8D
Certificate issuer:       /CN=2e91d8ca-5740-400a-abea-127078fa77ff
Certificate serial:       010D0C9F43285849E4EFB80F14AD58CA7F433840
Authority key identifier: 44:97:3D:95:18:DC:58:92:8A:57:DE:36:6D:85:8B:FF:4F:69:AB:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/8e099e1c-8c89-361b-bc31-d649231f7f2e.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     33194
IP address blocks:        134.243.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b8:0f:14:ad:58:ca:7f:43:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e91d8ca-5740-400a-abea-127078fa77ff
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=bf14df1c-cdae-439b-965b-4641bd9771a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:86:55:f4:94:88:60:b3:81:84:c6:bc:9a:
                    68:e3:e0:b7:7d:e2:28:06:94:7f:10:ca:7e:e0:d7:
                    00:de:e5:10:0e:2c:c9:08:5b:b7:df:d4:b7:68:1f:
                    35:3d:14:b6:4d:dd:1b:cb:3c:30:13:46:85:31:96:
                    e2:be:fa:65:d0:ad:39:73:5e:30:43:86:04:82:be:
                    18:7f:84:b3:6c:b4:a8:98:f7:9b:fd:33:c9:c9:d3:
                    64:49:e5:0b:61:57:aa:42:79:d0:bd:aa:79:a5:ed:
                    de:3d:0f:eb:e0:25:b4:b4:ac:8a:eb:8c:37:a2:19:
                    cd:70:f5:1e:c7:54:8b:b3:49:2e:96:4f:50:00:6e:
                    07:26:7a:98:bb:c5:3d:fa:0a:16:41:11:cc:87:44:
                    e9:5c:bf:31:f5:b0:6b:ab:2f:18:d1:a8:74:3f:cd:
                    54:ac:39:c0:7a:5a:17:1c:9f:95:a8:89:3d:39:3e:
                    1c:ba:ce:3b:9b:26:27:d9:b5:1e:aa:b8:d6:d1:18:
                    26:99:16:2b:54:f3:cf:5f:d5:a0:9a:96:81:d9:65:
                    d3:7e:17:8e:07:ff:66:0d:dc:27:0a:f0:1d:94:84:
                    7a:74:68:2d:7d:e2:50:ae:26:db:4e:ae:fb:21:8a:
                    a3:23:77:e1:e6:ee:98:32:e5:24:54:04:75:0c:e2:
                    d8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:61:DB:80:B0:1D:10:14:EA:1B:B8:77:C3:20:F8:4B:57:C6:DC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/8e099e1c-8c89-361b-bc31-d649231f7f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:3D:95:18:DC:58:92:8A:57:DE:36:6D:85:8B:FF:4F:69:AB:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.243.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a9:48:b4:e9:8f:df:ba:fd:89:44:18:03:be:b4:63:02:82:
         d5:1c:d1:af:6b:7d:ca:20:4a:0f:71:96:f1:68:db:80:17:b0:
         0b:4a:70:ce:59:26:93:26:4c:dd:aa:ab:cf:ac:e2:63:9b:01:
         7a:39:c1:53:a9:bc:3d:c7:d7:2e:a6:94:2e:b8:eb:e2:e3:cd:
         00:05:ed:fb:82:6d:68:a3:28:05:87:1d:76:fa:e1:da:8a:2b:
         ff:57:93:5f:97:5a:fb:82:53:74:67:12:f4:2c:07:80:55:91:
         f8:48:9a:3f:51:2f:a9:c8:ed:c6:62:ca:65:13:a8:ca:70:fb:
         c5:f7:d6:da:84:5c:68:e6:54:89:45:55:1d:5b:46:11:fa:b1:
         d4:b1:d2:89:4d:dd:ec:bd:4b:68:c8:39:c7:2c:fe:e4:d6:1a:
         ef:7d:af:6f:41:4d:61:48:b7:d4:85:1e:4f:7c:3a:32:65:f7:
         81:87:dd:a2:32:af:9f:e0:3a:88:88:92:32:11:f1:e0:65:45:
         6f:ea:b5:c1:9b:06:bc:d7:3d:6c:80:b4:84:f8:a7:44:d6:93:
         64:5a:e6:b0:48:c2:f7:aa:57:d1:1b:9c:0b:50:2f:40:5d:74:
         f2:59:09:4a:a9:29:0b:cb:5f:0f:d7:9f:a4:37:ed:49:b6:6b:
         19:65:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:07:44 2025 by rpki-client