Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
File:                     af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa (raw, json)
Hash identifier:          eLYlPjn+wG4HV+6rpdnEkfDJnzgeiR+8JPt8o+Jk/Rk=
Subject key identifier:   FE:D8:08:42:65:DE:BD:93:2C:F3:C6:15:EB:B3:7B:E2:D1:45:1D:8C
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285849CBCF87615AE22112E6D89A80
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     42
IP address blocks:        207.34.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:87:61:5a:e2:21:12:e6:d8:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=d7c439e0-5400-41ad-b157-b4e44a4c8580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:a1:e9:e5:ae:fb:62:6b:82:da:93:01:68:
                    98:f8:ad:09:6b:0e:3c:46:86:fb:d2:5e:59:a7:f7:
                    fc:07:df:d0:aa:ed:d7:3a:88:41:5a:ed:7f:0a:ce:
                    f5:9c:94:c4:28:6c:02:eb:07:b9:d2:21:7f:60:01:
                    5d:8b:ff:0c:99:01:c2:3d:26:51:a8:00:ac:55:ce:
                    e1:2a:cf:fc:ee:d1:50:e7:bc:58:46:80:ad:09:fe:
                    2e:62:dd:23:29:85:ca:10:70:c1:6d:af:90:f2:f7:
                    60:6b:d6:3b:4d:8c:19:6a:dc:80:57:b9:06:43:dd:
                    ce:af:09:95:87:cb:2e:48:5e:f0:4b:98:c8:ba:63:
                    3a:2c:34:de:db:ff:81:bf:25:df:0c:eb:c1:84:65:
                    21:2b:9c:b8:22:6c:67:ac:45:79:d2:b9:da:05:7f:
                    55:1e:21:24:dd:5e:7f:28:ac:3c:00:ef:ef:00:f7:
                    5a:23:22:26:01:d7:35:4c:63:2a:de:d0:4f:ed:5f:
                    f2:f8:56:1d:ba:a6:ad:49:95:0a:0c:c6:6b:f0:46:
                    a1:79:d8:89:3a:89:ce:2b:ce:4f:58:7a:37:57:fc:
                    2e:dc:4c:53:77:ea:b1:4d:36:a8:1b:29:11:28:2f:
                    55:5a:ca:94:24:3b:3b:1b:08:a2:4c:d1:6d:d4:2d:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D8:08:42:65:DE:BD:93:2C:F3:C6:15:EB:B3:7B:E2:D1:45:1D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:40:25:cb:3f:27:6a:65:bc:ee:f1:d5:72:5a:12:b1:84:
         04:44:0f:28:f4:a9:87:c4:37:60:ac:33:d9:79:c3:1e:27:e2:
         34:9f:4b:59:83:a3:e0:5f:c6:57:4c:35:31:d1:5a:0c:a9:2b:
         1b:62:12:ae:9d:af:01:8c:6f:f8:d7:c0:98:c4:06:22:63:cd:
         a2:9e:7f:24:45:cf:2e:59:00:ec:0d:73:72:26:e5:14:ae:b8:
         17:aa:ef:83:8b:21:c8:d5:9d:a3:0e:4f:4a:96:4b:f3:c0:f5:
         ec:67:ff:e7:8b:03:2a:fa:6f:dd:27:34:86:80:b4:70:15:96:
         9a:50:89:92:66:1a:b9:a9:e8:f6:0c:c9:a5:51:5a:06:2a:27:
         5f:44:9e:6b:62:29:f8:99:41:09:c8:a7:56:b1:08:0d:ae:36:
         5b:e6:1e:76:2e:68:4a:95:24:70:26:7d:f6:57:21:86:a7:60:
         5f:47:c0:cd:9e:0d:7c:e6:66:3f:17:6b:85:30:e4:9e:dc:9a:
         ad:48:1e:b8:01:58:ff:77:f0:59:9e:d6:0b:26:fa:e3:e2:17:
         72:39:a7:30:8e:c6:27:5a:a9:57:ae:d0:b9:88:fc:80:0d:95:
         fe:79:60:bc:fe:e3:70:4d:63:42:82:1f:f1:f3:5d:1e:28:01:
         db:04:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:27:25 2025 by rpki-client