Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa
File:                     52037103-8e6a-31e2-91b6-01a8928ef1da.roa (raw, json)
Hash identifier:          mzo5fep0R2/Ds9Y50JZKakChBvz70/EOL813iDwsmiU=
Subject key identifier:   28:B1:2E:0D:59:F2:71:DA:8E:A5:C0:1B:4F:53:1E:BA:15:83:CE:80
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A7852E456D406D433CED3B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        34.123.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:2e:45:6d:40:6d:43:3c:ed:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=6dba842f-4ef0-41f9-b060-5f409a0e06e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:aa:76:33:d9:c9:6c:39:40:8f:0c:cd:1f:
                    34:88:45:e2:67:31:47:8f:06:23:d4:cb:45:2d:99:
                    19:f6:ae:9d:e9:a1:bf:5b:d1:7c:ac:97:55:66:0a:
                    56:f1:19:50:8f:a3:93:2c:37:1d:9c:3c:2f:d5:6f:
                    2b:10:8e:44:f3:e4:91:a7:e9:54:80:82:48:89:9b:
                    98:a8:32:ab:e3:15:e6:1f:55:40:97:22:04:a8:d6:
                    0f:c7:e7:f6:c5:8f:38:af:ca:a7:99:7d:6a:ea:a9:
                    a5:95:68:66:87:68:5d:3b:07:db:2f:bc:00:96:e5:
                    e5:d9:9b:55:d0:85:1a:fa:cf:66:31:3f:3c:91:81:
                    f3:36:f6:66:51:55:a3:f0:ef:a0:03:0c:bb:bd:af:
                    d8:37:4f:a8:18:b5:6c:db:2f:94:dd:32:d3:eb:26:
                    f3:1e:c1:e5:7e:fc:ec:2d:55:19:07:5e:29:1f:05:
                    32:69:a4:c6:4b:fe:2c:45:fc:81:f0:c3:c3:f2:1f:
                    fb:4c:85:a2:d9:e7:e4:f9:5c:0c:16:22:be:0f:27:
                    21:d2:f2:ed:ba:19:3f:fc:bb:b0:84:1f:d4:79:92:
                    33:57:94:f5:48:7c:6e:fa:6e:ca:cf:85:f7:a4:00:
                    16:7a:18:2b:5e:ab:59:84:d8:7f:df:68:84:c9:55:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B1:2E:0D:59:F2:71:DA:8E:A5:C0:1B:4F:53:1E:BA:15:83:CE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.123.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:43:4f:d5:23:ee:a0:c4:23:a7:ba:5e:62:e0:cd:4a:f9:fd:
         04:44:d6:d2:a2:b7:ae:62:12:c3:78:7b:fe:09:d0:d1:b2:1a:
         51:1f:d7:2c:12:03:e7:c6:26:c2:b3:a6:b0:a2:ec:3f:37:2a:
         25:6a:d4:dc:62:18:c7:e2:8d:a6:a5:34:08:67:40:9d:a4:6a:
         bf:64:3d:1c:30:4f:34:b3:29:77:0c:60:86:d5:e7:a1:e2:ca:
         54:c9:aa:24:48:71:52:e9:76:9e:97:d3:70:e2:10:36:e6:c0:
         29:45:fe:65:8b:93:87:1c:44:61:1a:8e:7c:17:7b:78:b3:e7:
         61:ab:ee:27:30:82:db:b6:22:1f:62:99:8d:48:ef:33:4c:77:
         f6:6d:28:57:8e:b9:63:25:04:78:37:86:a9:91:44:83:3a:90:
         71:4d:28:f3:54:cf:b9:fb:95:b5:f8:6c:9c:c4:eb:c5:28:78:
         02:88:1a:15:9c:17:b3:1f:3f:94:cd:2b:22:ed:53:c7:22:97:
         8c:0b:49:dd:c2:59:b4:40:dc:d6:fa:ec:94:73:40:09:87:4e:
         6b:52:fc:c2:e2:ca:ca:49:91:ba:00:aa:6e:05:8d:73:c1:9a:
         6a:4f:6d:2a:ef:a4:1e:be:96:75:66:b2:94:f2:e3:ab:04:a9:
         49:89:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:32:56 2025 by rpki-client