Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58984c3f-2d17-35c3-8426-661715e7a74a.roa
File:                     58984c3f-2d17-35c3-8426-661715e7a74a.roa (raw, json)
Hash identifier:          DVn48V95fc2TZOgrdbuz5m4WwtIbwKjdndAiPKN99Wo=
Subject key identifier:   EC:5F:F5:B9:47:2D:4A:0B:C5:59:1B:B5:46:6D:E4:9F:48:4D:5B:A7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849C504BD19E9DE64C62F001BB8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58984c3f-2d17-35c3-8426-661715e7a74a.roa
Signing time:             Wed 07 May 2025 02:37:37 +0000
ROA not before:           Wed 07 May 2025 02:37:37 +0000
ROA not after:            Tue 05 Aug 2025 02:37:37 +0000
asID:                     19527
IP address blocks:        34.190.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c5:04:bd:19:e9:de:64:c6:2f:00:1b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  7 02:37:37 2025 GMT
            Not After : Aug  5 02:37:37 2025 GMT
        Subject: CN=4e8cb553-f39b-48fd-aae4-e354abc9587e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:44:6d:00:46:14:67:32:5a:06:03:e3:19:
                    0c:c9:93:aa:09:04:6a:f8:bf:89:cd:6b:9f:26:58:
                    a2:3b:2f:ae:84:bc:51:76:1e:9b:28:aa:30:f5:4c:
                    b6:e4:d5:a4:92:9c:85:06:11:a9:8c:a4:49:15:59:
                    82:dd:f2:e9:28:be:54:d7:26:69:dc:83:f0:32:d0:
                    cc:96:8b:10:7a:80:70:a5:f9:25:be:fe:b6:54:ae:
                    89:5c:ae:3d:1b:c8:4a:69:14:44:bd:03:04:c8:99:
                    bd:bc:0f:fc:f2:2b:ea:02:00:2a:27:5f:db:f4:4b:
                    a8:bd:2f:d6:21:52:0d:3a:97:4e:de:cb:e4:b2:51:
                    d0:64:ea:d2:31:14:0b:dd:ce:6d:1d:ef:d9:ca:e2:
                    1a:e3:78:81:6d:83:96:d5:36:b4:46:2f:d4:01:15:
                    f8:39:62:cb:f9:87:e9:4d:bd:ae:91:f8:41:3a:4d:
                    b5:5a:5e:79:6a:d0:35:f5:5a:9f:3a:46:23:e8:56:
                    b7:7f:0f:de:f4:fd:0a:5f:d3:5b:0b:c1:36:6d:5a:
                    86:93:68:04:34:be:df:3e:c1:66:fd:89:22:da:9b:
                    06:27:20:c8:88:3a:2a:35:6c:63:31:73:61:62:ce:
                    5f:35:a2:bc:59:b3:38:8d:17:9f:0b:38:d3:d7:4e:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5F:F5:B9:47:2D:4A:0B:C5:59:1B:B5:46:6D:E4:9F:48:4D:5B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58984c3f-2d17-35c3-8426-661715e7a74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1f:53:47:28:5b:1a:66:3a:a4:f2:73:83:a6:ce:f8:e0:72:
         8a:a5:34:a9:c8:eb:01:62:87:78:df:6f:d3:f1:c8:5e:84:c6:
         a9:f7:eb:5e:dd:50:22:b6:2c:4c:a4:66:32:07:f5:e1:b3:c4:
         6d:79:3e:27:1b:e5:68:ce:84:be:ba:af:ad:7e:b1:ea:ac:5c:
         30:68:9f:38:e5:2a:37:63:db:d0:2e:01:38:fa:a4:23:3e:61:
         27:67:1d:c4:15:07:48:a8:b4:4c:06:9a:fe:00:db:0f:74:d3:
         49:cb:bf:df:3a:f1:ac:c1:8b:23:ef:8c:3a:6c:8f:ff:9b:7c:
         76:31:5d:2d:71:ce:a7:d6:4e:40:a0:c5:50:51:5d:27:16:11:
         5c:e6:81:2a:c9:a8:12:e4:a5:a1:96:55:9e:bd:4f:fa:0b:f9:
         e0:67:8d:85:fb:2e:35:5a:4f:5c:6c:33:e3:6e:6c:38:0d:a1:
         aa:4c:d8:25:76:98:da:9e:00:55:df:1a:86:de:46:b8:aa:cf:
         ae:d1:0c:da:f8:0e:8e:90:2d:b3:98:13:2c:58:fb:c1:ea:bc:
         cf:b7:09:37:aa:57:ce:be:3a:09:5a:1d:cf:13:8d:27:30:b2:
         da:9e:25:40:c6:b2:24:87:42:10:92:81:ce:27:48:b1:69:2e:
         7f:19:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:03:37 2025 by rpki-client