Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa
File:                     5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa (raw, json)
Hash identifier:          EKRV0vZNwwvxaEo80cblRcTw4E4JmpCvxBKcYLg3Mw4=
Subject key identifier:   04:FF:88:4F:28:22:B6:42:BF:D6:91:29:AD:DF:0F:C5:4D:D4:AA:5A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A5335B5DF34EB7EB59AC1F2C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     19527
IP address blocks:        34.2.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b5:df:34:eb:7e:b5:9a:c1:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=e691a7cb-6a7f-413c-85c2-5da6b9549147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:50:72:a1:f2:d5:d4:1d:9e:3d:02:2d:ea:
                    5b:05:0d:93:9b:8f:f0:bc:65:42:4f:36:e4:15:ad:
                    f8:19:a3:c3:0b:67:a5:6c:b8:2e:0f:30:a5:13:67:
                    70:ac:cf:e4:6e:86:d8:fa:27:d5:92:18:f1:c5:92:
                    57:00:89:38:98:c8:b7:f7:81:82:9b:c6:4e:3d:b2:
                    e2:0d:3a:62:60:42:18:08:14:68:6d:e1:f6:56:53:
                    88:fa:1d:76:4a:bf:c8:41:4d:96:27:34:2d:c7:9d:
                    bd:07:e4:00:0f:3f:ef:a2:94:d2:41:d7:b6:99:1d:
                    06:1e:25:3f:aa:08:fc:2a:10:e8:63:d6:e4:0b:60:
                    28:6e:e1:3f:e3:5f:d4:8c:b2:d8:52:f9:de:fe:fe:
                    3f:e8:31:3b:e2:b6:82:e3:54:4b:f2:ea:a8:40:09:
                    39:2e:c9:57:a6:1e:03:31:85:d6:4e:19:88:6a:96:
                    87:93:f3:5e:1e:04:6d:16:dc:d3:97:53:90:5b:ba:
                    28:a1:9d:3e:c6:7f:d4:72:ca:4b:01:5d:a7:50:09:
                    55:82:7c:1d:20:b2:c7:b8:fe:4d:07:23:b2:00:74:
                    90:91:88:16:ca:a5:cf:41:8e:26:c6:2e:e0:ef:39:
                    f7:95:38:44:21:76:df:fb:87:f6:5c:68:18:9c:d6:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FF:88:4F:28:22:B6:42:BF:D6:91:29:AD:DF:0F:C5:4D:D4:AA:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f53f5fd-1371-3f11-93d9-efc573ea12eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e7:e9:22:a3:6b:c5:2e:39:b6:5f:08:db:f1:7d:04:f4:4c:
         ac:ee:14:80:63:4a:12:fd:32:d5:60:e0:32:81:b2:54:80:df:
         3f:08:59:91:b6:11:b0:bd:34:6e:27:bf:45:01:2b:43:6a:4a:
         e0:ff:53:21:f6:7a:18:09:c5:bd:ee:06:78:98:4e:33:14:45:
         66:83:cf:a9:ed:ad:6c:06:79:a4:b5:73:88:de:9e:6b:8a:42:
         fa:4a:8a:b0:e0:55:af:0d:45:a6:65:f8:10:3c:04:48:f7:e5:
         71:22:40:c2:18:75:d0:d3:1e:ec:ad:d4:7c:67:fb:f3:b6:9a:
         9d:91:5f:6c:fd:7e:cf:1b:8b:ce:0c:4c:45:b5:3a:54:0d:0c:
         3c:15:ab:49:04:a2:38:61:54:21:36:e2:47:64:90:43:a5:60:
         d3:a2:92:0a:27:22:92:c0:26:4d:f9:a3:5b:2c:33:b2:0a:d5:
         a4:48:3d:d4:4c:b1:59:55:49:9a:1f:d4:48:96:a4:0a:32:2a:
         1d:67:a8:86:66:12:dd:a6:65:80:7a:bb:0d:88:1c:7b:bb:9b:
         4b:c1:24:55:8a:03:9e:36:df:25:21:ee:f2:a9:9f:02:3e:89:
         0f:9e:0d:a7:17:b0:1e:51:cd:9e:04:18:9b:64:0e:06:99:4f:
         96:95:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:55:35 2025 by rpki-client