Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c318a33-827c-353a-be21-fa5575142544.roa
File:                     6c318a33-827c-353a-be21-fa5575142544.roa (raw, json)
Hash identifier:          GXi9D85AfS+7N4Foi8PslUjLJzSKMev4UKz8VLeVoBw=
Subject key identifier:   6D:C1:07:20:08:31:0D:4F:5C:37:9D:55:53:D4:39:69:CF:26:6F:7A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A454045C51DECF90BF463B040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c318a33-827c-353a-be21-fa5575142544.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     19527
IP address blocks:        34.1.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:45:c5:1d:ec:f9:0b:f4:63:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=c09e0754-813c-4fe0-9e63-caaece93497f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:59:9a:05:89:61:d5:21:69:0d:bf:54:c2:
                    be:26:6f:20:e8:30:26:9e:dc:1d:71:36:62:0d:88:
                    7b:92:0a:c9:90:2b:ce:e0:e8:52:d1:5d:bf:f8:ae:
                    db:cb:54:f0:d2:66:46:54:4a:3b:90:6d:30:9b:d6:
                    68:a6:95:55:4c:79:7f:1e:67:36:88:ef:78:0d:f0:
                    fb:1b:97:7f:75:2c:74:40:ca:8b:f2:16:0b:7d:9f:
                    20:26:91:37:2d:22:24:29:37:7b:b8:78:9d:40:64:
                    cc:4a:1e:ca:66:75:b8:7d:53:64:ad:e3:ab:31:6e:
                    2a:22:79:96:6b:e6:55:7b:fe:8d:17:b4:b4:33:1b:
                    6a:3c:0a:fb:6a:ee:db:72:d6:22:d5:6d:c3:da:76:
                    f2:b8:ba:18:2b:25:36:6a:c3:22:1b:29:81:da:19:
                    78:99:d2:67:32:54:93:29:3b:c9:1c:ca:22:99:5a:
                    f7:4e:79:a2:fa:ad:6c:9c:f6:5e:a4:57:44:76:dc:
                    af:7b:00:e4:49:84:2a:ec:db:06:2c:e7:de:35:bd:
                    d0:07:d0:76:d7:9b:6a:52:c4:d5:eb:4c:82:a1:23:
                    54:7d:d7:c5:68:e6:f5:40:07:be:9c:d8:41:d3:18:
                    5a:10:31:9a:07:37:d2:10:65:2b:19:9d:d9:8b:91:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C1:07:20:08:31:0D:4F:5C:37:9D:55:53:D4:39:69:CF:26:6F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c318a33-827c-353a-be21-fa5575142544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:18:02:8c:b4:5d:7e:04:b1:77:70:74:17:0e:11:59:9a:48:
         99:1e:d5:ed:4c:a7:93:f2:c2:44:91:d8:88:be:0a:fe:0b:1a:
         ce:9a:75:d5:19:3d:20:c4:6f:ee:ea:3b:65:4c:51:36:ae:f0:
         f6:92:6d:58:d9:70:60:18:b1:3a:3d:1e:2f:c2:d6:35:bc:07:
         f5:30:86:0d:2a:4c:0c:fd:cf:c5:a8:f8:5a:eb:7e:81:d8:66:
         c0:35:67:9e:9b:ec:67:99:57:bc:c6:a3:ad:d4:f2:2d:1d:a2:
         b1:14:3c:f8:9d:86:5d:db:a8:dc:f9:cb:95:10:cb:78:c3:62:
         cd:2a:33:eb:0b:28:49:21:2d:05:eb:7d:59:50:70:be:79:6f:
         16:38:1a:08:7c:34:4c:4e:3b:32:8e:ad:9b:32:71:ff:b9:1b:
         b7:ee:75:24:1f:c7:d2:0b:19:af:d1:96:45:f3:d5:6b:be:9b:
         79:1a:bd:37:5c:16:9b:02:04:04:e3:bb:93:fb:e0:5b:1a:de:
         10:d9:8a:8a:0a:39:77:14:c6:f4:35:78:1b:bc:8c:54:13:20:
         5f:21:d6:d4:93:d3:4d:92:e0:44:8b:0d:0e:83:04:9c:0a:75:
         be:53:6a:7c:b4:6a:30:a4:cb:75:e6:9d:bb:55:d8:98:24:05:
         a1:7d:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:21:24 2025 by rpki-client