Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b068d65-4a40-3bff-aa75-9a3c9857d3a4.roa
File:                     7b068d65-4a40-3bff-aa75-9a3c9857d3a4.roa (raw, json)
Hash identifier:          MV513zbBODknXYr/zoaidcit7qRBdAgO2QpqmDrJDck=
Subject key identifier:   12:09:52:71:E7:B0:38:6D:95:3E:F7:0A:31:A3:7D:85:93:5D:AD:30
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A480AECF5E1DA05D46CD4B100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b068d65-4a40-3bff-aa75-9a3c9857d3a4.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     19527
IP address blocks:        34.1.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:ec:f5:e1:da:05:d4:6c:d4:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=7a2e0d8f-48d4-4e52-be92-c9546b407bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:dc:a1:59:24:51:ff:df:dd:06:4c:41:e3:bb:
                    e0:47:08:49:f1:14:43:b8:cb:76:09:c7:46:d5:cb:
                    e6:64:54:3c:c0:ad:2d:06:c3:23:58:6a:04:16:b2:
                    a7:ca:4b:d3:0d:36:56:4e:66:69:94:b7:b9:1a:44:
                    a1:1b:20:97:b5:f8:b1:05:aa:45:51:db:cf:19:d2:
                    3f:06:67:b2:67:e2:74:f3:53:04:4f:16:2b:88:fd:
                    c8:d5:9d:a5:2e:83:59:2c:26:67:f1:e9:f2:f7:a8:
                    cc:0c:69:38:06:f7:40:5d:d2:85:9d:d1:32:7b:87:
                    f2:69:e7:29:66:ce:b5:78:f3:19:e7:cf:02:36:d9:
                    c3:a4:3e:2d:73:91:6b:64:f1:8c:10:36:93:a2:67:
                    c6:6a:5a:1c:42:87:3e:a0:12:f0:58:76:a1:7c:d3:
                    cf:6a:7e:11:bd:49:2c:46:b5:90:f7:b1:2a:1e:0d:
                    9c:41:29:ba:63:00:6f:8e:11:0c:62:48:f2:4e:7a:
                    e3:02:be:7f:ae:a8:67:20:84:df:59:d8:69:68:f3:
                    a8:f4:f8:e5:38:e7:e3:76:1a:de:1e:1f:1c:31:39:
                    cb:d1:6d:67:65:f0:d2:5f:4e:b2:0d:bb:80:aa:de:
                    a7:dd:e0:20:37:a9:cf:d5:4a:80:48:47:67:0e:cf:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:09:52:71:E7:B0:38:6D:95:3E:F7:0A:31:A3:7D:85:93:5D:AD:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b068d65-4a40-3bff-aa75-9a3c9857d3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:3e:a7:af:90:d3:2a:2f:14:9c:a6:62:d1:6a:81:11:d5:
         b1:66:e3:8b:43:e8:11:ce:47:e4:a9:d1:de:c6:5f:4f:e1:eb:
         f7:7b:7c:52:af:fc:c4:17:3f:ae:82:77:02:a5:58:cc:55:5b:
         9f:96:23:f5:ea:6e:46:e1:87:7b:06:99:5b:04:2a:55:d1:07:
         ee:cc:de:29:b3:9c:83:28:ca:9e:ec:f0:cb:63:a7:c3:2f:a0:
         ff:f8:15:cd:49:a0:f5:19:ae:aa:e4:41:17:29:c0:03:3b:fe:
         05:b9:8a:f6:de:b3:f3:41:5f:f3:c4:ce:3a:05:8e:c9:8b:ec:
         62:dd:da:4c:21:17:e3:ec:19:35:8f:8e:7e:76:73:2b:80:f1:
         53:6c:f5:9d:25:2e:98:f9:b0:f8:76:55:6a:43:15:58:4e:9e:
         84:98:d8:88:e3:b4:a2:29:35:a6:79:9c:a7:e7:b9:70:fe:3e:
         69:c7:fc:78:72:7c:01:68:ed:9b:59:f7:1d:ce:a9:00:ee:80:
         ac:3f:3d:67:1c:63:41:ea:70:3d:4c:42:7f:66:bb:72:a6:32:
         0e:7a:43:24:2d:bc:46:e4:2d:db:10:8c:14:2b:61:60:62:c4:
         6e:47:42:5d:ac:f8:67:84:ce:8d:cd:9f:8d:e2:d7:8c:27:be:
         99:cf:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:33:42 2025 by rpki-client