Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8280e08a-ebbb-3ea7-99a3-d450dd18c02e.roa
File:                     8280e08a-ebbb-3ea7-99a3-d450dd18c02e.roa (raw, json)
Hash identifier:          n80374wcvTkBiDj0w3ikKLlmC6OiIGs83ViH+dfgFys=
Subject key identifier:   06:5E:79:41:3E:97:A2:EA:78:F8:0D:62:7E:62:F2:50:30:A2:36:A5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849C5053FC5E6BEDA2F8803E2C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8280e08a-ebbb-3ea7-99a3-d450dd18c02e.roa
Signing time:             Wed 07 May 2025 02:38:39 +0000
ROA not before:           Wed 07 May 2025 02:38:39 +0000
ROA not after:            Tue 05 Aug 2025 02:38:39 +0000
asID:                     19527
IP address blocks:        34.190.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c5:05:3f:c5:e6:be:da:2f:88:03:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  7 02:38:39 2025 GMT
            Not After : Aug  5 02:38:39 2025 GMT
        Subject: CN=ef18a10a-680c-4829-bc9e-4f686329b70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:4d:ed:fe:ee:4b:db:f6:ce:f6:83:92:48:
                    85:ba:8b:a5:70:8a:24:cd:c7:5d:22:cf:95:a9:91:
                    30:07:c7:bc:33:c6:f2:9c:4b:67:54:d1:71:0d:cb:
                    1c:97:9c:c4:51:de:0b:38:09:15:ec:a1:40:ea:be:
                    13:57:5a:55:d8:8c:be:03:d0:84:e2:af:0b:c7:fa:
                    f6:cc:6d:6e:46:a4:6b:92:15:e3:e0:2f:f7:3d:1a:
                    86:8f:02:19:85:58:aa:e5:2a:fd:f0:41:4e:6e:4d:
                    e1:f2:c3:0c:f3:82:7a:53:3e:fd:da:85:55:80:05:
                    05:33:bf:3a:07:86:42:4a:a1:aa:68:08:1c:5b:c2:
                    7e:8f:43:a3:eb:31:de:63:0e:ab:31:09:86:f6:46:
                    29:9b:98:35:a9:f9:02:c5:55:7b:fc:b2:33:cb:fa:
                    e9:f1:d6:de:fa:dc:d7:1b:30:d3:a3:01:25:1b:e0:
                    08:cc:84:c8:da:8a:3e:45:18:38:c5:fb:92:43:64:
                    76:e1:ad:2c:f3:e8:e2:c4:4c:97:8a:6a:90:c6:be:
                    d2:86:dd:56:b8:1a:98:d5:07:e4:2d:6f:d2:99:8d:
                    cb:38:e1:4b:78:65:11:5d:b7:30:96:84:67:a3:4c:
                    7b:08:85:e0:a6:09:ec:aa:83:0f:ad:07:e7:f8:36:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5E:79:41:3E:97:A2:EA:78:F8:0D:62:7E:62:F2:50:30:A2:36:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8280e08a-ebbb-3ea7-99a3-d450dd18c02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.190.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:65:31:6c:aa:6a:bc:5f:57:3c:6b:e8:1b:24:e6:05:fe:20:
         d1:f2:72:1b:95:6b:4d:08:9a:66:98:89:9d:e6:b4:b3:39:f0:
         37:08:5f:c5:1f:ae:6e:67:1f:e1:d5:28:41:4f:0a:40:03:aa:
         1a:e6:c6:2c:a5:ba:69:f7:f8:5d:ab:6d:5f:d4:82:13:64:4d:
         0c:6a:cf:19:73:39:b0:65:00:fc:c5:bb:77:df:b7:c9:e4:d2:
         fe:40:cb:f3:2f:bf:7d:51:1a:9e:8e:f5:f6:67:c4:35:43:66:
         82:47:46:f9:e2:16:1e:b7:c9:74:d2:3b:7a:68:d5:f0:7f:04:
         f2:da:c6:ca:fc:f9:90:c1:ef:8e:45:10:e2:3d:5e:d4:4a:51:
         50:ac:11:b7:17:17:30:83:38:57:b9:11:93:4b:2c:49:50:96:
         57:bc:b3:65:fa:0b:0e:71:51:49:11:07:e2:32:15:37:74:09:
         cc:07:4d:10:d9:f9:d3:45:94:df:66:2d:33:30:7e:c2:61:ad:
         0f:b3:8b:4e:6b:91:c7:79:5c:d1:7f:4d:a2:23:a4:53:d2:ba:
         36:f8:9a:d5:82:96:05:b3:d5:51:69:3d:2b:c9:7d:b7:fe:21:
         50:fd:cb:49:a4:ae:fd:85:e0:4f:25:d5:a0:6b:b8:01:b6:31:
         18:05:ce:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:01:24 2025 by rpki-client