Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b5f8152-0c85-3796-8175-beef7acf2e2d.roa
File:                     9b5f8152-0c85-3796-8175-beef7acf2e2d.roa (raw, json)
Hash identifier:          hEsJW3qj/uNcXBzmUe8+1j1s57SRbGtR08qSOOu8cUg=
Subject key identifier:   E2:AB:7B:2F:3E:58:3A:5E:8A:1D:C5:BD:6D:67:E8:FC:DE:BA:9E:65
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A454045DB523A43619BC0C610
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b5f8152-0c85-3796-8175-beef7acf2e2d.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     15169
IP address blocks:        34.1.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:45:db:52:3a:43:61:9b:c0:c6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=97032c60-99df-4bbf-a510-a59ccb89eebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:56:e6:97:f5:6e:c8:b8:40:49:67:2c:4d:
                    b0:62:6c:05:8c:63:2e:48:22:b2:90:b6:4a:57:a3:
                    6f:22:5b:39:81:28:ec:21:3b:3c:8c:a2:48:6a:bd:
                    93:a9:c7:06:13:8c:98:42:9c:94:70:cb:4c:8f:7f:
                    f1:09:d4:d6:00:a1:8c:b7:84:1f:f2:98:f3:93:45:
                    ea:fd:5f:07:9a:51:53:f8:71:47:cc:de:b4:a1:ad:
                    7e:0a:5d:d7:2a:59:0f:a6:6d:df:36:ff:42:f4:eb:
                    28:18:af:ee:1d:7e:50:4a:ab:5e:a5:67:fe:df:36:
                    78:a3:d5:5f:26:18:4d:27:97:6c:c2:c5:85:dd:9d:
                    f3:4d:c2:17:14:46:40:72:53:ed:45:aa:a5:1e:df:
                    56:53:87:36:9b:b6:c3:c2:b6:de:38:1e:dd:87:e6:
                    df:de:0d:ee:2d:71:50:60:be:0c:fc:71:0b:5d:2c:
                    3a:5e:ee:bb:ee:b5:40:21:f8:5d:f6:c2:6c:27:1e:
                    61:79:e1:af:16:ef:b5:ba:44:54:f4:2b:ba:f0:1e:
                    11:ce:61:b6:61:ae:88:c1:34:f6:8e:f2:07:0f:cf:
                    ee:5c:52:ec:d2:5e:6b:9a:4d:30:7b:a6:92:3e:77:
                    27:84:f7:82:d4:ca:af:45:a2:d7:b0:bb:f9:57:a3:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AB:7B:2F:3E:58:3A:5E:8A:1D:C5:BD:6D:67:E8:FC:DE:BA:9E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b5f8152-0c85-3796-8175-beef7acf2e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:5b:fa:bb:2a:d8:c8:03:38:40:21:04:01:4c:3a:58:26:
         bf:18:45:45:75:c9:2d:e6:71:88:b2:98:78:aa:da:75:0d:16:
         ff:7b:1c:20:b9:9f:85:79:8d:13:0e:bb:c5:14:f3:8e:77:0d:
         9e:d4:bf:c5:80:94:9e:db:c5:c7:8e:27:90:8c:f0:53:0a:1d:
         84:1f:57:fa:df:bb:43:2a:11:88:ed:be:d3:f6:2c:b3:55:8b:
         ca:cd:d2:b0:ad:37:44:c3:04:bc:2a:f3:f5:e8:52:12:83:d2:
         42:d0:47:e6:e3:1a:b8:d6:e6:2d:92:35:c0:b8:b9:f4:2b:c1:
         13:2d:3d:12:03:c2:d7:88:88:f4:f5:ab:dd:63:3b:b6:b0:b0:
         06:81:ef:7e:7d:ca:74:ab:a7:ee:96:f2:d4:a0:03:aa:bb:db:
         a9:82:7d:71:49:62:6c:ce:0d:bc:e9:92:87:b0:f5:5d:e0:bb:
         19:e0:12:71:ee:45:fa:d4:ba:cb:33:07:6d:ce:1b:a2:81:37:
         e4:96:41:0d:0f:31:53:bd:87:ce:7a:05:41:67:b4:e4:5c:88:
         a2:cf:a2:4e:96:89:ba:55:0c:f2:2e:46:71:8c:95:ee:df:b1:
         9a:fa:14:71:25:e6:fa:9a:87:33:4e:6b:c3:60:a6:27:29:c2:
         c7:0a:3e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:32:15 2025 by rpki-client