Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb97bc54-5d13-3f4c-a924-b6d367c14f77.roa
File:                     bb97bc54-5d13-3f4c-a924-b6d367c14f77.roa (raw, json)
Hash identifier:          0Q8hPPoIMOEv6VUop24fQlVccanHbMLZD/+vZT9tjc8=
Subject key identifier:   D4:69:80:F5:9A:AA:99:06:BB:DB:8B:49:D1:1D:FD:3F:07:CE:E4:14
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A78534DB609EAB5ABBCB8C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb97bc54-5d13-3f4c-a924-b6d367c14f77.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        34.164.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:34:db:60:9e:ab:5a:bb:cb:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=2754c70d-d9e7-4fb1-8f4e-c819b32e42ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:d7:01:0b:e4:18:3f:c5:d8:80:5e:1c:08:
                    34:e3:27:f6:7e:a3:29:2a:f6:d4:91:01:c1:15:85:
                    8b:f9:9a:c0:78:90:88:a0:47:90:7f:2e:a2:95:44:
                    05:b6:9b:84:2c:18:71:c8:cd:60:9c:41:d2:7b:96:
                    34:3e:1c:43:dc:a5:03:f5:14:4d:3d:4d:08:b9:c2:
                    e8:4d:f6:fe:ee:eb:2f:03:28:56:90:59:55:97:f2:
                    67:09:9f:95:91:45:79:ec:96:a5:c6:06:0b:93:89:
                    58:2f:c8:54:f5:0d:8f:1e:ae:43:f7:67:9c:59:f7:
                    a7:67:f7:c6:73:53:80:cb:bc:8a:fb:84:2f:a5:b2:
                    61:e0:c9:06:b5:41:f6:a4:7a:46:ef:20:bb:2d:79:
                    a8:60:3f:60:6b:d2:e7:65:ba:27:d4:2a:dd:47:f7:
                    f8:bf:dc:17:b7:6c:f5:b0:e7:03:1e:ec:ed:20:f8:
                    20:e7:61:6b:fc:c3:73:d6:54:45:3b:96:08:59:2d:
                    54:02:a1:8c:42:75:33:75:5b:ba:de:67:0c:25:a1:
                    15:ab:b0:98:b3:aa:1b:e3:b9:16:d1:a8:45:b0:1e:
                    95:0c:93:30:f5:6c:4e:b4:1f:9f:e4:21:c2:7a:4a:
                    21:33:40:02:f1:bc:ef:d9:95:1d:bd:3f:5b:a7:37:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:80:F5:9A:AA:99:06:BB:DB:8B:49:D1:1D:FD:3F:07:CE:E4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb97bc54-5d13-3f4c-a924-b6d367c14f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.164.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f6:d0:4e:43:68:ca:e1:a0:a5:bb:98:1e:c2:bf:17:ce:5d:
         a3:e1:66:6f:34:15:40:f3:97:9f:0d:2f:d8:8b:d6:c1:e6:bd:
         2e:0f:a0:84:47:4c:07:ef:84:52:84:98:b2:78:ae:03:72:6a:
         ee:88:c8:24:91:89:68:f4:70:87:b8:78:12:8a:bf:c2:b4:7d:
         bf:7e:dc:90:5a:5f:6b:63:55:0c:46:43:f3:9b:f1:15:90:f5:
         d7:0d:ab:93:dc:14:ab:eb:9a:c9:7c:82:8c:85:dd:56:af:47:
         d0:3e:fe:53:35:34:22:bc:bb:94:98:ff:cf:a4:c7:08:23:8d:
         0a:08:8d:1f:96:67:79:67:2c:8b:6d:46:d5:d7:80:e3:68:4e:
         f9:8c:68:67:5d:0a:e8:72:55:8c:1a:25:17:ce:15:a2:6a:f6:
         f4:2b:bb:e7:47:49:76:cf:4c:61:a6:13:7e:02:ef:a1:7d:90:
         a4:5e:78:db:07:28:52:1c:b0:2e:c4:08:94:6e:5a:9f:48:a0:
         5f:35:d1:38:3d:2b:63:0b:b1:2d:ce:57:2c:18:5b:36:7f:b8:
         3d:a9:d8:19:f7:6d:a1:2a:2b:e8:16:34:d8:a3:24:bb:86:b5:
         52:76:12:dd:dd:e7:a8:93:7e:07:f4:9c:b9:db:21:86:48:4d:
         f0:87:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:50:07 2025 by rpki-client