Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa
File:                     34408d9c-ba17-3a98-a30c-784c9718904b.roa (raw, json)
Hash identifier:          ab5i+FAGP+mcXkAtBXskR+N7kYb87liKLjsgrBktOsk=
Subject key identifier:   A2:00:D4:17:1C:DC:D3:EE:AE:AE:77:89:B7:D4:53:6C:12:16:59:4E
Certificate issuer:       /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial:       010D0C9F4328584AE4610EA71751719029B43E70
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     3257
IP address blocks:        134.195.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:0e:a7:17:51:71:90:29:b4:3e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=5218bb5b-9a8c-4304-93e1-6b8658389784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:3f:33:38:55:a9:ab:75:22:f7:1a:34:74:
                    78:e1:e7:cf:14:c6:a7:95:c8:a7:79:53:4b:58:8e:
                    d3:28:98:01:23:f2:87:8a:02:b9:3c:ae:0d:9a:f3:
                    3b:e2:69:bd:8a:b1:6d:b5:26:32:bd:a7:78:23:2d:
                    dd:1b:5a:93:82:e5:1b:73:32:65:78:61:ac:a8:9e:
                    74:fc:05:24:53:c4:8a:66:b6:43:0c:e1:35:62:31:
                    1c:fd:26:a5:41:64:3d:f6:17:2e:f5:67:07:d5:1e:
                    c5:16:c5:fd:ee:c1:f7:7b:f6:7c:dc:b8:b3:c5:97:
                    9d:2b:4b:f2:23:d8:a5:7c:54:26:6b:36:08:4e:41:
                    2f:7e:34:2a:eb:1c:f5:91:a8:2e:59:72:81:a3:c7:
                    d6:1b:a8:28:79:ba:e5:ab:a7:23:b1:f7:c8:67:15:
                    37:39:b4:26:a1:2f:e7:6d:27:c0:30:39:88:da:6d:
                    ad:62:fd:67:5e:de:f7:e9:24:ee:a0:d2:88:26:11:
                    da:9c:6e:20:74:f2:09:59:dc:ce:0c:75:7e:82:94:
                    1f:20:a2:20:d1:17:c2:fd:80:09:db:cd:45:97:11:
                    85:42:2d:dc:ab:18:4d:87:1a:75:d8:ab:cd:53:79:
                    27:1e:63:6f:fc:ad:7c:37:eb:a8:4d:e1:c9:ec:16:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:00:D4:17:1C:DC:D3:EE:AE:AE:77:89:B7:D4:53:6C:12:16:59:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3d:e9:3d:67:9f:71:27:28:9b:06:59:51:87:87:5b:8f:09:
         f1:a4:5e:b7:15:54:0e:40:91:3f:31:72:68:f4:79:f7:ad:38:
         40:d4:f9:23:63:f0:f5:cb:15:89:47:53:bb:b9:88:db:45:df:
         0d:76:ac:4f:83:82:fe:d2:5f:a2:0b:53:52:33:49:0b:49:c3:
         27:9f:1f:dc:b2:ad:4a:4a:c7:95:24:22:f5:3a:61:d0:0d:c2:
         51:39:cf:fa:5c:1a:66:f5:31:41:cb:25:c2:eb:e9:6b:ee:d1:
         1c:c5:c0:32:d3:2f:20:97:da:5a:e7:60:c1:62:75:ea:1d:25:
         e5:a4:c3:4e:76:bf:f0:fa:d7:bf:6d:9b:70:da:ea:c2:a1:36:
         61:27:4f:ef:c2:48:0b:a4:13:57:1d:3b:5f:62:28:81:a1:32:
         90:93:a6:f8:c4:bf:d5:23:5c:da:f4:85:c5:cf:ea:f9:80:7e:
         e0:9c:5f:ac:ae:e3:b0:8b:39:a0:8d:1e:2e:93:88:cd:d8:76:
         86:7c:1f:16:03:56:4c:57:06:a7:ea:fb:9d:1b:2b:f8:8b:cc:
         fd:58:10:28:c8:b6:30:8f:ec:58:54:fd:03:13:7b:e4:2c:77:
         89:c2:ff:04:ac:59:0e:6f:f9:4b:c6:d9:4e:57:c9:9b:14:34:
         19:84:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:53 2025 by rpki-client