Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa
File:                     a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa (raw, json)
Hash identifier:          fxqXqESVzAOPXYzfPKSZsbRT7aIMlywD53WueO6znT8=
Subject key identifier:   40:5E:2C:64:E8:B0:76:98:49:C0:28:36:8D:B6:18:BD:16:0F:C3:AC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A6C55C9DDA5C0133CDE68DA00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     19905
IP address blocks:        207.34.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:c9:dd:a5:c0:13:3c:de:68:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=9aaf8a7b-bec5-48b6-9d20-1b46587de17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:40:98:81:6f:01:54:bc:35:3b:89:64:23:
                    36:24:04:9f:e3:43:fe:80:13:90:67:9e:ec:06:16:
                    6e:34:1f:bb:a6:a6:e3:91:8e:79:e1:00:ce:8e:e8:
                    b4:67:9d:7e:a3:0e:49:da:1b:61:40:10:84:16:53:
                    ac:41:4b:d8:d6:bc:e7:a9:01:3d:e0:40:30:79:93:
                    a1:e6:9b:60:93:67:05:96:1c:ce:c8:9f:52:b5:45:
                    c5:d7:1a:2b:b6:3e:5f:fa:49:39:f3:dd:af:5c:6a:
                    05:8f:77:36:a7:16:72:8f:2f:92:db:c6:74:76:34:
                    61:c4:a7:1d:53:03:98:d7:51:0a:0a:c0:0d:ce:06:
                    54:25:bf:67:23:26:33:b4:e2:14:b1:76:4c:6e:38:
                    41:ad:e8:55:e2:4c:e5:b2:c8:49:3d:13:4c:02:a5:
                    d8:77:39:e6:28:84:0d:18:4d:7a:5a:6a:bc:8f:aa:
                    6a:84:da:c5:87:4c:52:ea:f0:e4:ed:f1:5f:bd:4e:
                    70:32:1e:0b:1d:2f:5d:49:de:5f:8e:39:ad:1f:b2:
                    93:a7:6e:42:45:55:06:41:58:c0:17:1f:10:fe:2b:
                    f7:06:ba:82:8f:12:8c:59:46:88:c3:23:01:47:9f:
                    a3:74:55:0e:74:2b:4e:c6:e5:bb:fb:e1:2f:c7:78:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5E:2C:64:E8:B0:76:98:49:C0:28:36:8D:B6:18:BD:16:0F:C3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:38:62:b1:fa:6c:97:b4:7d:79:d7:1f:a9:41:ed:c3:1b:13:
         05:af:da:8a:30:de:b5:5a:6a:ff:89:92:0d:e8:28:01:f0:f4:
         b6:c4:79:ae:1f:ca:74:8a:eb:08:87:74:b7:d0:31:74:c2:23:
         56:d9:fe:65:4d:e4:a6:db:64:76:00:1a:cb:b5:06:f0:45:bb:
         6e:00:c2:f4:24:9a:73:54:d4:fd:a0:3b:50:2b:97:f0:1e:03:
         9e:e3:55:b9:ae:6b:fd:44:0e:92:90:fe:bb:9c:1b:58:89:22:
         e9:40:26:79:a9:ec:a2:bf:24:36:c6:04:97:f7:d6:36:e2:4e:
         33:81:f9:3d:47:48:8c:e7:3c:6c:e9:23:25:45:da:02:3a:a6:
         48:a7:bb:a0:dd:34:61:c9:88:56:83:f2:53:3d:a3:37:b9:2c:
         0d:fa:8b:30:ea:e8:d3:84:01:e9:b3:23:c3:d5:91:df:79:52:
         27:32:89:0b:d8:c0:64:48:c8:62:84:b0:0b:df:10:6e:64:ff:
         f3:45:6c:29:87:00:c2:5e:dc:fd:1d:42:5e:e9:10:3f:a8:c9:
         2e:80:88:68:b4:9e:d9:5e:f8:6a:cb:98:3a:0d:be:38:a3:0c:
         1e:4c:6d:04:59:b4:99:96:e5:38:79:da:38:18:6a:46:62:b1:
         c3:21:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:19:22 2025 by rpki-client