Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03a40067-da30-39c3-b4a9-d1d7221649a7.roa
File:                     03a40067-da30-39c3-b4a9-d1d7221649a7.roa (raw, json)
Hash identifier:          IY8Arq4uy79xS8e2nvQzYJ+4AJPLIi9ZSMQLNx67Zd4=
Subject key identifier:   37:6D:E7:01:DB:08:32:5B:05:72:A7:29:12:A4:25:00:BB:B5:75:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB9595F57EC1F239A52580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03a40067-da30-39c3-b4a9-d1d7221649a7.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.176.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:95:95:f5:7e:c1:f2:39:a5:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=531cff40-befc-4195-bdb3-414ce0309565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:eb:73:12:2c:4f:0a:97:2f:bd:6a:e5:ee:
                    41:67:da:12:dc:66:14:b7:b1:98:e3:04:bb:82:6c:
                    05:ce:38:10:a4:97:e9:49:bc:34:8c:f8:28:30:31:
                    65:11:91:65:58:0c:ba:ee:dc:e9:90:77:0d:15:c2:
                    72:c0:69:a8:d6:6f:d9:0c:e4:3f:be:ca:a2:2b:e4:
                    1d:92:a5:bd:ef:fd:cc:51:6d:84:2c:02:12:f6:2a:
                    ce:bd:f4:c7:08:4d:de:c5:bc:b5:e6:e0:09:f2:67:
                    5e:ee:b6:01:8a:e7:ec:87:df:1b:29:3c:c0:53:17:
                    d4:02:5b:4e:5c:bf:f9:97:05:b5:70:56:bc:17:69:
                    09:bd:3b:1d:1d:51:73:a8:cd:44:d6:f3:cf:a8:f1:
                    14:9b:eb:72:c0:25:a3:a2:88:57:64:7f:b6:d3:f8:
                    f1:3c:f6:4d:43:82:4e:3e:da:97:e9:53:f3:a1:8f:
                    6d:58:d9:a8:3b:52:58:08:d1:00:e0:6a:f0:0a:79:
                    37:b2:26:42:46:79:4a:e4:9d:0f:59:85:7b:21:af:
                    73:42:75:40:31:ce:6e:48:a7:8b:24:61:3a:6c:9c:
                    6b:06:da:a2:97:dc:93:2d:ac:01:bb:5a:1d:25:3c:
                    fa:ab:a0:94:e9:40:36:3a:47:3c:a7:c6:4e:8e:11:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:E7:01:DB:08:32:5B:05:72:A7:29:12:A4:25:00:BB:B5:75:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03a40067-da30-39c3-b4a9-d1d7221649a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.176.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8b:8e:7a:39:31:1c:07:ea:fc:c9:03:3e:45:59:e2:93:65:
         da:05:b7:0e:98:c0:6c:7a:4c:40:c5:12:25:b9:a4:cc:e2:5d:
         77:6f:68:10:c6:36:c8:e5:c2:1c:32:f7:95:36:42:dd:a3:89:
         b8:29:f2:0d:61:38:cd:45:18:86:26:f5:2f:72:ce:c6:8e:f3:
         7f:55:a7:de:1e:f1:6b:97:ed:09:6d:c5:a1:51:9d:7d:28:f9:
         b8:e9:f8:f8:14:18:91:31:fd:22:73:e3:d6:43:42:a2:c6:01:
         66:51:d7:50:5e:e7:e0:96:68:a1:3f:bc:a6:fa:37:42:ad:34:
         f5:13:05:91:e1:0a:42:0b:42:48:09:56:81:a5:f5:b9:0b:49:
         61:f9:63:ee:76:6b:83:31:89:71:4e:10:6e:ab:cf:a1:6b:e9:
         b3:2d:36:2a:4f:14:73:4e:10:cd:4b:15:ab:27:83:cf:cf:b0:
         a5:af:dc:d7:b3:d2:e0:f8:1a:1e:d0:14:83:9f:a5:8c:ed:bd:
         c5:36:ad:cd:e6:c1:e8:d0:66:c5:8a:cc:82:e2:cd:d5:95:e0:
         71:5a:84:53:1a:b2:c7:aa:15:24:95:e2:50:5c:3f:5a:1f:10:
         e5:10:27:0d:36:b1:e2:10:2d:bc:91:cd:98:1b:81:3e:bb:6e:
         d4:a5:85:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:22:28 2025 by rpki-client