Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a2eee6d-36c3-39e3-9255-845536c09424.roa
File:                     0a2eee6d-36c3-39e3-9255-845536c09424.roa (raw, json)
Hash identifier:          lqMn/cC42UkWoi6OL1uZ53iZPI6MiSVpRz8ZtFpYqR8=
Subject key identifier:   13:98:6C:60:CB:95:8C:0A:75:5D:55:D9:C5:60:51:CA:B3:BD:01:62
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB7A71D730B9332E7AB640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a2eee6d-36c3-39e3-9255-845536c09424.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.97.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:7a:71:d7:30:b9:33:2e:7a:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=298a4f93-6dec-4c73-90b9-c5744b169ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:c3:7a:ac:01:98:53:8b:4a:03:ea:1a:f4:
                    18:c6:82:03:14:2f:e9:48:92:3f:85:3a:73:a9:c8:
                    48:0e:b9:49:58:ec:7d:59:94:4a:a5:a4:43:65:12:
                    72:82:e9:63:70:6b:06:68:d5:a7:61:fe:c2:03:8e:
                    03:6e:de:fc:ad:b7:57:ef:54:c2:f5:d8:92:23:c1:
                    40:51:09:be:8e:7d:e3:08:81:6c:1c:25:e2:2f:4c:
                    01:24:fb:f7:7c:47:ae:2b:94:ab:74:ec:61:f0:f7:
                    6d:12:f8:cf:49:81:0a:e3:d8:f6:a5:ab:95:81:50:
                    fd:66:a0:3b:14:4e:8f:91:fe:b1:0b:dc:d2:9b:5c:
                    ea:da:53:36:0d:79:63:39:13:69:d9:25:f0:7a:c5:
                    68:ce:8e:81:61:e1:52:aa:06:c2:57:0d:8e:81:9d:
                    86:6e:09:82:6f:89:04:9b:36:d4:49:7c:f9:ff:9a:
                    b3:d5:0d:d1:49:ff:56:a7:0d:f3:1c:1f:07:14:6c:
                    8e:e8:09:9b:fe:ff:26:f5:0b:c3:f4:68:89:8a:9f:
                    e8:c6:4c:de:9a:97:b3:02:ce:d9:db:66:bf:3b:f3:
                    7a:48:80:fc:72:57:d6:8a:38:c4:be:c5:c7:c4:da:
                    1d:be:c9:84:e6:98:68:c5:ae:f2:33:84:d9:55:43:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:98:6C:60:CB:95:8C:0A:75:5D:55:D9:C5:60:51:CA:B3:BD:01:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a2eee6d-36c3-39e3-9255-845536c09424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.97.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:52:91:e0:c9:1e:e8:68:34:a1:10:7a:7c:5d:93:d0:17:c7:
         50:92:76:7d:80:0a:84:1a:8a:50:79:d8:01:9a:9e:11:34:74:
         be:0f:6f:f1:77:f4:37:64:19:c0:53:e0:24:b8:b4:4e:ed:47:
         f8:a2:f3:58:32:6a:0c:96:ef:57:b6:20:ab:ea:95:85:68:2c:
         42:c2:07:a8:72:4b:d7:59:7a:c9:69:14:f2:be:93:2b:98:6b:
         84:95:5b:7b:ac:fa:88:3f:07:41:9e:f8:d0:70:71:eb:03:c7:
         57:ec:62:0f:01:0f:5d:66:fc:42:0b:76:8f:70:81:26:c6:75:
         6e:3f:14:ca:eb:14:97:9c:57:f0:bf:5c:df:a4:3d:c1:87:1c:
         84:b5:ea:20:64:33:ab:8a:92:cd:73:5a:6e:b3:f9:c3:5c:43:
         b7:ea:07:21:a7:bf:fc:5e:82:65:d7:a6:8a:19:76:4c:10:d0:
         93:13:e3:10:f5:3b:05:94:9e:96:ba:1d:f9:2c:55:95:b5:55:
         f1:2c:61:0d:f8:5e:91:4f:c8:14:72:57:34:de:44:b6:7b:88:
         43:09:67:fc:68:e2:68:a8:b2:94:80:ea:7c:e1:db:1d:f1:44:
         36:d3:a0:07:77:d3:b9:e4:2f:cf:6c:42:18:09:50:e0:e4:14:
         e4:42:ba:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:26:33 2025 by rpki-client