Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44b84c45-6b44-3064-97a5-840e10be1c91.roa
File:                     44b84c45-6b44-3064-97a5-840e10be1c91.roa (raw, json)
Hash identifier:          XsUSYkZ22mvmBMdHqDd/VaJDjN+IpGYGChYkId5VSPs=
Subject key identifier:   CE:26:FB:F9:C0:A3:43:A6:1F:FD:E6:35:A5:70:77:92:E2:7F:8C:51
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84123251DDB6010986B51A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44b84c45-6b44-3064-97a5-840e10be1c91.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.104.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:32:51:dd:b6:01:09:86:b5:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2c13166b-e88f-4884-8e85-359e13940f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:c2:5a:5c:a0:0d:f0:62:5a:96:32:d0:b3:
                    64:10:81:45:bc:a9:e6:b2:79:f8:db:01:6d:11:ea:
                    d4:a3:a3:18:b8:82:20:fc:c9:97:ee:fb:39:3d:ce:
                    90:50:14:67:af:89:1c:cc:e8:48:fc:4c:bd:fa:c7:
                    2a:95:4a:04:48:c1:b5:9f:1b:33:40:ed:96:8f:03:
                    15:01:5b:a5:26:f2:b1:42:da:a3:f5:fa:f9:57:de:
                    ec:66:67:6c:11:29:13:93:da:d8:4b:94:9d:0f:de:
                    2f:22:3c:80:af:61:60:da:5a:be:8d:e3:f3:7b:d5:
                    93:7d:3c:6f:c1:43:b8:05:6c:0d:f8:3a:70:6c:46:
                    33:94:eb:cd:99:4a:e9:93:72:cf:a6:c8:cb:55:32:
                    27:34:27:cf:db:43:de:df:6a:36:e1:0d:1c:60:81:
                    d7:31:f3:2c:d5:0f:60:d2:14:34:66:83:48:a8:7b:
                    c2:2f:6a:19:e2:86:87:dc:11:30:de:3d:2a:e6:0a:
                    8a:cf:c3:51:d1:7b:73:fa:fa:cf:d5:7c:ad:67:4b:
                    3c:34:88:e1:c9:28:d2:4f:0f:47:bf:09:4e:7f:8f:
                    cf:5c:40:23:92:1c:3a:68:fd:de:14:f6:c4:4c:b3:
                    fa:29:8d:7e:2a:c7:6f:bf:d3:13:63:e6:54:b1:ea:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:26:FB:F9:C0:A3:43:A6:1F:FD:E6:35:A5:70:77:92:E2:7F:8C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44b84c45-6b44-3064-97a5-840e10be1c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:f1:a1:9b:30:ce:2e:57:0b:0a:f9:e8:74:c3:5f:60:16:
         58:44:87:55:9c:8a:bd:85:59:43:c9:16:be:ef:d5:fc:f3:b9:
         c2:e1:69:94:7b:b5:de:f0:cb:11:a9:23:55:62:58:11:14:f0:
         5b:f7:ea:eb:a2:8c:30:19:ed:19:39:7e:36:ec:91:c3:06:f4:
         b8:16:c2:c9:ea:b7:a8:97:04:b9:fd:41:88:8a:f1:8b:f9:53:
         77:33:ab:b8:cf:46:d7:d7:b3:38:c0:51:e8:58:1f:62:8f:ec:
         cd:04:8a:96:e6:07:54:e9:22:86:2a:7e:fb:1e:54:43:d8:12:
         23:08:f3:05:02:f7:1d:e2:fd:f2:0e:0f:2d:48:63:12:9e:b0:
         38:a9:24:38:45:c1:1b:b7:f9:9a:be:4d:2a:e2:c8:5f:e7:d6:
         c4:8e:c9:cd:26:b9:45:eb:83:28:26:8f:4e:83:74:33:60:98:
         2f:54:24:34:f9:4b:77:23:ec:88:88:1b:90:00:f1:5a:ea:b2:
         06:0b:ba:84:8b:f8:48:8f:86:3d:68:d3:dd:5e:e4:20:7b:29:
         07:0e:0b:55:2e:ca:aa:bc:f3:af:a5:81:9d:8b:9e:1a:e1:04:
         a7:d3:01:96:6c:d6:59:93:29:d9:81:e0:72:71:0b:a0:0d:0c:
         dc:93:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:34:32 2025 by rpki-client