Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc606cf4-45b8-3332-bcce-3ba4a1529d23.roa
File:                     cc606cf4-45b8-3332-bcce-3ba4a1529d23.roa (raw, json)
Hash identifier:          lR9KqRAN3gFw7PAI33cbzoSQqK1L0AU3zpod7qg+VoY=
Subject key identifier:   02:7A:A6:A0:5C:62:45:05:1B:75:5C:16:C9:29:8A:A6:08:64:B8:55
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DB99F67739C138AE1D20F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc606cf4-45b8-3332-bcce-3ba4a1529d23.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.151.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:99:f6:77:39:c1:38:ae:1d:20:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=6e5aa570-a0ae-4e38-9241-b9444cc6d580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6c:e7:32:37:f4:58:24:dc:9e:e0:bd:37:1f:
                    6c:e7:0e:be:d2:81:9f:1d:28:f2:7f:10:29:33:7d:
                    02:bc:91:35:18:98:fe:72:9e:3d:14:d2:aa:a6:ea:
                    58:3d:6e:9d:c1:32:55:77:be:57:ae:27:1d:b3:e0:
                    fa:2a:21:09:05:a8:c0:e2:8e:8e:a4:05:c5:60:62:
                    10:61:a0:86:42:80:ec:40:37:17:44:cb:79:97:1d:
                    e6:6b:35:0b:1f:c6:06:cf:58:da:26:94:1b:ad:6e:
                    98:26:bf:51:3f:6b:2c:98:93:91:cb:f4:25:a2:ed:
                    dc:93:b6:0b:4e:55:ae:45:52:cf:68:f4:24:75:a3:
                    78:87:2a:03:a3:ae:23:b0:8e:f3:d4:f1:a2:5c:52:
                    37:2b:7a:9d:e5:df:cd:4e:34:c8:e6:1c:9c:4f:1e:
                    18:de:14:d5:e9:cb:20:2e:c9:d2:4c:e5:e9:76:f3:
                    3d:dc:01:99:06:ab:bd:63:40:b5:ed:02:85:59:a3:
                    6b:e7:fe:50:17:10:82:d9:77:7b:88:9a:3c:87:77:
                    2e:fb:03:78:89:3d:e3:c4:41:93:20:3e:fb:6e:17:
                    c5:bf:66:21:36:1b:bb:3f:a3:07:16:1e:d3:e5:5b:
                    b2:d5:c7:4d:74:e6:c0:e2:27:e2:50:34:ee:9f:5a:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:A6:A0:5C:62:45:05:1B:75:5C:16:C9:29:8A:A6:08:64:B8:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc606cf4-45b8-3332-bcce-3ba4a1529d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.151.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:3d:2f:89:3a:36:cb:d7:59:77:c8:d8:87:3a:94:d6:55:
         be:c9:02:60:ea:2f:82:5e:e5:68:de:7e:c4:3f:bd:62:1d:c7:
         45:04:70:8f:86:f4:68:7f:93:c7:94:a6:9f:9f:d6:46:a7:c5:
         3a:22:04:42:50:f2:46:7e:13:dc:75:6d:88:99:7b:d3:b3:a0:
         13:1c:66:5f:a1:6b:9b:f8:98:af:cc:b7:bd:45:49:34:d6:da:
         49:0e:64:b9:ab:ac:ae:5b:ca:5a:6b:66:c0:4b:b5:2f:d5:32:
         60:34:d8:00:f3:69:04:81:10:92:de:57:ba:3a:f2:45:dd:3b:
         42:f1:a8:1e:93:15:80:2d:08:ea:2f:d6:ff:e7:a9:19:9b:5a:
         ae:c7:bf:95:12:14:30:cb:c6:ea:e5:a1:6f:12:03:d8:d5:b6:
         d2:9b:80:bf:33:1f:d7:85:66:6d:b8:c4:10:8f:e2:a7:10:20:
         ee:ab:1c:58:1f:04:2c:af:7d:f6:33:ca:3d:33:a4:4d:1c:d3:
         d1:05:96:74:05:67:ff:04:0e:a1:49:65:ef:f3:8a:c2:7f:19:
         1a:9c:b3:e6:04:5d:b6:79:45:e1:9c:4e:19:4b:fb:84:d2:f3:
         ef:90:cf:5d:e9:b9:ab:1d:25:75:b1:ef:3e:79:d9:73:31:57:
         6c:38:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:19:09 2025 by rpki-client