Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf2f814e-7c70-3768-893e-c14eb5d06059.roa
File:                     cf2f814e-7c70-3768-893e-c14eb5d06059.roa (raw, json)
Hash identifier:          v+Nwn4N9HmRoZc/9tQE/OJow2z+3uyrrrKn7AbQzPCk=
Subject key identifier:   1E:98:76:0C:19:CD:E3:A8:BF:5E:FB:A1:BD:51:7E:D7:C6:55:45:79
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A7BB0B4E563826124810E2380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf2f814e-7c70-3768-893e-c14eb5d06059.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     15169
IP address blocks:        34.2.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b4:e5:63:82:61:24:81:0e:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=9abae8ca-f46e-4eb1-ac93-ef5d7648c825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:fc:35:81:ee:42:25:f0:fb:e6:96:fb:34:
                    0a:61:39:36:ef:d5:16:8f:4c:ea:5e:8a:d2:d2:73:
                    09:87:c9:79:d1:74:00:4c:06:bf:75:ec:f3:fb:1f:
                    7c:2c:94:1e:cc:fe:42:e6:f2:a2:e8:88:bd:0a:29:
                    3a:68:5c:c9:ed:9b:0f:e5:88:3a:31:68:3d:f9:29:
                    8c:58:e8:62:a1:62:99:61:f1:fd:71:ed:62:6f:ef:
                    7d:6e:6b:d8:0c:8a:2d:91:53:95:38:b0:bb:7a:22:
                    f9:da:cf:04:c0:f9:13:bb:04:e0:83:09:0c:4e:00:
                    0a:10:c3:84:8a:13:56:e4:38:52:75:32:71:fd:55:
                    ef:73:42:29:5a:19:fd:89:16:c7:43:73:e7:35:5e:
                    f8:c2:6a:0e:de:e9:32:92:fa:15:47:ba:ff:0a:ab:
                    a3:44:a1:46:a0:0e:29:10:b2:bf:97:ec:b4:cb:24:
                    6c:f6:ff:0e:26:c2:63:98:ad:00:52:ea:ce:a7:5a:
                    1f:af:b6:31:79:44:92:f4:02:67:87:a6:18:d9:a0:
                    53:4c:e5:42:0c:68:f2:65:87:6f:42:75:3c:9c:b4:
                    e5:ef:b7:2b:e7:38:29:80:7f:18:eb:4f:cc:5a:7b:
                    a7:44:ff:78:05:4f:51:6b:39:6e:da:d8:dd:c6:12:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:98:76:0C:19:CD:E3:A8:BF:5E:FB:A1:BD:51:7E:D7:C6:55:45:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf2f814e-7c70-3768-893e-c14eb5d06059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:f7:e7:ca:0f:73:8b:53:20:9d:f5:fa:92:d3:19:3a:29:
         2e:6f:12:08:88:14:cb:c0:87:99:b1:c0:7c:ff:4f:eb:8a:e8:
         a9:74:9e:49:40:76:bd:a2:a6:62:9e:db:36:6e:00:38:6a:8d:
         5d:f6:13:42:3f:9b:5a:3b:6a:bc:36:f2:96:3c:2c:10:f8:73:
         a7:23:8e:07:a0:f0:0c:8b:0e:30:42:6a:20:d4:76:78:f0:fc:
         d0:25:7e:ef:5f:8e:a6:d0:38:0b:4c:18:af:04:3d:84:53:f7:
         86:02:45:7c:3b:61:c1:3b:67:6e:e3:97:77:6c:25:de:8d:17:
         cb:84:03:a9:8f:86:b6:6a:94:74:51:75:1b:d6:3e:2e:44:de:
         92:30:3d:d7:e9:c7:85:dd:cb:3f:93:1f:28:45:09:35:82:f6:
         d2:e6:16:8f:e6:a5:01:59:b8:d4:cb:ec:21:96:5e:f4:8f:d1:
         f2:a6:8e:46:bf:2e:18:1c:bf:d9:6a:91:aa:e0:bb:c2:c2:f2:
         06:28:47:ac:ac:c4:e6:57:7c:ad:24:ec:21:76:6d:8a:6a:aa:
         83:11:aa:d6:5e:7d:82:3b:8f:92:d8:9c:de:0c:19:90:87:76:
         f8:6f:cc:42:80:b1:f8:05:c3:83:67:53:fa:55:d6:52:69:88:
         2a:33:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:34:42 2025 by rpki-client