Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8b4f22c-1869-335b-a20b-a79a95928b5b.roa
File:                     d8b4f22c-1869-335b-a20b-a79a95928b5b.roa (raw, json)
Hash identifier:          ZC25BQpk32G5FWpL+s5u9XTXfqE4LT/1ROtJ6tOWTa8=
Subject key identifier:   E2:93:01:45:BF:CD:2E:07:CF:5A:0E:D4:AD:AC:80:44:7B:1B:5A:E5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A86DBA7BB40A0A8F4E66EDF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8b4f22c-1869-335b-a20b-a79a95928b5b.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        34.176.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:a7:bb:40:a0:a8:f4:e6:6e:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=82eec544-c5a8-493b-8455-c7d0346ea27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:ea:31:78:f6:18:0d:8e:a7:7f:6a:aa:a9:
                    22:04:86:9f:f6:9c:1e:d0:8c:2a:94:0a:09:8b:eb:
                    1a:49:a5:5c:35:71:e1:82:13:5a:80:2a:df:23:62:
                    b0:88:9f:c9:14:aa:04:f5:1b:24:b2:58:1b:e8:77:
                    09:2a:7a:44:22:1e:33:ec:16:45:fd:46:b6:0b:e4:
                    f3:e2:66:ac:2b:ce:b8:00:77:a3:17:18:92:91:23:
                    41:38:ed:8d:92:79:8d:b7:d2:56:94:7c:e6:08:97:
                    12:32:c4:7e:df:e9:33:d4:3a:bf:22:d7:5b:b1:15:
                    f3:26:6b:8c:f0:ee:cd:bc:f4:6c:2f:92:1c:ba:21:
                    0d:30:43:7a:27:6a:8b:b0:4d:16:85:f6:0a:9a:01:
                    c3:62:5f:6e:7b:7d:c0:7a:5d:b5:8e:cf:df:c7:f1:
                    ec:d5:d9:96:6e:76:98:fe:6e:2d:c0:ee:2b:dc:04:
                    9c:16:a8:0f:3c:4b:6d:17:77:58:59:91:f6:9c:e8:
                    7a:84:ca:a3:8c:0d:4d:99:70:20:cb:f1:7f:d4:1e:
                    a7:6b:82:0b:a5:04:bc:46:69:08:53:fc:f2:66:c2:
                    c7:83:0f:8d:91:e5:2e:11:dd:8d:96:07:bf:f9:3a:
                    72:73:ad:5b:77:84:99:7b:af:41:9e:1a:bc:35:28:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:93:01:45:BF:CD:2E:07:CF:5A:0E:D4:AD:AC:80:44:7B:1B:5A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8b4f22c-1869-335b-a20b-a79a95928b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.176.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:35:af:c4:60:78:e7:62:fe:13:ae:c7:a4:22:da:22:ed:54:
         a6:d4:5b:c1:79:28:5d:7d:09:5b:1e:2d:5b:32:d4:f3:1b:f3:
         e2:5c:9c:20:d0:77:e0:b9:58:01:99:3b:17:d3:bb:3d:51:36:
         6a:ee:53:ba:f8:06:f6:f8:3c:02:6d:02:ac:bc:b2:51:1c:80:
         7d:3f:3b:39:fe:ec:8b:24:a3:43:10:06:4a:6c:e9:72:6b:53:
         cd:82:66:5a:59:77:b5:31:62:32:f2:c4:be:5b:ac:53:b7:e3:
         86:2d:0d:c5:cb:3e:cf:91:da:56:1f:81:24:d2:f0:92:06:c5:
         93:64:95:03:17:40:12:c0:19:9f:fb:be:d7:3d:c1:31:e8:60:
         5c:e3:a7:1c:8e:e4:f3:e2:7c:e0:2e:4b:34:fe:67:74:fc:71:
         32:37:11:8a:6b:d7:27:4a:fc:89:53:c3:7a:73:55:71:24:66:
         db:5e:a8:50:e3:33:8f:25:0d:ee:03:96:2b:e6:ba:20:1e:61:
         79:44:e7:49:3f:d6:a5:d9:cd:7c:5b:fe:6f:c7:ec:3e:76:05:
         bb:1b:68:aa:28:a4:93:42:e7:4c:69:38:27:e3:58:bb:18:66:
         8c:6a:de:52:1c:9d:1e:86:ad:cb:40:70:2d:0c:f8:b6:a0:62:
         a2:41:b1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:32:59 2025 by rpki-client