Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcd0e874-38aa-37ee-8936-d00901daa064.roa
File:                     dcd0e874-38aa-37ee-8936-d00901daa064.roa (raw, json)
Hash identifier:          JwbBswsHVrDPf9Y7iKdK7ofXdLQOewBs0JiwtlSFxlY=
Subject key identifier:   28:DE:FC:66:25:06:1B:B1:58:19:0F:4E:D2:C8:D7:4F:A7:22:12:1D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A8412209F80F19BE1D3682160
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcd0e874-38aa-37ee-8936-d00901daa064.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        34.106.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:20:9f:80:f1:9b:e1:d3:68:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=6acd7493-ea36-43cb-8acf-b05887d7b99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:71:be:cd:c1:36:a7:e0:4a:8c:c2:0c:47:
                    b6:57:d1:5d:08:d0:4a:44:1c:35:9f:ac:9d:c7:03:
                    70:e9:17:99:5f:43:b6:23:96:0e:23:9c:73:a9:c7:
                    42:fa:71:e8:99:3c:be:a2:3d:cc:2d:53:b2:65:53:
                    78:c5:c5:61:85:24:01:17:0d:7f:0f:d8:7e:9b:9a:
                    55:22:e0:15:dd:9c:e1:e1:03:dc:13:32:8b:2c:9b:
                    7a:db:6c:34:95:b0:0b:70:bc:ef:a1:be:ad:4b:38:
                    57:87:d1:39:d5:0c:c3:52:2f:bb:f8:9a:85:d1:95:
                    b8:f7:23:19:80:63:20:21:e7:d7:c4:1d:58:26:25:
                    17:52:9d:d1:ec:00:99:6c:e0:14:b6:cd:53:4a:b7:
                    8c:81:12:a5:9d:62:cb:1d:69:13:4c:70:29:44:06:
                    9e:b7:81:2a:97:73:77:06:93:e6:f3:ac:83:0e:8f:
                    07:16:19:a5:f5:ae:24:ef:ce:8a:12:c3:18:5b:a7:
                    07:34:6f:e3:0a:72:83:db:f9:84:bc:ad:80:ff:26:
                    91:53:02:be:91:30:2c:2b:23:00:13:a7:3d:71:3e:
                    a5:67:b3:89:54:3a:10:ca:63:76:e0:b3:fa:37:b1:
                    c4:21:c3:a2:d1:14:02:a8:c9:0f:8e:c7:86:3f:f3:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:FC:66:25:06:1B:B1:58:19:0F:4E:D2:C8:D7:4F:A7:22:12:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcd0e874-38aa-37ee-8936-d00901daa064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.106.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:cf:ed:6d:64:98:8e:03:c8:0c:ae:9d:62:0c:2a:dc:57:f0:
         4a:f3:8c:7b:00:57:ed:16:cc:e5:ef:cb:1e:a9:45:f5:cb:91:
         8b:9d:fc:29:cd:9f:83:bb:46:14:47:32:4e:41:cb:4d:98:d4:
         0c:b4:33:5e:38:50:5b:4d:5a:f8:c8:a2:be:cc:c6:af:b7:3f:
         10:1a:a0:fc:cc:59:5b:e6:91:54:3c:fc:9c:a9:eb:2e:9b:9c:
         1b:0c:1f:7b:46:07:83:f8:e2:9a:07:2e:40:ce:96:fd:50:4f:
         9d:23:c8:cd:2e:d2:98:19:ae:b2:69:8c:25:b7:62:31:7a:b5:
         a5:0e:27:96:2a:9b:04:56:1d:f1:79:58:34:35:c6:40:ad:b2:
         be:1b:1f:2b:03:ad:80:e8:46:1f:34:d3:66:b8:cd:21:bb:ca:
         79:0c:3a:4b:88:f3:37:f8:32:5c:bb:5a:12:0c:7a:d3:85:d5:
         42:8b:64:8f:ef:97:b7:c4:84:ad:82:ae:ee:92:d4:a4:2b:69:
         60:43:06:d4:1e:89:1f:83:2e:94:a9:35:0b:64:e9:d3:a6:5e:
         a5:ba:c0:49:6e:fc:14:ab:ce:f6:41:57:e8:0b:4d:ea:9f:d8:
         f6:c8:a2:7c:c9:a6:f5:72:d1:3c:82:08:cb:bb:f9:44:85:ea:
         2c:12:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:39:15 2025 by rpki-client