Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/466570b3-3f8e-3206-986f-0cec907e77f0.roa
File:                     466570b3-3f8e-3206-986f-0cec907e77f0.roa (raw, json)
Hash identifier:          +0fdRCNl830zsxy3CngoFGd+4bwTPq7OzjTiZtGJN/U=
Subject key identifier:   2A:D1:39:6B:1D:34:16:EC:EA:9F:1B:00:D8:9B:52:47:7A:66:A8:4A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BCDAE28691330B0490700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/466570b3-3f8e-3206-986f-0cec907e77f0.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.19.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:cd:ae:28:69:13:30:b0:49:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=a8a5bd0c-33c9-437a-a2c4-0a45e101cd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:ea:c4:fc:ca:8f:4a:9c:6e:87:ae:65:9f:
                    1d:7f:4a:fe:c3:08:72:99:73:7c:84:01:2f:4b:61:
                    d6:55:65:28:17:a4:b1:8b:53:ec:d8:a9:1f:61:c6:
                    3f:b1:95:f7:95:41:81:de:47:42:e2:c8:39:03:f4:
                    50:48:40:12:dd:10:04:37:fe:ec:51:b0:da:9a:94:
                    ec:56:4a:42:00:17:6c:3a:7e:53:be:73:ff:5c:40:
                    c8:1f:29:73:7c:86:ef:ab:31:a3:a8:34:3f:7d:6b:
                    1d:bb:3b:dc:ab:85:c6:56:2b:73:95:4f:05:a5:ca:
                    da:33:e5:60:fe:87:7f:c2:72:e3:49:93:84:4c:11:
                    f6:cd:a4:76:85:1e:dd:57:46:c6:79:90:ab:b4:e3:
                    a0:59:fa:b4:d7:4a:6c:1c:bc:e0:bb:5a:64:71:a6:
                    2c:f0:f2:5c:f5:cf:7a:db:ca:3e:d4:bb:2e:82:3a:
                    6e:f6:08:76:69:80:80:81:a8:cf:1f:2b:32:e3:66:
                    76:04:3e:bc:b8:cc:6c:e6:80:67:c0:cf:99:8f:cd:
                    7e:36:21:d0:13:11:e7:9e:f7:6d:77:65:2a:2d:e6:
                    80:0c:d1:63:a0:2d:58:5d:32:89:99:ec:2b:fa:e0:
                    fd:94:31:c4:8b:5b:bc:8d:39:e9:df:4c:97:54:22:
                    34:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D1:39:6B:1D:34:16:EC:EA:9F:1B:00:D8:9B:52:47:7A:66:A8:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/466570b3-3f8e-3206-986f-0cec907e77f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.19.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:90:89:ea:8a:09:cf:55:28:b4:8d:d9:52:1e:96:e2:9e:a3:
         29:0f:f2:b3:06:dd:97:7d:8e:bd:cb:ff:4b:97:c1:e3:70:36:
         88:00:55:7b:f7:7a:c9:be:f0:f2:5a:14:8f:d3:32:f4:ea:43:
         ae:87:e1:be:a6:23:fa:28:c3:7c:2e:7e:00:95:b9:82:39:f8:
         e2:28:1f:71:55:cd:0b:3c:48:6a:a7:e7:dd:2c:91:c0:bf:d3:
         f6:61:fa:6e:db:6f:ce:94:8b:8b:94:2b:00:fc:6f:13:c4:a7:
         e7:fa:1a:e5:bd:28:ab:4e:67:da:ef:6c:43:be:f3:30:dc:9a:
         87:82:20:03:ac:17:a0:82:bb:fe:49:99:34:1d:02:51:1d:69:
         b3:c9:19:83:38:f2:84:d1:ed:c5:02:13:25:7b:d4:4d:b7:ef:
         b7:6f:c7:2c:f7:50:d1:bd:c9:5d:5b:16:f2:b7:29:64:5a:d7:
         43:5e:e2:8b:b9:4a:fa:aa:73:7b:4a:ac:54:df:47:cb:8f:97:
         e1:05:31:ad:df:b1:80:6e:a5:dc:0f:4b:ba:43:2c:c4:31:3f:
         25:3e:48:ab:89:06:60:bb:5b:0f:d8:cd:73:f4:f0:b9:c1:74:
         55:ac:24:9b:82:1d:13:c5:b9:df:1e:8b:32:88:96:49:50:58:
         dc:37:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:24 2025 by rpki-client