Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b9d92b5-b77c-3c54-9218-a95c2c35a740.roa
File:                     5b9d92b5-b77c-3c54-9218-a95c2c35a740.roa (raw, json)
Hash identifier:          +JlBLyMWpEmLZxmsjEH7VVgei0dstNbDnkfMOceDqFs=
Subject key identifier:   07:95:49:19:DE:E3:FE:A3:69:FC:59:ED:4A:53:F8:6C:F2:AA:D1:5D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C5822B592E6DFBF955C5CA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b9d92b5-b77c-3c54-9218-a95c2c35a740.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        34.103.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:2b:59:2e:6d:fb:f9:55:c5:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=205c5189-857a-4cd7-b6cb-e66b54c299ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:20:3d:52:a1:07:f7:ef:f2:8e:54:91:02:d2:
                    fc:95:6c:00:25:e3:04:7f:a3:22:c2:6b:84:74:ea:
                    2f:2e:01:67:21:0b:2b:68:24:34:81:e8:0e:37:6c:
                    c1:e4:71:ab:0e:00:fc:4c:09:d4:ee:25:ec:8e:b0:
                    66:5a:22:89:9e:f2:b8:a4:e6:0f:79:cb:13:7d:7c:
                    c5:e5:49:f7:d0:1e:bb:f7:5b:f6:0e:8a:88:9c:88:
                    a8:b1:95:0e:bb:cc:03:1a:6f:ff:5f:4d:69:86:81:
                    7d:c1:46:2a:2b:8c:54:ca:db:d5:b0:a6:9d:9a:84:
                    f4:63:ee:dc:4f:48:a2:24:64:9a:96:ad:a5:a8:2e:
                    0a:61:c8:0e:3a:cd:57:99:18:1a:7e:08:24:69:5c:
                    89:29:bd:e5:69:3e:eb:1b:62:8b:9f:ff:2e:17:78:
                    b4:6b:a8:9a:f4:80:9b:2a:8b:dc:e4:8a:11:13:20:
                    10:ab:e6:3f:aa:d4:2c:92:b0:0a:ea:74:48:d6:a0:
                    60:b9:d6:25:cf:3f:79:5d:7b:94:45:5a:fe:7b:72:
                    cd:ad:4e:fb:38:cb:aa:90:f7:f9:bc:ed:0c:0a:95:
                    60:8a:67:c9:a8:9a:88:e5:ce:10:95:b0:9e:c8:41:
                    ae:2c:7a:d9:36:6c:ee:f0:64:0b:a1:8d:0c:19:f1:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:95:49:19:DE:E3:FE:A3:69:FC:59:ED:4A:53:F8:6C:F2:AA:D1:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b9d92b5-b77c-3c54-9218-a95c2c35a740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.103.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c8:f4:e1:95:76:7e:dd:b5:26:70:44:c7:02:75:c2:82:33:
         83:fa:1d:89:7e:e4:04:50:0d:82:69:b4:87:c2:8c:65:e4:b3:
         23:0d:ec:9a:d8:82:70:db:7b:81:c9:ac:d0:29:88:65:46:48:
         da:1e:2b:78:ba:32:26:f9:bf:cc:76:55:d0:21:d4:e6:db:22:
         48:09:10:54:a8:29:2e:c7:23:7b:be:c0:e5:b3:83:ef:d9:28:
         2f:b0:e0:08:4e:bb:e8:72:cb:d7:f6:db:89:16:43:43:9c:c3:
         fe:6f:bd:00:34:c0:67:31:e3:a2:04:40:08:75:de:8e:1d:d0:
         0a:7c:fa:c1:10:82:f5:ef:38:61:62:56:27:0b:ea:c3:57:85:
         f2:f5:c9:4a:76:f9:58:64:0e:02:93:55:ef:af:4c:3b:4d:60:
         85:42:df:37:d9:1d:d9:42:92:9b:24:36:4b:d6:2b:89:4b:f2:
         31:84:01:69:56:17:70:22:64:a5:ed:8f:22:a5:80:ca:68:ca:
         33:8f:ce:5c:7a:89:1d:bf:33:6f:3e:aa:4a:23:ac:2e:0c:b4:
         c6:af:35:71:a6:31:74:15:57:36:37:a5:48:a8:4e:22:d1:67:
         d0:de:2d:eb:a7:94:f5:c9:3b:e0:28:ea:49:22:e2:68:6a:ab:
         c6:dd:d9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:35 2025 by rpki-client