Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/745829b0-e3a2-35d1-a495-7525b0a51e23.roa
File:                     745829b0-e3a2-35d1-a495-7525b0a51e23.roa (raw, json)
Hash identifier:          aVY8dvGV/EHVrX7Ws+7l7ok2Ws1Ox6Lry67DhBBc07I=
Subject key identifier:   EA:2D:2E:9C:91:6F:B4:7E:C7:31:C6:42:D8:1E:1C:98:D8:AD:EB:04
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C15D635B349CEDD363B20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/745829b0-e3a2-35d1-a495-7525b0a51e23.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.94.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:15:d6:35:b3:49:ce:dd:36:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=1577dbce-4365-4114-b254-a8193661575e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:59:05:58:d5:ea:80:05:0d:60:5b:48:c5:7f:
                    4b:6c:66:7f:f2:bb:ff:a7:85:5e:ab:14:83:0f:84:
                    8e:88:0c:2f:7b:82:d4:99:62:57:fb:5d:a2:8f:a1:
                    34:e3:ec:f9:52:bb:c3:0e:0a:d9:68:de:ad:f8:18:
                    06:ed:20:3d:93:69:4f:34:c7:4f:4d:29:e4:b8:3c:
                    6f:ca:db:17:cc:da:04:7b:da:33:2b:6e:c2:b0:ae:
                    0f:dc:3e:5b:b1:63:1c:77:11:c1:91:7f:18:fc:aa:
                    1e:38:af:d7:d7:db:e4:ac:12:1a:c4:6a:7c:be:c0:
                    df:dd:13:1f:63:40:5d:b9:e1:f2:93:88:bc:6c:e6:
                    80:79:eb:e1:5a:bf:c6:b1:8f:41:44:a7:e5:74:58:
                    33:20:f0:18:7a:2c:89:89:fb:77:e9:86:ad:13:aa:
                    d1:10:9b:2f:bd:48:7f:21:98:ac:b3:90:d9:81:80:
                    4f:64:e7:c2:9e:f4:41:f4:db:57:19:02:16:a9:a4:
                    df:c5:31:ed:44:3c:f9:60:84:7d:9c:14:7e:98:64:
                    5c:df:c3:5e:31:20:35:c1:d1:a3:40:d9:89:6e:03:
                    89:ee:52:fd:b1:f8:4f:9c:f3:86:8c:ee:3b:e9:c2:
                    9f:e5:db:23:e1:bc:34:44:20:bb:43:54:65:4b:d0:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2D:2E:9C:91:6F:B4:7E:C7:31:C6:42:D8:1E:1C:98:D8:AD:EB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/745829b0-e3a2-35d1-a495-7525b0a51e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.94.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ec:d9:1f:69:b6:1d:8e:02:91:99:1f:ea:7d:94:08:49:45:
         c0:c7:45:7d:ee:da:ae:e7:64:0f:87:cf:dd:9b:f1:02:43:e7:
         0e:3c:a1:68:d4:66:b3:bf:e3:0c:bc:c3:92:dd:f5:23:e8:8a:
         12:42:f9:2d:64:f0:97:4f:2e:4d:66:2e:1a:ae:95:62:09:44:
         5c:89:db:63:8e:8d:7e:c5:16:f2:7c:36:8b:85:c9:93:2e:11:
         41:f7:e3:0c:1c:39:01:28:d8:68:4c:e5:cd:b1:75:7b:ad:0d:
         1e:a3:c1:22:07:a0:8d:f6:f1:b4:5f:ff:2b:fc:52:e9:3c:2f:
         cc:04:08:1c:a4:b1:88:7b:c5:da:5e:bd:4f:31:95:8c:f9:1d:
         2d:cb:68:ca:0e:87:3b:40:06:ea:fe:86:b5:a7:62:25:97:98:
         79:41:f1:89:9b:a3:34:de:25:55:01:95:16:3a:e7:b2:61:f3:
         24:69:d2:78:bd:0a:6a:26:f8:dd:a1:74:ae:92:dc:a7:69:be:
         cf:25:9c:04:96:23:d2:10:df:8d:66:82:07:96:f9:a8:4e:8d:
         c1:05:07:f1:3e:ff:0c:57:db:c8:b3:b1:77:eb:e2:c7:f5:7b:
         d6:b2:da:05:f8:20:3b:e9:1d:15:3d:99:46:6b:1d:f3:f6:05:
         e4:7f:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:45 2025 by rpki-client