Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/940b9916-f496-354d-b9c5-648cac05bb30.roa
File:                     940b9916-f496-354d-b9c5-648cac05bb30.roa (raw, json)
Hash identifier:          U7RWuakCWIuSn4fH3cjmd9J6SQnR3I2AeuDKTEo8y0s=
Subject key identifier:   03:4C:87:35:7F:74:E1:84:DA:3B:73:A0:5E:6C:44:3F:44:5E:45:A4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BCDB986A35F1683B42200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/940b9916-f496-354d-b9c5-648cac05bb30.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.90.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:cd:b9:86:a3:5f:16:83:b4:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=aa3d95b8-4879-416d-9983-cce1c39b7350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:da:a2:3e:5e:d4:86:37:ff:81:e6:c4:b0:
                    52:8e:a2:09:62:9a:12:d0:68:5b:2f:80:65:a2:93:
                    fa:96:df:1a:d8:c8:10:86:17:a8:33:08:37:69:dd:
                    8d:7c:71:3d:de:22:a9:68:31:47:e3:1d:96:63:57:
                    60:68:9a:36:f6:5b:00:dc:89:29:a9:89:26:aa:43:
                    f7:21:d9:63:c2:f8:90:30:b6:c2:c2:a8:66:e4:06:
                    0c:e7:79:f0:e6:b9:95:d5:d9:c8:11:13:42:9a:e0:
                    17:80:40:3d:83:70:ea:96:8f:d2:6f:61:7c:17:37:
                    5f:60:3c:b9:0d:08:14:19:89:cd:b4:17:3d:52:c4:
                    1d:a4:11:72:68:7d:c9:57:24:f6:2d:8a:f6:a6:19:
                    6b:be:83:e2:0e:cb:20:be:ae:10:d6:45:3d:51:9f:
                    50:96:83:dd:26:60:37:77:8d:e1:9b:12:2f:01:bc:
                    c7:e0:81:e1:06:00:f9:98:ff:43:f8:91:1d:7d:0d:
                    c6:46:cf:2a:01:b7:c7:00:fd:70:aa:4e:0a:8b:b1:
                    18:2f:61:54:47:67:b6:df:a3:3b:c3:0d:39:85:9d:
                    5e:db:f0:0b:ab:b6:f0:01:8a:57:de:49:ce:9e:fa:
                    27:58:88:7c:b1:cf:77:ce:0d:4d:db:30:cc:8a:0d:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4C:87:35:7F:74:E1:84:DA:3B:73:A0:5E:6C:44:3F:44:5E:45:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/940b9916-f496-354d-b9c5-648cac05bb30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.90.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:82:0b:0a:fe:42:21:f2:3c:81:3a:17:2a:82:81:73:67:3d:
         e4:99:8e:b3:93:72:f2:34:3c:ce:64:18:26:bd:28:c2:f9:3a:
         fb:16:00:7e:a0:cd:03:c0:88:28:6b:d6:18:88:e1:7d:fa:66:
         a4:09:8f:fa:76:e2:af:c8:fa:98:59:75:f7:71:7f:69:d8:b5:
         88:7b:e5:05:56:3b:a8:fd:57:d9:8d:3d:76:15:07:8a:d4:57:
         31:bc:7f:a8:e6:52:07:7e:16:6b:aa:42:04:1e:4d:0b:8e:24:
         ab:8b:ef:5f:e7:e1:c0:e5:20:bb:46:ea:b9:e8:00:d4:b4:6a:
         60:34:f9:bf:88:38:9f:a8:6d:e9:0f:7f:d7:a1:ff:6b:30:83:
         59:49:6d:f6:22:8c:85:b7:52:eb:b8:3f:e5:b1:e7:08:88:a6:
         f6:5b:16:54:49:ff:78:45:1b:32:f4:d6:2e:86:59:61:3e:1c:
         fb:ff:d2:eb:4c:7e:62:04:89:b7:09:70:59:9e:89:2f:b8:56:
         9c:40:72:e4:16:11:8e:ff:e5:fc:5b:67:51:c8:05:81:c9:bc:
         2f:c3:ab:70:cc:27:ed:64:9e:f0:a1:97:bb:94:5a:2f:ac:26:
         2e:18:90:9e:67:2e:72:84:f9:18:d7:59:e3:ff:a8:ac:4c:f1:
         65:33:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:09 2025 by rpki-client