Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1522061-8d23-3859-baba-984b14408aaf.roa
File:                     b1522061-8d23-3859-baba-984b14408aaf.roa (raw, json)
Hash identifier:          CvreMc2fbhH9xB8qqLLCFdNGqu060HxCnsawW+HtT2M=
Subject key identifier:   4C:36:F2:88:35:90:1E:EA:03:ED:0F:52:EF:72:74:57:B6:30:6C:35
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C082C090E52006AAA55C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1522061-8d23-3859-baba-984b14408aaf.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.130.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:08:2c:09:0e:52:00:6a:aa:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=44718cec-f9fd-48dd-a2d6-f015a109391b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:81:29:2d:ca:70:1f:dd:33:a0:db:6f:d7:
                    dc:8f:a5:97:42:73:9b:5e:5a:48:e9:df:25:e4:5f:
                    1f:18:5e:46:58:97:09:ab:87:0e:d5:c5:c6:c9:00:
                    a9:bf:19:48:52:6e:8e:0e:e3:30:62:6e:9a:e1:31:
                    fb:0d:2f:b0:a3:24:62:e7:a4:de:21:59:6b:aa:79:
                    ea:65:59:f8:25:75:e8:4b:e2:d5:82:dc:b6:f2:61:
                    0c:16:a5:75:22:d8:af:4b:81:37:7e:20:fc:a6:7a:
                    93:fe:b7:f3:2c:b8:5b:51:a1:22:1f:45:b0:90:e8:
                    23:53:a1:fb:c0:1c:c1:94:99:ef:0c:d2:e0:05:a0:
                    d8:18:af:53:82:c2:6b:3b:3f:d3:d6:9c:42:40:19:
                    4d:b2:22:ab:cb:5c:2d:c3:fe:6b:c9:a8:b8:e6:47:
                    e4:ec:35:66:47:71:3c:4e:0d:bc:fa:4a:48:51:ce:
                    06:4d:8c:34:31:97:18:94:75:15:f1:77:e5:3c:9c:
                    a2:c6:f8:ff:f4:70:6e:f8:d2:fa:b8:2d:f4:6e:fe:
                    e1:ef:16:20:f0:52:8c:a8:38:75:01:fa:a2:93:10:
                    c4:ab:24:11:e0:0f:ff:b4:b5:94:ef:b1:d5:48:16:
                    c7:3b:85:a0:da:e1:cd:bc:6b:9b:e5:50:05:58:8b:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:36:F2:88:35:90:1E:EA:03:ED:0F:52:EF:72:74:57:B6:30:6C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1522061-8d23-3859-baba-984b14408aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.130.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:be:93:5e:7a:80:1b:78:de:fc:22:10:d4:18:1b:9f:f4:dd:
         3e:f2:2a:f2:fd:eb:58:32:11:26:a7:ce:7a:d5:15:9a:65:3b:
         0a:0f:b8:31:c2:9b:ef:39:ed:49:76:22:02:ef:32:99:a4:94:
         21:74:e7:b1:e7:d7:13:e5:c4:27:63:72:a7:52:b7:01:03:a8:
         76:8c:3f:8a:d5:16:b0:f5:cd:d6:f0:bd:4a:10:3f:28:92:2a:
         dc:83:43:b0:54:01:b7:1d:da:d4:f9:dc:4f:e2:9b:a0:9c:34:
         0c:89:aa:88:a3:52:45:1b:1d:90:ff:33:5e:bb:9e:cb:ca:63:
         fa:72:b6:a7:df:1d:63:9f:37:5b:78:bb:6b:a6:11:81:bf:52:
         b3:70:5e:b6:ae:2f:0f:e4:74:4a:bb:75:1a:14:eb:05:0f:4d:
         c4:0e:e7:3f:16:5b:21:46:6c:8d:0e:4a:4e:f5:a8:5f:cf:4b:
         ab:06:a1:1b:cb:1f:1b:32:fa:93:2a:51:41:9f:f1:8f:24:a9:
         c7:91:26:b3:9c:a8:97:6c:e6:1f:3c:49:c6:e6:ec:d3:f6:48:
         40:a6:ee:7d:bd:91:82:0d:81:44:15:fa:25:db:b0:f6:f3:3e:
         64:81:9f:bd:ef:8b:d5:87:aa:56:f1:27:77:ac:ee:cd:22:a9:
         0d:a8:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:49:50 2025 by rpki-client