Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa
File:                     bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa (raw, json)
Hash identifier:          HPBghJkV3mVMqQE7x7r7vkJaiXgJj3PX73cA4T+iVY8=
Subject key identifier:   3D:9E:F2:12:00:68:6F:DD:6B:83:C4:03:8F:81:3F:7A:4A:A7:AA:E5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BB96BE02F5F2130611700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.138.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:b9:6b:e0:2f:5f:21:30:61:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=6c37ca04-e07f-4bff-b23d-d61e1825f108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:03:a8:4b:fc:aa:3a:2b:ad:16:83:19:fb:
                    af:70:a7:c7:26:79:2f:40:88:04:18:19:1d:9f:b3:
                    49:e8:32:6f:eb:97:1a:ea:9d:48:9a:24:8f:46:ec:
                    8f:c7:d8:bf:82:7b:33:bc:b8:bf:4e:39:06:ed:c6:
                    f4:b4:cd:81:13:b2:19:48:b2:d2:ce:d8:a3:b6:ca:
                    51:2a:e6:a8:b8:19:3b:72:48:59:c0:c8:06:d5:c8:
                    9a:51:a2:60:1e:c0:2c:a9:9e:72:3a:fa:b8:c2:84:
                    62:d3:f5:e4:e2:c7:92:10:d6:a9:4a:a6:65:0b:88:
                    f0:c2:80:28:31:97:86:28:a1:ed:37:9d:10:e5:fb:
                    2d:64:ef:7a:a1:88:f6:eb:11:5a:a1:00:b3:a4:3e:
                    87:17:39:87:11:99:59:f3:df:4c:d5:5a:b3:17:c1:
                    0c:95:9c:a9:c4:1d:1d:b5:7b:34:ff:35:19:4e:db:
                    c6:34:49:06:05:88:88:78:1e:c2:fa:9e:e5:9b:cb:
                    5c:fa:ee:39:9f:a9:a7:4e:ec:a1:0d:7c:4c:9a:52:
                    5e:7d:27:ce:c4:9e:18:b9:ad:0d:d3:d6:7b:7e:2f:
                    79:49:d3:49:d5:2a:3f:c5:31:bb:04:10:b3:83:d6:
                    a7:85:b3:9f:5a:c4:80:28:0f:66:ce:54:a8:eb:48:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9E:F2:12:00:68:6F:DD:6B:83:C4:03:8F:81:3F:7A:4A:A7:AA:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbcd5ffb-7709-349c-9dcb-69801b2505f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.138.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:42:59:5d:4b:e6:fb:28:c8:85:81:c0:69:71:f1:46:03:c8:
         ec:fa:d8:8d:8c:36:e1:14:20:7e:0e:e5:f5:75:0c:d6:61:2b:
         ce:66:d2:5b:9f:43:28:ac:58:b7:df:76:79:f5:55:fc:d9:02:
         86:5e:94:62:1c:80:ad:85:cb:6a:57:9c:5f:23:1a:d9:cf:7e:
         08:f0:84:6c:04:f8:22:dd:5d:e3:aa:22:8a:70:c7:81:67:5e:
         f1:ca:06:57:82:93:43:8b:de:cd:22:eb:1b:11:b7:37:52:e7:
         95:ef:39:a9:9a:64:66:18:59:46:86:79:3c:cb:f5:7d:51:63:
         7e:b2:98:2c:60:8e:cd:ee:d7:9e:33:b6:0c:bf:22:b8:19:27:
         35:0f:5a:96:b1:86:72:8a:9b:7b:d5:f9:24:1d:27:74:50:5e:
         28:bc:91:6b:2b:4b:72:d8:d7:48:ca:fc:ba:84:56:70:95:d2:
         6e:a5:62:0c:0b:33:60:de:62:78:e4:3d:1b:9c:b2:12:25:b5:
         f9:1b:98:bd:e7:c0:4f:7b:e2:ef:5f:d4:2d:2b:51:2a:84:22:
         d4:56:57:84:a6:6d:8d:2f:91:fd:92:15:d6:45:9c:4e:a3:55:
         f0:4f:7f:85:46:f5:dd:08:31:3a:5f:10:f6:5f:b2:05:3e:5b:
         51:2b:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:18 2025 by rpki-client