Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c6a3bc0b-077e-33a4-ace5-440978be915a.roa
File:                     c6a3bc0b-077e-33a4-ace5-440978be915a.roa (raw, json)
Hash identifier:          zBxWHBjwXCb35rvppQ78DRzN9KBXUIYn+yZPenPU+fI=
Subject key identifier:   81:A9:6C:F0:7C:7E:FB:D9:DD:88:E1:4E:CD:D3:63:9D:A9:28:A5:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BA86195F60D334586C900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c6a3bc0b-077e-33a4-ace5-440978be915a.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.83.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:a8:61:95:f6:0d:33:45:86:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=dd12f12d-edd9-4662-8094-1ecd35c57879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:20:3c:ce:51:cb:29:02:c4:cd:0a:41:99:
                    fc:66:5d:71:fa:13:f1:26:f1:72:bb:73:48:09:b0:
                    fa:70:8b:16:a2:4a:36:0d:af:52:15:11:b1:8b:fa:
                    53:09:2f:3a:20:01:31:dd:83:f7:67:52:23:2a:60:
                    fd:e7:6c:24:b6:17:f2:5c:34:a3:ea:07:70:ee:1c:
                    86:b4:f1:d1:dc:53:88:11:30:fe:c6:81:6d:d2:13:
                    f3:bf:53:95:46:b8:e1:c4:41:ec:be:29:a4:f5:fe:
                    0c:c7:58:0d:f9:00:b8:29:e6:ac:5f:ca:e6:83:58:
                    52:9e:46:9f:b3:e2:a2:58:de:f1:5b:81:fa:e5:a4:
                    14:6b:85:69:e5:a4:f5:4c:37:81:65:3d:e1:0e:12:
                    d4:f9:ed:e3:d5:3b:d5:35:ef:17:b4:80:e2:ee:5c:
                    a0:6f:dd:f2:52:4b:7d:66:32:b0:93:8d:ba:d3:de:
                    65:4b:dd:3c:a0:47:92:9b:b3:56:3e:92:ed:cb:cc:
                    2d:03:0e:10:3b:02:cc:a0:20:82:c7:3b:8a:f0:cc:
                    4d:b6:ea:cb:04:cc:7e:55:38:4d:6c:2f:da:e1:eb:
                    0a:ab:0c:a6:54:f9:ad:18:39:a7:11:63:cf:6d:d0:
                    44:72:24:81:bc:15:e4:4a:71:dd:67:25:a4:14:fa:
                    14:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:6C:F0:7C:7E:FB:D9:DD:88:E1:4E:CD:D3:63:9D:A9:28:A5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c6a3bc0b-077e-33a4-ace5-440978be915a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.83.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:dd:ab:65:4a:8d:4f:3b:ba:49:58:96:da:ba:40:b9:fc:
         bc:c9:ad:66:51:5a:98:fd:9a:4f:8e:70:e3:2f:03:39:dd:9f:
         67:72:34:5d:08:20:03:8a:16:e5:26:e2:a5:59:00:85:7a:77:
         63:af:d0:32:1b:db:18:3c:f9:6e:30:b5:4c:22:ca:5c:84:b3:
         2c:0f:dc:8d:c8:3e:30:79:72:c6:ec:59:57:f8:ec:3b:8b:57:
         76:0e:9a:74:50:5f:dd:ab:ac:ef:0e:58:b2:34:2a:8f:d9:2a:
         bf:de:cf:89:6e:db:1d:1a:8d:9a:56:5e:bc:dc:93:04:4a:e6:
         8e:f9:fb:d7:34:ae:0c:3c:fd:6e:df:e8:ba:65:ed:de:24:e4:
         05:fa:8a:af:4b:2f:d1:2e:3a:99:31:c6:30:b9:d1:3c:4f:71:
         c5:1c:59:c5:3d:2f:38:91:a4:20:a8:0b:c2:a8:b4:9f:3e:35:
         66:16:d0:d7:fc:fa:d9:24:14:89:68:e6:f5:5a:7e:c0:40:f1:
         a6:9a:f4:19:23:a0:cd:69:3f:c1:81:8f:ae:3f:e0:d3:36:fa:
         80:17:9c:15:e2:f8:c6:14:b2:49:e6:09:4b:97:50:16:5e:25:
         ff:67:3b:eb:a2:3e:93:2c:49:32:25:d2:5f:eb:ac:5b:b9:ae:
         9c:7e:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:46 2025 by rpki-client