Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/34b149c6-3bbd-325b-9afd-df69a05277bb.roa
File:                     34b149c6-3bbd-325b-9afd-df69a05277bb.roa (raw, json)
Hash identifier:          gNgJEepAKoNLeaCFMcQm2LGcgAR5ZJpXqYUt8GGSvQU=
Subject key identifier:   B3:41:06:56:32:99:4E:D0:AA:00:04:D6:7B:98:4E:EF:DD:C2:E4:E0
Certificate issuer:       /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Certificate serial:       010D0C9F43285848BE8629E0BC1C0E284B52F180
Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/34b149c6-3bbd-325b-9afd-df69a05277bb.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     22379
IP address blocks:        134.65.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:29:e0:bc:1c:0e:28:4b:52:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=d4d2ff67-ee53-4fd6-a5a7-194ead8fac04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:e4:67:9b:e4:61:c1:36:cc:a0:bc:40:06:
                    5a:15:2e:eb:7f:2e:ff:a1:29:d7:34:b8:a2:fe:44:
                    84:f7:b1:d7:9f:6d:b6:db:f7:7b:d3:34:62:4f:41:
                    d6:c2:0d:de:d0:37:23:c8:77:0d:0d:ed:63:7c:f8:
                    a3:bd:6c:67:7c:df:8f:67:47:8c:a1:3c:fa:9a:bc:
                    1b:e5:12:b5:9c:6d:bd:bd:8c:55:20:8a:6c:66:53:
                    50:13:c3:41:31:3f:b3:71:86:cb:f3:52:49:b0:41:
                    df:2e:46:e2:28:ea:9d:7a:8a:e6:e6:8c:cb:b8:6c:
                    31:aa:73:cc:0a:db:77:95:e3:91:ed:0a:34:24:b9:
                    d3:0c:42:9a:07:be:fa:4e:99:54:4a:1c:7f:3d:53:
                    84:86:cd:7e:78:50:16:8d:70:e4:f0:5a:85:bd:4d:
                    67:1c:d8:a0:3e:79:0d:5c:d8:20:f2:03:2b:53:b8:
                    69:a6:96:25:ae:73:24:68:4d:00:2e:29:ad:ea:36:
                    c4:86:93:66:40:d5:19:b0:6c:85:02:3f:e5:5a:3c:
                    1c:d0:9b:ae:02:db:c4:bb:69:52:e6:74:57:93:02:
                    cc:01:8d:96:42:91:21:22:b2:9b:59:36:5e:16:2d:
                    13:2e:85:27:27:c9:8c:89:94:42:df:10:55:ad:a6:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:06:56:32:99:4E:D0:AA:00:04:D6:7B:98:4E:EF:DD:C2:E4:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/34b149c6-3bbd-325b-9afd-df69a05277bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl

            X509v3 Authority Key Identifier:
                keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:07:59:d1:af:0a:fc:0d:86:a3:7e:34:78:47:e0:bb:b3:f9:
         f1:96:ea:d5:f0:62:5a:27:84:c9:bb:e0:3e:c0:c3:e8:d8:8e:
         2e:55:6d:e6:71:88:09:1d:aa:c4:f2:dd:1a:26:de:07:6a:5e:
         d0:6b:24:e2:24:f6:ee:77:3a:e8:3a:2b:a1:b5:62:26:36:71:
         6b:7d:bc:9f:d8:98:49:f5:bf:9c:78:d9:3a:33:cc:e8:bd:a5:
         d0:05:88:0f:eb:e1:73:e9:32:da:ef:45:73:da:ff:ac:68:c5:
         66:18:22:66:b4:0f:40:1a:1d:1f:0c:bf:94:ac:c7:73:c0:68:
         8f:3a:26:63:04:79:c4:54:30:5f:2c:b7:59:91:a4:75:4b:2d:
         a5:74:15:72:f7:56:49:3e:27:28:ad:24:ee:d9:a9:94:eb:dc:
         53:24:6c:a1:3d:6a:85:d1:93:7e:08:76:73:5d:84:ae:58:a2:
         71:09:85:aa:5d:d5:c6:c4:49:bf:e0:ca:44:3f:94:90:33:87:
         f5:e7:18:4c:b2:32:10:a5:c5:3b:e6:15:82:18:e0:74:91:2f:
         10:5a:f7:b5:d1:ea:02:11:e3:fd:e9:39:a9:4c:4c:bb:77:0a:
         e9:bc:d5:00:ae:a0:99:b4:bb:e7:8a:5c:25:6f:f8:d7:16:ea:
         44:bf:4a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:47 2025 by rpki-client