Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04157f7a-92e8-315c-8836-ebb256f347b3.roa
File:                     04157f7a-92e8-315c-8836-ebb256f347b3.roa (raw, json)
Hash identifier:          6pNWzBE8ZKwiRThCxd3D8bV7lX/X5HZKLIiRMcTvMFE=
Subject key identifier:   F5:14:35:5D:B9:64:E3:F4:9C:D1:F4:18:D1:74:68:F9:BB:F7:9D:66
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549097363BA25BEB68451DF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04157f7a-92e8-315c-8836-ebb256f347b3.roa
Signing time:             Thu 21 Mar 2024 21:39:08 +0000
ROA not before:           Thu 21 Mar 2024 21:39:08 +0000
ROA not after:            Wed 19 Jun 2024 21:39:08 +0000
asID:                     396982
IP address blocks:        34.65.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:09:73:63:ba:25:be:b6:84:51:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:39:08 2024 GMT
            Not After : Jun 19 21:39:08 2024 GMT
        Subject: CN=0a67ea95-38b5-4d63-8dae-ed8534154c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:21:c4:c5:65:bf:bf:7d:87:1c:e4:ff:b2:
                    58:73:da:50:8b:08:48:30:58:73:11:3b:b7:2a:01:
                    5b:13:f9:42:77:20:4a:57:6e:e7:a2:e3:36:22:12:
                    1a:f5:14:23:de:cd:02:fc:82:c1:d9:22:a0:e3:b0:
                    ee:53:10:1c:db:35:45:6f:98:f1:f0:f3:78:da:15:
                    84:73:46:0c:88:27:00:0e:61:5d:91:65:91:96:4c:
                    6a:cd:a9:4b:f3:c2:ca:1a:f1:5a:38:77:c5:e3:0d:
                    b9:00:65:38:90:23:5f:25:a3:98:3d:e5:39:60:c7:
                    cd:dc:59:9c:bc:97:60:b5:9d:bc:8c:70:76:40:bf:
                    5a:1e:dc:6b:e6:f2:ec:c3:7c:9f:25:d4:6c:93:fd:
                    e6:7e:66:86:92:21:6f:c4:1c:3d:cc:d4:00:2c:a5:
                    30:32:3e:3c:35:cc:f1:ff:70:b3:53:44:b8:4c:e3:
                    de:01:75:ef:50:ce:a5:2f:66:b7:b9:9b:20:3a:ce:
                    0d:8f:d2:8d:76:ce:47:1e:ad:56:fd:33:51:72:40:
                    a0:0c:ef:b8:b6:60:a4:48:13:3d:d1:28:2b:69:04:
                    93:14:b6:14:c4:b7:84:3e:ab:dd:5a:51:87:64:ee:
                    1d:f3:20:32:76:fb:7e:73:1a:ba:26:d9:39:e3:75:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:14:35:5D:B9:64:E3:F4:9C:D1:F4:18:D1:74:68:F9:BB:F7:9D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04157f7a-92e8-315c-8836-ebb256f347b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.65.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:08:98:69:e4:15:21:ee:bc:0b:57:2d:25:c5:80:ea:2e:61:
         86:c7:c9:e4:dd:63:71:d3:20:5b:fb:26:93:95:b4:fb:8d:a3:
         43:ae:85:a2:25:38:f1:89:a8:3f:b1:ab:88:29:90:21:b6:b0:
         c9:9a:34:d8:33:81:c6:14:b2:54:05:6c:ba:ee:05:4e:c7:af:
         ec:4f:6f:b5:f7:5d:bb:00:b3:e5:3a:26:3a:a6:f5:97:b2:73:
         56:e0:20:c7:a9:50:85:88:ac:8e:88:bf:30:e2:c5:25:8b:48:
         d2:59:b5:41:2b:1c:74:bd:59:57:a1:e4:7c:4b:95:92:68:24:
         05:7c:3b:0d:3a:32:98:d3:85:e7:09:19:f9:d4:bb:6b:cc:8b:
         fb:c4:2f:f7:3f:64:d1:c3:78:31:9e:dc:86:b3:49:63:c3:53:
         8e:93:43:6b:56:3e:b2:12:8e:23:07:be:ff:d8:00:da:d0:86:
         5f:df:a9:1f:e4:57:10:7c:62:6e:68:ec:21:ec:db:20:1e:e5:
         9b:4f:da:f5:c7:e1:53:29:86:0c:c8:61:99:54:6b:31:70:7f:
         85:91:73:dc:ca:4f:e6:10:29:60:48:31:1b:9a:43:72:c4:3c:
         64:f3:66:09:09:20:54:e8:bb:9a:24:33:86:c7:59:c0:73:08:
         28:51:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:47 2024 by rpki-client on console-fra.rpki-client.org