Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa
File:                     07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa (raw, json)
Hash identifier:          ssre7MoDq047mZcX9aNX8LjdUPFChQKA7jeOvha5kqI=
Subject key identifier:   AC:31:AF:18:F6:5C:37:A4:F2:FF:F1:BE:B0:69:89:48:79:F0:7A:0A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FCDB25542E966949D05560
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa
Signing time:             Thu 21 Mar 2024 21:13:45 +0000
ROA not before:           Thu 21 Mar 2024 21:13:45 +0000
ROA not after:            Wed 19 Jun 2024 21:13:45 +0000
asID:                     396982
IP address blocks:        34.122.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fc:db:25:54:2e:96:69:49:d0:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:13:45 2024 GMT
            Not After : Jun 19 21:13:45 2024 GMT
        Subject: CN=e479a45b-dcc4-47ce-9365-4e095c957174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:36:d2:de:e9:a3:2e:90:83:6a:e6:c2:09:
                    46:cc:15:86:fc:26:92:9b:72:7a:fe:11:6f:8d:96:
                    f4:61:b7:ac:ba:1e:3a:3e:5e:3f:f6:06:d4:f2:9f:
                    b7:be:02:bd:74:79:5c:e3:1b:ed:25:a4:02:41:0e:
                    ed:07:ba:59:6a:a4:e0:8a:1d:7b:3d:7c:41:a2:17:
                    3b:0d:78:75:dc:a7:56:3c:25:cd:ff:a3:8b:58:bb:
                    bb:2d:b8:e2:4c:20:a8:5e:4e:10:be:fa:e5:ec:f6:
                    83:f1:ad:48:a5:75:79:52:8e:d1:80:3b:fa:d4:fb:
                    02:02:9e:e9:1a:a1:f1:95:1c:f2:f9:1a:d2:48:33:
                    30:92:9b:10:dd:46:66:50:9a:0c:00:fd:4c:d5:89:
                    74:48:49:dc:95:59:d2:38:35:7b:19:96:07:56:e4:
                    74:fa:0e:be:a3:dd:97:6e:ad:4b:20:65:9f:90:b1:
                    93:e8:42:82:4c:f3:07:00:be:05:20:54:04:f7:df:
                    20:ee:10:fa:e6:a6:83:60:3b:e4:64:dc:c9:9f:e8:
                    43:d7:da:0e:73:78:68:37:4a:08:5f:b9:1e:a6:e2:
                    4b:e1:06:67:7b:16:e4:82:c4:67:29:36:dd:85:a6:
                    2e:71:66:db:b4:60:d9:bf:cb:89:d5:bb:fb:12:f4:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:31:AF:18:F6:5C:37:A4:F2:FF:F1:BE:B0:69:89:48:79:F0:7A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.122.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:aa:3a:a9:4d:55:07:b9:42:0b:9c:ae:f4:70:3e:6e:a6:
         95:44:57:f8:86:63:09:9e:ac:cc:66:dd:c9:81:80:0d:6a:7c:
         f5:13:c0:99:74:6a:6b:8d:36:cb:89:a6:78:e9:ce:d1:4f:cc:
         9c:d2:f0:67:79:14:68:e7:ba:cd:2f:1d:07:83:ab:f1:cd:2e:
         11:12:ce:9f:78:bc:dc:77:80:42:d4:76:56:7c:ce:1c:89:2e:
         d6:0d:55:68:13:f4:b6:6e:c5:5b:40:4d:03:8b:16:e9:2b:5e:
         bf:4f:60:08:00:b2:6a:c9:a3:08:c7:ff:38:47:58:eb:93:25:
         c2:5a:f4:51:f5:4a:93:b6:37:e8:6f:5c:5d:e2:39:3c:a5:f6:
         10:30:98:ff:c6:8c:93:fc:bb:07:bf:e2:d5:22:2a:12:35:0f:
         8e:2f:88:3a:89:82:83:9b:8d:18:f2:f1:13:98:7b:20:23:98:
         b5:3e:53:74:73:2c:c9:fd:39:17:0d:a4:13:e2:2f:a3:85:aa:
         6a:05:99:c4:62:1e:83:40:5f:10:c7:b9:62:45:f6:ae:b9:b5:
         18:25:f9:01:32:30:fd:d1:0c:83:00:6c:af:47:1e:b7:57:f6:
         7c:5c:db:c6:f7:57:88:b7:cb:9e:3f:25:04:d9:e5:7e:00:9b:
         54:32:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:07:29 2024 by rpki-client on console-ams.rpki-client.org