Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f76eef9-3641-342b-bc15-536ed7071ff2.roa
File:                     0f76eef9-3641-342b-bc15-536ed7071ff2.roa (raw, json)
Hash identifier:          ZBSraXLQMyXuWP4OFi9wxZcEwzKSOYcsFhoJ4jTjdog=
Subject key identifier:   A1:74:E1:4C:7C:98:E2:2A:4A:A3:A7:2A:46:4F:6D:7F:C0:D4:A8:3C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462E37907CC565BCBDB40940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f76eef9-3641-342b-bc15-536ed7071ff2.roa
Signing time:             Wed 20 Mar 2024 21:05:47 +0000
ROA not before:           Wed 20 Mar 2024 21:05:47 +0000
ROA not after:            Tue 18 Jun 2024 21:05:47 +0000
asID:                     396982
IP address blocks:        34.120.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:37:90:7c:c5:65:bc:bd:b4:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:05:47 2024 GMT
            Not After : Jun 18 21:05:47 2024 GMT
        Subject: CN=f32f2d88-14ba-4255-a869-bd60419d5e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:26:fd:5f:25:2d:61:22:43:07:bd:cb:d1:
                    6a:2e:cc:e9:8a:5d:08:b8:b3:06:fd:31:a0:b4:9e:
                    53:e7:df:e5:02:4a:92:48:e8:1a:9e:ff:9a:13:95:
                    2a:18:41:02:ea:b9:6a:22:5d:9c:66:f1:b4:70:b2:
                    48:e6:c2:60:16:e8:ef:91:bd:a9:d0:6a:34:bd:1f:
                    e2:8a:59:8e:09:e5:44:22:3f:e8:b8:b5:3d:c5:1b:
                    63:de:83:af:30:e7:5a:64:6b:59:2a:2c:0a:3f:b4:
                    43:1a:cd:b9:8b:3e:1e:91:82:78:40:cb:fa:4b:64:
                    0e:e5:2b:59:17:7c:b3:10:63:83:1e:ea:b1:9f:7b:
                    48:75:a7:74:6f:5a:60:79:be:db:61:bf:f0:36:00:
                    bb:d1:28:18:33:5d:c2:2c:3c:da:6d:4e:e4:c2:92:
                    cc:18:0d:e6:a4:05:de:82:f4:cf:62:97:a2:c0:91:
                    b7:0e:aa:a3:7c:b1:1d:32:b8:0d:dd:49:c7:4e:47:
                    a7:0a:91:2a:6e:db:c4:00:e2:6f:41:6e:73:64:f7:
                    89:9e:05:aa:10:71:32:4f:8d:37:da:b6:1c:2c:57:
                    c8:d9:dc:9f:a9:bf:6a:17:e7:5d:77:86:19:a1:a7:
                    c7:65:1d:62:51:aa:99:db:55:75:d2:a6:2a:27:0e:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:74:E1:4C:7C:98:E2:2A:4A:A3:A7:2A:46:4F:6D:7F:C0:D4:A8:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f76eef9-3641-342b-bc15-536ed7071ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.120.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:60:44:25:81:63:2d:e1:07:fc:ad:f1:5a:19:7d:da:a0:
         79:a9:9a:cd:b9:a9:b1:fd:42:60:8e:c9:df:9d:e9:d4:00:1a:
         66:37:5d:29:87:41:0d:b7:fe:ed:9b:be:70:b8:23:00:dd:47:
         ba:c9:8f:8d:3b:71:0a:3f:77:11:bc:61:42:12:97:9a:02:fe:
         6e:cd:f2:c0:6f:ee:99:47:49:91:7d:b3:02:c2:3b:26:ac:6f:
         2a:37:73:5e:5b:8b:56:99:d6:fd:4c:33:7d:67:57:a4:19:89:
         4b:0b:3d:79:09:20:73:6e:0f:26:91:b2:6b:d2:0e:39:be:b7:
         a2:38:85:f6:f9:52:ad:37:bf:87:f6:52:58:08:e2:7e:c8:2f:
         a7:9e:cf:48:08:b9:e3:d4:3b:c7:3d:07:56:df:df:de:41:e4:
         f5:50:c7:21:8e:d8:10:8a:05:64:ed:3e:3e:1a:3c:9f:f3:81:
         5e:7c:7a:d4:71:39:f8:48:4b:9a:0d:2f:10:74:76:bc:73:54:
         3d:99:72:a7:04:c7:e1:56:71:5d:bc:86:24:4e:ba:ed:7e:48:
         ed:b2:1c:fe:12:4e:ca:6c:35:91:53:e0:b1:56:bb:5c:b1:9f:
         a1:bb:56:e3:fb:cf:95:60:0d:8f:e7:2f:5f:98:7f:59:9e:88:
         d6:30:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:48:47 2024 by rpki-client on console-ams.rpki-client.org