Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa
File:                     0f78b3fd-1445-384b-b208-6396a085dcb3.roa (raw, json)
Hash identifier:          dsDPHA9OImn+DrJBAiY0LYs13hKhXCYAdT8zMlpjSXU=
Subject key identifier:   95:FF:00:EF:8B:B0:E0:2E:BA:1D:A8:F8:05:83:F7:DB:33:01:CF:89
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462955E4F1261D30AAF0E440
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa
Signing time:             Wed 20 Mar 2024 20:55:57 +0000
ROA not before:           Wed 20 Mar 2024 20:55:57 +0000
ROA not after:            Tue 18 Jun 2024 20:55:57 +0000
asID:                     396982
IP address blocks:        34.108.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:29:55:e4:f1:26:1d:30:aa:f0:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:55:57 2024 GMT
            Not After : Jun 18 20:55:57 2024 GMT
        Subject: CN=c69323a2-690c-4537-a06a-3beb4503981a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:d7:d7:73:2a:ea:e8:af:5e:5e:02:46:65:
                    ff:cf:3d:28:18:57:45:a0:c7:7a:b1:39:31:bf:fa:
                    4b:bd:f5:5a:b9:4c:92:24:80:39:e8:aa:91:a7:59:
                    ba:76:8c:ae:aa:e9:d0:91:ac:4f:80:e0:b7:c1:bb:
                    7a:28:38:3c:e2:21:35:eb:2a:4c:d8:eb:6a:d6:68:
                    ae:7c:e8:d1:87:54:d1:41:cd:00:08:fe:5a:65:ee:
                    ba:c4:2a:a6:96:9c:02:6d:01:c5:e8:34:cd:3c:1b:
                    87:6b:fc:32:81:dd:d3:57:5c:94:0a:24:b9:f3:01:
                    6c:51:6d:73:94:22:04:17:f6:fc:0b:9c:ea:29:3e:
                    a5:1e:98:f7:5d:63:62:51:dd:b9:3a:d8:95:4d:b4:
                    d2:98:43:3d:95:fc:73:a9:88:0e:92:67:78:26:cf:
                    6c:c6:1d:e7:9d:49:d5:90:fc:e0:6d:be:05:19:20:
                    4f:20:fb:9e:b2:54:3b:25:d2:97:ec:f0:2d:33:71:
                    80:1d:d8:49:a1:f2:1a:6c:21:ff:7a:40:99:62:12:
                    ab:f5:48:80:00:c5:79:56:6f:52:f0:11:d0:97:40:
                    8a:08:a0:a1:2a:2d:65:7e:b3:3e:80:03:17:41:2f:
                    fa:7f:cd:72:12:2e:d9:38:1b:14:d6:c5:82:b4:d5:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:00:EF:8B:B0:E0:2E:BA:1D:A8:F8:05:83:F7:DB:33:01:CF:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.108.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:dd:9a:25:62:30:bd:66:12:61:85:d5:46:4e:e2:82:3c:5b:
         08:d7:1b:33:19:0c:22:76:1f:b1:2a:ef:2b:56:a9:75:45:de:
         4d:cb:0c:52:ae:d7:1c:36:de:9a:41:0c:38:bc:29:fa:2f:db:
         47:f4:47:eb:1f:49:a0:10:3e:a1:74:27:d4:c8:80:77:08:78:
         17:dd:fb:7e:25:8e:2e:1d:f4:72:e1:61:96:6b:74:82:36:fd:
         ef:ea:5a:57:c9:c4:00:3b:2a:c3:32:08:a6:62:04:33:30:91:
         a7:1b:9c:b6:3c:39:47:5b:e2:7e:93:73:a1:f3:e1:e8:95:45:
         e3:b8:3a:26:35:ba:0c:d0:a9:64:08:35:ee:13:0c:11:48:1e:
         7a:33:18:32:dd:4a:a7:e5:0f:a3:29:13:d0:b8:73:3a:a1:88:
         c7:d3:24:2c:97:c7:7d:6e:f9:ee:08:8f:4c:83:da:a2:4b:a9:
         3b:e9:3d:04:0d:18:45:0b:ec:d7:0e:6d:bd:96:a5:35:63:a9:
         50:cf:87:22:a0:17:bc:90:b1:68:b6:22:01:b1:57:9e:5e:c9:
         0c:bc:75:65:da:31:08:e3:34:2e:1b:be:a6:70:86:56:42:e5:
         e0:b9:f8:30:fc:87:bf:81:f4:bb:4d:45:2c:1f:c8:6c:ae:b1:
         d0:6b:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:07 2024 by rpki-client on console-ams.rpki-client.org