Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/15ad3a17-d256-33f5-86df-f5449a5011c9.roa
File:                     15ad3a17-d256-33f5-86df-f5449a5011c9.roa (raw, json)
Hash identifier:          L6eatLP0jzyrbLs0gxQWym5kc5oX6edjIFhTx5d4NbE=
Subject key identifier:   E9:AA:2C:23:AD:7B:F5:4D:6A:A8:54:D3:AB:65:BC:E6:88:DA:E4:22
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454904F7090159D82AB67CCA40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/15ad3a17-d256-33f5-86df-f5449a5011c9.roa
Signing time:             Thu 21 Mar 2024 21:30:05 +0000
ROA not before:           Thu 21 Mar 2024 21:30:05 +0000
ROA not after:            Wed 19 Jun 2024 21:30:05 +0000
asID:                     396982
IP address blocks:        34.139.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:04:f7:09:01:59:d8:2a:b6:7c:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:30:05 2024 GMT
            Not After : Jun 19 21:30:05 2024 GMT
        Subject: CN=02f5751f-673b-4aad-9b13-5c24bc50fffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:9d:72:cd:38:08:e3:ae:b8:30:cd:6a:f0:
                    ce:76:00:aa:6a:95:9c:ba:0a:5a:8b:ba:2e:b5:ba:
                    14:99:5b:56:aa:21:95:4e:f2:bd:34:7d:92:a4:58:
                    04:6f:7d:60:4f:fd:26:2b:7b:a1:c2:5e:53:4f:e8:
                    8b:6c:0a:ef:43:60:fe:43:b2:05:24:55:b7:ff:52:
                    0e:54:6d:68:7e:a7:26:f4:c1:cc:ca:f6:6b:61:f2:
                    2e:ba:5a:53:dc:e7:52:0e:f9:f6:48:7a:da:e2:05:
                    46:f5:27:9b:c6:12:31:cf:bf:95:9c:43:22:0f:c1:
                    15:46:0f:4f:5d:53:3e:a4:2d:8a:d8:d5:43:61:d9:
                    e4:e4:3a:e3:58:54:25:46:32:12:1b:56:cb:94:dc:
                    41:cb:a1:4d:d0:39:28:7b:ca:85:75:31:61:17:fb:
                    67:57:20:65:5b:50:88:6d:d8:89:e3:0b:9b:e1:51:
                    79:dd:7e:54:6e:32:80:9b:ba:e8:ad:b3:4a:74:ab:
                    ce:39:b1:cb:82:c3:ff:8f:52:f7:bb:52:a4:af:90:
                    06:b1:b6:3a:fa:69:96:d0:7e:d0:c3:80:6d:ba:6b:
                    12:b6:b3:9e:c8:b7:c3:16:d5:23:8d:ae:76:ca:c4:
                    bb:36:2d:b1:fd:f0:25:1b:23:dc:23:09:7b:70:c5:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AA:2C:23:AD:7B:F5:4D:6A:A8:54:D3:AB:65:BC:E6:88:DA:E4:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/15ad3a17-d256-33f5-86df-f5449a5011c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.139.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:af:80:89:36:25:94:e3:88:4c:94:2c:52:d5:53:51:54:05:
         b6:2b:e8:08:c7:e6:14:b8:b8:da:05:36:49:b1:00:2e:a2:6e:
         4a:ad:20:6b:0e:02:27:89:14:ee:a0:6f:4a:37:01:72:8b:2f:
         c2:52:3f:af:8e:78:b9:ad:e0:7b:62:59:71:08:28:9e:9f:01:
         3c:22:d8:b6:86:26:b1:e0:10:6e:7a:d7:20:c7:46:d1:33:1f:
         31:27:d4:5c:98:e6:9b:4f:87:74:2d:b5:46:57:a2:bc:6a:f2:
         74:1d:21:21:30:e6:c0:e7:cf:da:de:c6:41:1c:d1:44:31:e9:
         e6:13:c2:41:ef:b2:0b:11:05:be:50:93:61:09:0d:9e:fc:59:
         55:7b:98:f7:0e:f5:8d:15:d5:43:c4:a8:bc:55:ad:c7:90:c7:
         86:c3:a6:8a:14:90:7d:b4:8c:1a:e0:7a:7b:51:df:33:83:e8:
         45:46:ca:5d:eb:79:c5:8d:8a:15:65:1f:14:c5:3e:d9:fe:13:
         70:cc:2c:2b:87:35:32:d0:df:28:bd:b5:5a:b5:77:dd:e2:20:
         a0:19:b4:46:de:da:12:f3:13:44:fd:28:5e:ef:4a:6b:90:f9:
         15:12:e2:d6:8c:00:ae:a1:5b:9b:67:48:1d:ab:eb:0e:0a:83:
         99:32:8f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:54 2024 by rpki-client on console-fra.rpki-client.org