Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1bc96701-b80f-3e06-a914-fe41b0339f6a.roa
File:                     1bc96701-b80f-3e06-a914-fe41b0339f6a.roa (raw, json)
Hash identifier:          rP8Hsedkw5ncYrgi8biNOH2gttO3ZxKIlrMyeNzxC7s=
Subject key identifier:   70:42:AC:F2:F2:20:1D:14:E0:FA:34:BB:FB:29:C3:37:EE:87:C8:1C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454906D621BFDF0D5D686BB640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1bc96701-b80f-3e06-a914-fe41b0339f6a.roa
Signing time:             Thu 21 Mar 2024 21:33:52 +0000
ROA not before:           Thu 21 Mar 2024 21:33:52 +0000
ROA not after:            Wed 19 Jun 2024 21:33:52 +0000
asID:                     396982
IP address blocks:        34.162.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:06:d6:21:bf:df:0d:5d:68:6b:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:33:52 2024 GMT
            Not After : Jun 19 21:33:52 2024 GMT
        Subject: CN=1aa0c392-caa6-4a1a-995d-cd66cb97856e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:d6:24:8d:e7:a9:81:9c:ec:6d:da:6f:27:
                    6e:e7:f5:4d:a0:79:ed:65:5e:80:e4:10:f5:cf:25:
                    db:89:af:eb:e7:be:68:ef:40:8e:7b:5f:76:60:78:
                    5e:32:9e:71:da:1d:1f:3f:c4:60:c6:7d:1b:0e:25:
                    aa:f9:65:2b:67:72:34:78:ae:51:2e:e6:c9:dc:b3:
                    fb:e3:51:49:a4:25:8f:6a:75:a8:94:5d:dd:89:89:
                    8b:4e:10:57:c4:71:d4:8d:60:49:39:da:2f:4e:93:
                    3d:00:7e:fa:eb:fc:75:94:0a:d4:2e:c9:14:14:18:
                    0b:a9:d5:a5:ed:cd:e9:9f:01:c4:83:ce:e7:f3:db:
                    43:0f:9d:18:6d:14:de:a6:c5:cc:b4:1a:89:31:28:
                    3f:ec:cf:27:f5:d6:c4:81:ba:5f:99:14:fd:8e:84:
                    4a:26:48:80:03:9d:79:50:9a:3a:15:9d:9c:0f:89:
                    c1:bf:17:54:ed:a9:88:c9:1c:76:70:cb:63:de:74:
                    60:31:a6:60:21:fa:63:f3:e5:27:d7:d7:da:16:f6:
                    e0:71:c2:fe:21:27:ca:07:97:f3:86:e1:cf:4d:f9:
                    96:66:40:81:11:6d:1b:e7:b0:2d:63:4a:2b:49:ed:
                    b3:79:3d:14:61:5c:a5:57:36:1d:8c:a0:ed:5e:66:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:42:AC:F2:F2:20:1D:14:E0:FA:34:BB:FB:29:C3:37:EE:87:C8:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1bc96701-b80f-3e06-a914-fe41b0339f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.162.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:52:25:ac:0f:98:e8:9a:19:86:a7:99:8a:7d:e5:6f:d7:0e:
         52:6d:3c:a9:37:b6:09:4f:9f:93:fc:9b:b1:b7:4e:e0:1c:dd:
         62:1b:14:a0:23:a3:a7:1c:06:f9:17:0c:c3:6d:f9:d1:a4:73:
         56:e4:29:55:5a:a4:5a:a5:c8:f9:24:08:89:60:ae:07:5e:a5:
         58:0a:65:ae:56:3f:d6:a4:ea:d3:c7:d3:9f:a5:7e:a8:98:de:
         61:49:23:5d:ff:37:e8:99:28:f9:f8:43:9f:91:27:1f:92:5a:
         2b:8d:f1:84:dd:17:12:ed:1f:b5:9d:f2:a3:3e:83:81:08:c9:
         95:35:d2:a5:54:47:dd:d6:03:0b:a4:5c:8f:ce:8f:71:5e:92:
         38:89:bd:85:a2:63:4c:cc:d2:fb:b0:df:4d:bc:91:68:2c:a9:
         c2:48:e8:c6:37:8d:5f:ed:3e:0d:3b:b2:4d:1e:f5:3b:d9:8d:
         a6:76:22:ab:19:12:5b:bb:88:37:c1:b0:7a:13:f4:d4:fe:c2:
         d4:b7:4e:1b:26:aa:52:9f:b6:b3:8d:06:55:a1:a4:94:ca:93:
         10:0a:3a:0c:f2:73:95:da:36:e2:f5:e7:4b:d8:eb:24:74:3f:
         82:b7:6a:c9:4f:a6:5a:bf:8d:2c:86:47:4c:60:77:26:c6:9e:
         c5:99:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:13 2024 by rpki-client on console-ams.rpki-client.org