Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1cc583b4-9050-32c7-983d-133234d68951.roa
File:                     1cc583b4-9050-32c7-983d-133234d68951.roa (raw, json)
Hash identifier:          fPIBHTMJYjD3SX9YzqYZ6WjQEeoxVzHh7Y2keLKRh7A=
Subject key identifier:   7A:E2:12:CC:16:F5:92:56:7A:3D:0D:31:5B:06:6F:77:63:6D:8A:46
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549005CF6FFAF2DA612E0EF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1cc583b4-9050-32c7-983d-133234d68951.roa
Signing time:             Thu 21 Mar 2024 21:20:49 +0000
ROA not before:           Thu 21 Mar 2024 21:20:49 +0000
ROA not after:            Wed 19 Jun 2024 21:20:49 +0000
asID:                     396982
IP address blocks:        34.80.0.0/12 maxlen: 12

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:00:5c:f6:ff:af:2d:a6:12:e0:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:20:49 2024 GMT
            Not After : Jun 19 21:20:49 2024 GMT
        Subject: CN=1f0f7ac3-7633-46ae-ab52-90a97841bebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:3a:02:6d:97:6e:22:33:fd:f7:59:b5:92:
                    f7:fb:5d:c9:30:0b:0d:84:9f:31:3a:91:82:2b:19:
                    4b:28:76:69:bd:3d:e0:ca:0f:eb:b1:7c:e4:29:ab:
                    bc:66:c7:72:f8:64:09:bf:52:d7:3b:9f:31:b7:6e:
                    52:ef:34:98:68:24:a0:79:62:42:3c:af:6a:43:b0:
                    e5:4f:b1:44:e2:d0:36:dc:dc:86:74:0d:2b:0d:8d:
                    1d:46:17:fd:03:43:66:15:0e:36:40:e5:37:04:1f:
                    c6:3e:55:24:de:66:88:ac:a9:1c:87:73:44:46:bd:
                    f5:52:37:13:a7:1e:85:8c:71:5e:6e:66:42:ec:c1:
                    f8:46:5b:a2:dd:22:36:e8:1f:38:c1:83:c2:39:fd:
                    93:c7:ee:eb:28:ee:0e:70:bc:01:e7:82:34:a9:dc:
                    09:6e:97:8d:14:3a:d3:67:2f:23:e5:08:d4:6b:e2:
                    dc:50:3e:73:db:8a:26:4d:b1:d6:e3:13:b6:df:34:
                    9e:f4:8a:a6:c4:63:36:bc:89:f2:22:b2:39:16:01:
                    95:0f:f0:a2:55:46:42:5b:c1:04:83:ae:a5:16:8d:
                    05:d6:5c:92:c7:33:b0:4b:d5:00:3d:80:77:01:ab:
                    8f:5f:ba:13:cb:ba:b2:7f:b7:30:8f:3f:71:97:c9:
                    11:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:12:CC:16:F5:92:56:7A:3D:0D:31:5B:06:6F:77:63:6D:8A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1cc583b4-9050-32c7-983d-133234d68951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.80.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:de:56:53:a9:bd:8a:7e:dc:31:90:b0:0d:da:2d:bb:1f:15:
         a4:55:5e:03:0f:cb:44:5c:f9:3e:93:3d:2c:b3:82:1b:09:6a:
         8b:f8:f6:71:26:a0:d0:f5:59:cf:93:bf:e9:02:04:63:35:b8:
         7c:ed:5a:be:3a:54:fd:3f:ec:8b:32:70:59:cf:48:8c:42:a5:
         34:e8:03:2b:21:a9:23:8a:4c:cd:a5:65:26:16:d9:68:60:1e:
         62:61:72:d8:7f:fb:46:f2:1f:e9:b8:5b:3c:a8:eb:ae:50:cf:
         b6:90:e1:27:d0:03:19:96:7f:b2:b7:01:36:ee:81:de:4f:55:
         c9:75:5a:b4:74:8a:27:d9:1e:8f:3d:f1:35:ec:27:ed:74:f9:
         43:39:a8:80:22:f7:08:8e:61:56:c3:1e:f5:66:aa:f6:e4:f5:
         46:27:4e:b5:b1:27:c6:5b:19:3d:95:91:82:07:6d:e7:bf:d4:
         0d:d9:9c:c9:36:c7:bf:06:7d:5a:df:a0:47:3e:38:01:ec:ce:
         77:bd:90:f1:33:4d:dc:90:74:ba:11:12:a8:89:be:11:0b:cf:
         f8:6e:30:c8:72:e5:b6:51:d5:7c:cc:55:2d:11:d3:f4:a5:f3:
         99:07:03:7b:fe:e7:59:db:15:eb:17:30:83:f8:09:a0:97:f1:
         f5:0f:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:57 2024 by rpki-client on console-fra.rpki-client.org