Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa
File:                     239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa (raw, json)
Hash identifier:          Rw3wbnC9lKglV27NT9qgwkFNTXVTCYnnHeI8wVRGrr4=
Subject key identifier:   D3:5F:17:9C:B3:D2:38:CB:97:A2:59:46:6A:B7:79:3A:E4:4F:55:7E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454905529F720B2B2F5842E080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa
Signing time:             Thu 21 Mar 2024 21:30:49 +0000
ROA not before:           Thu 21 Mar 2024 21:30:49 +0000
ROA not after:            Wed 19 Jun 2024 21:30:49 +0000
asID:                     396982
IP address blocks:        34.140.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:05:52:9f:72:0b:2b:2f:58:42:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:30:49 2024 GMT
            Not After : Jun 19 21:30:49 2024 GMT
        Subject: CN=14edf953-1d11-4316-9b15-fe01d0448bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5f:b8:82:12:32:63:00:10:6f:b9:1d:98:45:
                    b7:15:ba:60:00:b3:9b:11:53:49:aa:95:56:6d:cb:
                    c7:b8:c0:b3:66:9e:03:17:89:30:ec:c8:a4:88:e5:
                    3a:54:de:76:b9:5a:6e:c0:7c:2b:df:36:ee:17:1f:
                    e6:8f:02:71:93:85:d7:77:15:a1:6d:91:e7:f8:a7:
                    84:dd:23:5a:94:5d:41:90:8d:ff:74:ed:f3:b8:f9:
                    75:fd:5b:fc:d2:93:80:c8:b9:b4:ef:a5:de:d3:0b:
                    1b:3a:01:a2:a9:cc:eb:c6:6b:bf:74:c8:c3:b4:f0:
                    d7:a8:a2:21:00:80:01:56:ad:a8:1a:ba:95:a8:d7:
                    ce:c3:19:33:2c:d4:cb:86:ec:44:2d:fc:f9:66:ec:
                    6d:1e:57:83:a1:30:af:d4:64:f7:66:05:bd:d4:2b:
                    c0:a9:95:87:06:a2:34:d7:40:61:97:42:aa:ed:13:
                    17:c8:3e:a2:77:ca:83:b1:ca:9b:2b:59:6e:09:19:
                    17:e5:87:75:7b:ee:7c:42:70:f7:de:8d:83:3f:75:
                    62:e9:a5:59:e2:b5:3f:ec:dd:c8:91:c3:02:75:51:
                    76:dc:af:f5:c2:b1:4e:e2:4e:4c:69:8b:12:d5:83:
                    2c:4e:e4:9d:e6:76:1e:a3:08:bb:c1:d8:68:e3:f1:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5F:17:9C:B3:D2:38:CB:97:A2:59:46:6A:B7:79:3A:E4:4F:55:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:01:f8:58:64:45:96:95:bc:52:06:bf:cb:6d:dd:e0:38:
         1b:86:8a:6b:e9:a7:7d:9f:c2:df:68:0e:e8:67:db:b7:dd:56:
         0c:7e:e0:d2:0c:79:87:30:30:0b:15:f3:7d:de:2f:76:d3:04:
         77:b8:12:5b:97:d4:f4:7c:ac:1c:a2:2f:f9:41:f7:9a:f3:29:
         84:62:64:21:4a:bc:a4:ba:cf:b6:39:fc:90:2c:8a:5d:51:4e:
         08:8b:bd:07:5c:0e:fa:e9:90:99:f0:92:16:0f:eb:55:55:eb:
         f3:55:16:70:6d:75:be:b2:90:ff:b2:c6:06:66:57:c3:d8:a6:
         52:f9:b4:79:c3:df:f2:0d:8d:9e:4e:e2:8d:17:27:2f:cb:ce:
         08:a8:64:66:cf:0d:ab:df:34:75:28:17:f5:8a:a3:9e:dd:f3:
         25:73:b7:87:c7:45:0e:92:62:39:fc:07:ec:17:5b:c8:ab:35:
         37:a4:04:70:d6:e8:d6:a4:bd:e6:1c:58:07:fc:79:ab:cd:67:
         64:47:83:8b:ab:94:36:17:0d:dc:e0:44:68:c9:c4:74:b4:0d:
         ea:36:bf:9b:82:b3:ba:04:b2:94:6d:de:2b:44:67:f0:78:b7:
         5a:d6:5d:c9:3c:00:58:cf:17:33:52:32:18:7a:03:11:66:ef:
         b6:05:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:15 2024 by rpki-client on console-ams.rpki-client.org