Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25fea465-8f7d-3e7b-bab6-927a40f02d4a.roa
File:                     25fea465-8f7d-3e7b-bab6-927a40f02d4a.roa (raw, json)
Hash identifier:          AOgQPsWXcDER55loozlfZRGnLxiOF+4hW05Y2bfaTQw=
Subject key identifier:   0A:11:84:4A:3A:9E:85:15:46:84:7D:E2:4E:25:AA:A4:F4:CF:5E:17
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FE1242488E3AB7C03899E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25fea465-8f7d-3e7b-bab6-927a40f02d4a.roa
Signing time:             Thu 21 Mar 2024 21:16:12 +0000
ROA not before:           Thu 21 Mar 2024 21:16:12 +0000
ROA not after:            Wed 19 Jun 2024 21:16:12 +0000
asID:                     396982
IP address blocks:        34.130.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fe:12:42:48:8e:3a:b7:c0:38:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:16:12 2024 GMT
            Not After : Jun 19 21:16:12 2024 GMT
        Subject: CN=a38d8632-ee31-4a80-867e-51f6d57d2c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:4e:b6:4b:9c:78:dc:3f:8c:ba:03:fc:59:
                    02:b1:59:19:00:38:e1:b8:5f:fa:64:b5:40:bb:60:
                    01:56:30:a4:7c:50:73:53:f7:67:6a:7d:7f:66:39:
                    dd:35:ba:32:64:9b:28:56:77:66:55:89:26:7c:ab:
                    b2:5b:c6:74:83:a4:3b:57:5c:ac:b0:b3:ec:c0:aa:
                    c9:bc:d5:4b:c8:b9:eb:4c:a7:ce:52:31:78:f8:27:
                    5e:93:a2:42:7f:a0:35:56:4b:7a:e4:d8:ef:4e:c5:
                    aa:94:fb:1e:26:8b:f7:1e:78:71:3a:bc:94:99:fa:
                    15:af:6a:aa:c0:b5:06:4e:fb:cd:f8:20:85:3e:f5:
                    16:a6:8e:25:24:fb:02:c0:31:30:57:c2:0f:25:29:
                    83:a1:89:28:9d:17:c3:2a:6b:37:c3:65:8d:64:22:
                    72:35:67:84:b3:63:8d:cc:03:e5:ff:21:0a:ec:29:
                    37:2e:f2:67:fb:cd:34:07:56:30:c8:88:74:5f:c8:
                    25:4c:01:84:a5:76:3b:c8:9a:43:60:fd:f4:5b:6f:
                    3d:58:81:1d:5c:30:0c:2a:c7:83:e6:d4:bf:8a:db:
                    6b:f2:ff:cd:44:64:b2:15:8c:33:13:4c:04:c7:dc:
                    12:ae:cf:07:23:3a:10:dd:4e:f4:af:55:b8:34:34:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:11:84:4A:3A:9E:85:15:46:84:7D:E2:4E:25:AA:A4:F4:CF:5E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25fea465-8f7d-3e7b-bab6-927a40f02d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.130.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:26:d7:14:01:7e:cd:c0:a0:51:e3:54:74:54:26:71:56:
         3f:c1:6d:a7:6b:6d:35:8a:2e:af:4e:8e:e5:79:cd:27:e6:30:
         8e:0a:b0:08:79:f7:36:fa:34:4b:ae:9c:8e:f3:4c:68:ba:c9:
         43:92:30:0f:78:c8:92:f3:14:4b:81:b3:43:ff:3e:f6:29:03:
         c6:98:b6:f2:d2:a3:fa:dd:99:4b:62:72:d7:86:ad:3e:82:e3:
         f4:d5:f9:7f:b1:6d:29:17:f6:8a:e5:8a:32:eb:0b:21:d0:d7:
         30:6b:0b:db:40:de:b5:8a:a6:95:f7:3f:dd:a0:49:00:4a:89:
         84:5e:f7:4c:ca:88:02:a0:1b:f4:fd:6a:dc:40:b0:00:d5:f9:
         5c:74:f7:85:3a:41:1e:e8:94:92:7e:20:07:29:82:da:de:a1:
         19:3b:83:e3:b7:d4:c8:45:11:30:fc:98:97:84:d6:9c:74:d8:
         bc:0b:99:69:db:37:f3:ae:c4:26:5d:a1:6a:9a:a0:65:7b:c6:
         9c:ee:25:65:7c:50:dd:d7:31:5c:0a:94:ce:c4:0d:19:bd:19:
         eb:39:0c:c7:de:a3:18:c2:99:95:6b:de:3d:e0:c6:91:66:03:
         5c:e8:c5:11:45:11:7d:d3:b9:b4:b2:1a:1d:b8:0a:a4:d7:87:
         8f:bb:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:48:57 2024 by rpki-client on console-ams.rpki-client.org