Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a63fd8f-201f-384b-9af9-4e9db2557b05.roa
File:                     2a63fd8f-201f-384b-9af9-4e9db2557b05.roa (raw, json)
Hash identifier:          fEo6SfjN6dmZUczV8jHHZggXDXM6t7StB2wgEBT3Z6A=
Subject key identifier:   9C:85:D0:EB:7E:A1:31:52:B6:EF:20:78:7C:1E:10:4F:CA:B4:66:45
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F06EB158585783F2818FE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a63fd8f-201f-384b-9af9-4e9db2557b05.roa
Signing time:             Fri 29 Mar 2024 18:41:48 +0000
ROA not before:           Fri 29 Mar 2024 18:41:48 +0000
ROA not after:            Thu 27 Jun 2024 18:41:48 +0000
asID:                     396982
IP address blocks:        34.109.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:eb:15:85:85:78:3f:28:18:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:41:48 2024 GMT
            Not After : Jun 27 18:41:48 2024 GMT
        Subject: CN=e8a84e4c-82dc-4b6f-8178-376d84f3640b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:da:67:4e:70:92:6b:af:c2:21:b1:be:74:0a:
                    79:c8:5c:9d:d4:aa:c7:dc:75:d2:03:36:9d:f4:71:
                    fe:a4:af:56:ff:f4:64:a5:3e:35:dc:13:38:73:3e:
                    79:1e:a6:e6:46:1f:fd:48:fc:5f:3f:03:31:25:f4:
                    b2:65:73:93:fc:33:01:ba:e3:4b:15:84:72:f2:c5:
                    99:d0:9a:e9:17:10:c6:8e:5d:97:da:2e:47:d6:13:
                    93:3b:9f:e4:28:74:20:e7:73:7b:60:4b:0d:75:fb:
                    92:ac:36:85:bd:e3:20:38:0e:cf:56:23:fd:6f:55:
                    6b:b3:8a:cc:eb:52:f2:19:36:20:d1:c2:34:9e:2e:
                    8c:41:2e:d6:e4:55:61:be:99:83:68:fc:6a:97:28:
                    1f:56:71:be:c1:d5:bc:53:76:84:c5:59:d9:d9:85:
                    0e:81:09:d3:bd:4b:08:64:ab:da:bb:b2:2b:47:3d:
                    5d:66:08:5f:24:bb:8e:e4:17:61:37:b8:ab:9a:bd:
                    de:c6:4f:0a:e5:45:ee:3a:fb:d1:98:87:c9:a0:6f:
                    69:57:b7:c3:ff:9a:f7:e1:fe:f1:4b:89:f1:f4:c2:
                    41:7c:2f:7b:32:68:1c:4f:ed:18:2b:04:86:bb:40:
                    11:9b:f3:99:ee:e1:e9:0e:42:2b:02:eb:ce:79:06:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:85:D0:EB:7E:A1:31:52:B6:EF:20:78:7C:1E:10:4F:CA:B4:66:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a63fd8f-201f-384b-9af9-4e9db2557b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.109.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a1:b9:40:82:dc:8c:63:47:71:73:65:a4:11:5c:d4:ab:b4:
         f9:fc:df:7a:4d:2d:8c:24:c8:1b:c2:15:91:26:df:bb:11:ec:
         02:7b:64:6d:7b:73:5c:90:d1:1f:83:98:c1:f6:01:7b:1f:5d:
         1d:89:e5:18:90:70:3c:1c:41:c5:5a:67:3a:07:3a:21:7a:55:
         ce:85:e9:70:ff:68:53:a6:9f:fe:7c:4a:bc:2b:82:0f:ab:87:
         9d:7a:08:99:49:5a:06:8d:e9:1e:75:1d:60:2f:cb:2b:71:77:
         d8:ea:88:8b:cd:58:1a:45:b5:e2:c4:d1:8b:62:c9:a0:67:cb:
         21:7a:b3:5d:70:27:98:d4:7b:42:2a:08:69:0d:4a:30:c0:e3:
         02:53:bd:02:bf:6e:f4:9e:a6:fa:97:29:34:89:7d:dd:ce:fd:
         39:cb:4f:81:e8:81:bd:7f:1c:cc:02:b2:1a:91:cb:09:45:9c:
         b8:64:63:59:41:49:0d:52:04:b3:bf:80:3a:a3:b5:68:57:09:
         bf:d9:44:2d:60:a9:1f:6f:4f:3c:6e:c3:9c:91:e5:db:90:8d:
         d9:4c:46:96:37:42:93:7e:5d:2d:24:a9:cd:d3:2b:aa:89:aa:
         07:65:de:35:8c:f2:34:3d:05:b7:b1:33:a6:a2:71:3f:c7:f6:
         80:2e:53:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:03 2024 by rpki-client on console-fra.rpki-client.org