Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d949260-57e5-3a99-99a6-56484e4cb37f.roa
File:                     2d949260-57e5-3a99-99a6-56484e4cb37f.roa (raw, json)
Hash identifier:          rfXjJ2ceH0u4CDKAutHSFKqE5SmaNbPEkHA/Q+53cvg=
Subject key identifier:   0E:12:D7:92:89:4B:E9:AF:A4:16:8E:4B:41:20:2C:F5:B1:93:51:66
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FD5C12A5D25D1E77700580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d949260-57e5-3a99-99a6-56484e4cb37f.roa
Signing time:             Thu 21 Mar 2024 21:14:46 +0000
ROA not before:           Thu 21 Mar 2024 21:14:46 +0000
ROA not after:            Wed 19 Jun 2024 21:14:46 +0000
asID:                     396982
IP address blocks:        34.135.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fd:5c:12:a5:d2:5d:1e:77:70:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:14:46 2024 GMT
            Not After : Jun 19 21:14:46 2024 GMT
        Subject: CN=e7128386-d15f-468b-adf5-a23e645acfa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:77:89:19:c0:76:23:88:b8:44:e5:a3:95:26:
                    18:76:cf:e0:17:1a:c9:5a:3f:2c:3a:15:d5:3b:af:
                    e6:66:ec:14:0a:a1:4e:ff:63:7e:66:0f:59:6c:05:
                    4d:d6:09:b7:f9:c6:02:0c:75:f7:f0:e7:7e:b3:01:
                    b2:ac:aa:49:7e:e5:11:f5:a2:4c:9a:3f:3f:c0:ad:
                    f9:64:f1:54:a6:b5:10:91:88:4c:7d:b9:fa:b6:77:
                    b8:8b:60:43:8a:08:df:90:26:42:f4:4b:ec:13:77:
                    80:6b:0d:46:15:a2:c5:66:0f:ec:51:81:87:5c:bc:
                    27:fe:65:77:10:69:be:67:b5:5e:1b:88:34:24:66:
                    df:d5:3b:32:1b:49:f1:17:d5:76:74:74:c1:90:31:
                    0c:ce:7d:97:08:f9:4e:fc:c0:33:5e:a0:23:2f:96:
                    e0:02:d4:4b:33:c5:44:6e:7a:34:9e:97:7d:d1:5b:
                    c5:ef:92:5b:0e:a8:76:cd:85:df:54:8c:d7:d0:10:
                    37:4c:ed:34:ad:03:3a:8c:88:f2:cd:27:d2:29:1b:
                    b4:3a:0c:c5:97:ef:13:08:66:96:5c:9c:c4:9c:20:
                    9c:e4:47:5f:41:e5:c7:45:d5:6c:6d:74:ac:65:ed:
                    d8:7b:6a:ae:77:36:a7:b8:ce:76:23:c4:79:e9:b1:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:12:D7:92:89:4B:E9:AF:A4:16:8E:4B:41:20:2C:F5:B1:93:51:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d949260-57e5-3a99-99a6-56484e4cb37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.135.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c9:4d:35:63:27:61:2f:29:4c:09:a7:fe:fd:3b:bc:8a:4c:
         f4:f8:c4:4e:c2:ca:12:26:ce:11:ca:c9:c5:2b:c0:1b:9c:fa:
         38:22:7a:8d:a9:da:68:36:d8:dd:48:1e:ad:c1:89:73:02:82:
         ba:2c:4e:43:e1:9c:35:65:43:11:0b:96:ca:fa:98:b2:46:08:
         03:4f:56:b3:f0:9c:2c:44:43:a9:f4:89:7e:92:43:c4:2b:36:
         0c:35:ce:b4:e8:e4:41:e4:e4:66:c5:54:cb:39:27:3b:05:bd:
         9f:ec:a0:f5:92:5c:28:41:ff:9c:96:b4:61:69:43:ab:36:6d:
         b6:24:76:5e:70:bf:c3:e1:12:d6:7c:b0:0f:91:47:85:e1:92:
         ab:60:26:45:8c:7f:89:b8:6b:02:77:3f:2f:ba:a9:91:e4:e6:
         ef:8e:58:70:7f:5d:21:76:22:c5:be:6e:4b:b4:9f:45:c3:b4:
         c4:4d:72:76:b7:e7:08:cb:a8:f6:e7:85:e6:f3:d8:a5:44:ce:
         6b:8b:43:f4:7c:45:56:82:fc:d7:8f:94:61:3a:04:b3:eb:0e:
         8c:28:f5:e2:cf:9a:a9:ce:99:39:39:e0:6b:b6:12:35:bf:b3:
         70:39:3e:c8:3f:e8:ec:57:51:78:9d:a4:6e:aa:3c:49:e9:4d:
         2e:1c:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:19 2024 by rpki-client on console-ams.rpki-client.org