Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32f4505d-39ea-3811-a77e-cb5287684f40.roa
File:                     32f4505d-39ea-3811-a77e-cb5287684f40.roa (raw, json)
Hash identifier:          noLfGgMaZQvpz++BESe33FkEJ8UYaptiVwds3AoscxY=
Subject key identifier:   BA:7E:2D:53:D4:D4:34:06:9D:9C:10:1C:09:4B:3C:6D:B9:C7:33:51
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F06535E1E30A8BB1E07F4A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32f4505d-39ea-3811-a77e-cb5287684f40.roa
Signing time:             Fri 29 Mar 2024 18:40:37 +0000
ROA not before:           Fri 29 Mar 2024 18:40:37 +0000
ROA not after:            Thu 27 Jun 2024 18:40:37 +0000
asID:                     396982
IP address blocks:        34.155.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:53:5e:1e:30:a8:bb:1e:07:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:40:37 2024 GMT
            Not After : Jun 27 18:40:37 2024 GMT
        Subject: CN=3cf3f6df-0cf6-43e1-8bb1-d46b1353b29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:df:42:f2:14:b2:72:c0:84:2c:1a:96:14:77:
                    57:60:27:e9:d0:46:7e:cd:75:d1:3b:8f:50:dd:8f:
                    ff:42:33:32:91:0e:cb:29:1c:c2:f6:6d:23:8f:35:
                    dd:bb:6b:68:1e:88:03:a0:15:5f:04:2e:31:f0:1d:
                    7a:f3:d8:17:39:40:a6:f8:20:1b:a8:24:f7:2a:a4:
                    62:ed:94:a6:2c:33:e8:31:b9:98:b7:b6:ab:02:ad:
                    16:18:a6:e9:7b:c8:0f:fc:39:68:42:25:88:0f:52:
                    48:1b:f7:c1:4b:46:5a:0f:fd:2b:15:b7:22:39:17:
                    28:0f:9e:92:7e:94:7d:0a:68:8b:3a:72:b7:51:47:
                    0a:da:32:e8:33:5d:ca:50:4a:b3:30:1c:32:0a:51:
                    c4:ab:30:2e:52:61:07:9d:ba:70:f9:7f:8e:18:6e:
                    78:1a:4f:d6:82:34:b4:18:c9:83:83:e8:d3:43:3b:
                    fa:23:aa:bf:94:06:fe:d7:c0:14:06:33:79:ed:80:
                    dc:7d:9e:8b:ec:65:e0:6a:53:6d:1e:df:66:07:0c:
                    d7:1a:96:93:63:48:42:f3:d3:01:a4:2b:9a:49:89:
                    40:bc:f6:50:e6:75:8d:e8:b3:32:c8:8d:20:57:8c:
                    c4:41:6b:55:50:b0:c6:93:77:0d:87:11:fc:7c:77:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7E:2D:53:D4:D4:34:06:9D:9C:10:1C:09:4B:3C:6D:B9:C7:33:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32f4505d-39ea-3811-a77e-cb5287684f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.155.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:f9:ca:80:22:d4:a4:cd:29:b3:cb:d5:14:63:66:22:c6:
         38:0d:a5:4f:3b:5a:0e:c3:d8:31:db:a2:9e:ea:8a:d6:f5:a5:
         0b:af:0c:a0:6c:29:28:9d:a2:c0:8b:f4:8e:1c:d9:54:1b:47:
         8f:e6:ae:65:71:b8:cf:fd:28:d6:2d:8b:44:06:27:c1:b0:ca:
         37:c1:e3:ef:0c:26:b7:c5:98:cf:8b:a9:d0:f8:5e:59:78:6f:
         51:d9:ce:dd:d3:80:e3:cb:6a:0e:e1:ae:7c:86:a3:de:f5:a9:
         ac:e2:09:ec:20:6b:94:5c:f1:45:52:6e:b2:37:c4:8d:f8:9f:
         2c:cc:e1:e0:d8:dc:ac:7c:7b:41:93:13:c4:c3:e4:bc:5b:36:
         d9:4e:b6:9f:1e:c6:b3:06:61:5b:3e:a6:c9:3e:6b:73:43:d3:
         b2:06:af:b7:25:8e:2f:e3:95:3f:06:b6:8e:05:50:c1:cd:95:
         ef:35:f2:96:85:be:21:ce:fb:a9:28:90:9a:88:c3:68:a2:57:
         a3:b5:09:1d:ab:ff:eb:72:77:70:5d:15:23:18:0d:e7:22:48:
         5e:25:b6:27:0d:84:c1:0b:8d:aa:32:04:9c:a7:d4:b7:54:69:
         4a:ec:d6:7c:e2:66:e2:a0:55:c4:b6:2b:23:f5:77:72:55:25:
         fd:3f:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:34:57 2024 by rpki-client on console-fra.rpki-client.org