Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa
File:                     33f7bbe6-9997-3a80-85e2-40e243874534.roa (raw, json)
Hash identifier:          QjoRUB++SfZCbEjPydryEHaNGHto4otDenliVs+rkvg=
Subject key identifier:   29:BA:70:14:7D:FA:D2:DE:FD:05:E5:25:C6:CA:72:65:05:A6:77:5E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454623000FB7692301ECF74480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa
Signing time:             Wed 20 Mar 2024 20:43:11 +0000
ROA not before:           Wed 20 Mar 2024 20:43:11 +0000
ROA not after:            Tue 18 Jun 2024 20:43:11 +0000
asID:                     396982
IP address blocks:        34.103.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:00:0f:b7:69:23:01:ec:f7:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:43:11 2024 GMT
            Not After : Jun 18 20:43:11 2024 GMT
        Subject: CN=61bdcd2d-61ce-4c1d-aab2-1746bd917621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:7d:53:99:b3:41:91:4f:25:d1:2c:b2:cb:
                    ed:07:43:f1:be:3d:3c:25:64:99:3a:2d:c4:71:8f:
                    c6:6a:68:47:0e:87:a1:62:78:26:4a:67:3d:de:2d:
                    22:d1:ca:89:6e:13:54:01:18:a9:bf:3a:5a:31:04:
                    39:7c:3b:9a:a7:ce:0a:4f:bd:27:c3:e7:18:4b:6a:
                    43:16:59:3f:51:61:e6:3a:ce:26:c7:27:63:2c:ef:
                    32:69:1a:59:15:4f:99:a0:90:8a:cc:c7:e3:ef:4d:
                    6d:7e:58:50:50:0f:b6:da:52:97:12:ce:64:db:2b:
                    53:0c:59:d8:ab:cd:d7:9f:4d:c2:1e:e0:d8:5c:01:
                    67:f6:47:52:3b:2c:3e:23:c7:0c:ef:03:bf:c3:2f:
                    6d:1e:5a:48:46:2e:e9:d7:f5:a1:88:31:9f:69:3d:
                    85:4d:66:8f:e4:ab:a2:35:90:46:1e:fe:51:7b:1d:
                    40:58:fe:ef:ac:87:ec:5e:34:fc:52:41:1c:69:66:
                    1a:a2:84:47:32:ba:06:3b:17:08:45:0c:1c:c0:4c:
                    b2:23:65:77:cd:9a:18:50:80:04:86:c3:80:b4:79:
                    7c:bd:85:14:72:c8:03:35:26:ea:3f:4c:74:9f:5d:
                    3a:fd:c4:26:6c:1c:11:a0:58:b9:80:06:7c:45:2b:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BA:70:14:7D:FA:D2:DE:FD:05:E5:25:C6:CA:72:65:05:A6:77:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.103.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:a7:e6:90:7b:f0:7e:0c:e8:a2:ac:94:59:72:22:4a:fa:
         1a:f2:43:4a:8b:12:b1:3f:71:d6:1a:75:15:f1:5a:08:60:b8:
         5f:3f:35:2e:92:7a:5a:32:4e:7a:86:a7:fb:df:40:a8:8b:78:
         9e:99:85:03:6c:d6:51:d6:9b:46:4a:f2:fb:7b:ed:b7:ef:a8:
         9b:7f:95:3a:ad:31:79:3e:94:24:cf:cd:5c:ed:8e:12:c6:2d:
         7e:e4:b9:6f:27:be:dc:4d:9a:c5:50:08:15:f2:29:78:04:73:
         8f:7e:21:47:37:16:bb:4f:f4:d4:17:b6:09:e1:da:87:d6:11:
         04:8b:ea:f6:95:5e:7b:02:24:fa:64:f0:72:1f:f7:54:81:10:
         75:73:43:c9:7e:33:ce:e6:00:7f:c5:17:51:01:d2:35:47:40:
         b5:1e:d6:04:68:9c:1a:b4:f6:41:80:af:d3:f9:be:6e:7b:c5:
         19:0d:e4:b4:46:af:1f:96:a5:f8:d8:b7:1f:1a:81:94:b9:55:
         96:fd:0b:97:b1:de:b1:f1:cf:97:8c:cc:e0:5a:da:af:d8:fc:
         f1:02:53:08:58:82:17:28:3c:59:b7:2c:3c:33:39:24:3c:46:
         4a:47:b2:07:e8:51:84:dc:f7:12:f3:b6:a8:f2:26:94:de:0d:
         1c:9a:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:07 2024 by rpki-client on console-fra.rpki-client.org