Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b45be3-b170-346c-86b5-0ba4db7ce614.roa
File:                     34b45be3-b170-346c-86b5-0ba4db7ce614.roa (raw, json)
Hash identifier:          EiHszuG68RF7aS/vQTN4QTbfV8qJwb9sQlEEdNHTL/o=
Subject key identifier:   79:7B:DB:E4:A6:A2:53:CA:C2:D1:60:63:CC:02:27:D2:C6:97:CB:59
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454900F671E97B8800CA820FE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b45be3-b170-346c-86b5-0ba4db7ce614.roa
Signing time:             Thu 21 Mar 2024 21:22:01 +0000
ROA not before:           Thu 21 Mar 2024 21:22:01 +0000
ROA not after:            Wed 19 Jun 2024 21:22:01 +0000
asID:                     396982
IP address blocks:        35.204.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:00:f6:71:e9:7b:88:00:ca:82:0f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:22:01 2024 GMT
            Not After : Jun 19 21:22:01 2024 GMT
        Subject: CN=cb4d8c80-8281-4df8-ba23-02f4da95cdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:63:6f:1c:d9:d3:fe:08:de:54:4e:28:04:5b:
                    cf:c0:33:d8:76:fd:04:5c:af:5a:31:a4:cf:6f:3b:
                    25:31:dc:48:66:4f:5d:aa:70:cf:32:03:61:67:1a:
                    02:07:ac:a6:23:c3:ce:02:dd:93:ad:5b:5e:77:13:
                    ec:e7:34:49:57:eb:eb:f1:24:79:92:f1:a7:ec:3b:
                    4b:47:21:28:f5:83:6a:81:40:81:3f:b7:3f:df:3c:
                    a9:6c:16:c6:e0:ba:09:c3:cf:e0:59:85:81:3d:11:
                    b4:2f:ab:ed:f2:d8:0b:3f:1a:0a:d5:64:b7:0e:fe:
                    06:cf:7f:b1:06:81:51:05:f2:96:25:36:46:f0:d1:
                    18:ea:e1:65:8a:cb:ec:c7:60:28:a1:58:ff:37:f3:
                    48:1a:f8:00:35:7e:a5:f9:09:bc:50:41:6e:9a:3c:
                    91:e6:68:18:1f:1d:23:f1:0a:4b:7d:ba:fa:b2:3e:
                    a8:95:db:0e:8e:0f:fa:e6:85:32:e3:31:f2:5b:bd:
                    63:1b:45:02:5d:80:0f:65:8f:a1:ec:16:4e:73:13:
                    33:dc:d9:07:b4:13:19:63:16:33:5e:d3:6a:57:2b:
                    52:28:1d:0d:69:22:16:e0:99:3d:29:6c:de:8a:bc:
                    da:64:64:87:62:64:32:f0:a8:7e:21:6a:35:8b:13:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7B:DB:E4:A6:A2:53:CA:C2:D1:60:63:CC:02:27:D2:C6:97:CB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b45be3-b170-346c-86b5-0ba4db7ce614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.204.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:dd:74:76:89:54:47:d2:0f:70:e6:e6:a8:4e:a3:29:de:f4:
         0c:37:62:ff:7b:be:cc:0f:a1:d4:a8:e6:75:37:d0:49:2c:e0:
         a9:52:b8:a9:c9:46:84:13:bb:ba:74:d4:1d:7d:b6:25:9c:11:
         75:a1:7e:7a:28:cd:18:ee:fc:98:06:54:c8:3a:ce:90:67:b2:
         0b:ce:3b:a7:b3:c4:98:e5:fa:49:89:75:85:fa:f2:14:20:24:
         51:f9:fe:98:95:e1:e0:95:1a:f2:99:5b:e9:90:dd:a4:0b:2e:
         ed:4c:fd:36:08:d8:1a:79:c3:a2:e6:10:6a:9f:6a:6f:43:c7:
         cc:e6:9e:08:b5:e0:a6:f9:e9:7b:9a:13:87:3e:10:4c:c1:98:
         71:05:c4:52:89:e5:6f:48:f4:dc:2f:5a:76:04:fd:e0:48:05:
         3a:b5:4e:e6:e1:74:b9:46:3f:58:86:d3:2c:c6:8a:8e:3c:fe:
         2f:ab:fa:b2:d1:e1:3a:b0:d1:eb:6e:5b:af:de:b2:54:44:bc:
         2c:f6:11:f1:33:a4:0e:36:e5:17:fc:38:08:16:5e:ee:5a:05:
         f9:e6:54:d6:ff:b0:6b:da:0e:09:8b:58:b2:79:19:25:b4:40:
         10:bc:76:6c:a5:2a:a9:de:70:d1:75:8c:7b:86:1d:4c:4c:57:
         16:db:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:21 2024 by rpki-client on console-ams.rpki-client.org