Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3547953e-b284-3355-b944-705652c836b2.roa
File:                     3547953e-b284-3355-b944-705652c836b2.roa (raw, json)
Hash identifier:          ES+m7qnWICFILob6QZrr81qBPy/0qEWJpLhTPEEyHeU=
Subject key identifier:   C9:6A:E1:08:EB:1B:DB:54:E9:24:09:D6:B9:F3:54:61:78:D5:C8:EE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454905BE9786692ED46020A0C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3547953e-b284-3355-b944-705652c836b2.roa
Signing time:             Thu 21 Mar 2024 21:31:40 +0000
ROA not before:           Thu 21 Mar 2024 21:31:40 +0000
ROA not after:            Wed 19 Jun 2024 21:31:40 +0000
asID:                     396982
IP address blocks:        34.129.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:05:be:97:86:69:2e:d4:60:20:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:31:40 2024 GMT
            Not After : Jun 19 21:31:40 2024 GMT
        Subject: CN=af77140d-7e70-44ea-b9b7-f14f32a92632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:f8:e2:ae:ce:8a:a0:3f:eb:18:71:d5:21:
                    fe:28:33:35:43:4e:c7:d7:a6:c8:02:73:dc:04:ec:
                    d7:db:0e:1c:8b:78:df:cf:8c:b6:01:2c:68:45:bc:
                    73:d7:f0:fc:8d:e7:b4:42:86:4e:d6:09:d0:ba:2a:
                    41:cf:e2:d3:1e:4c:cc:d8:9c:44:1b:d0:e0:44:d3:
                    1b:81:b3:18:65:ae:7d:e7:5b:0a:d7:f8:92:5d:9c:
                    ce:c7:44:c2:c5:fc:fd:06:f9:69:4b:6a:b1:d9:19:
                    5f:61:54:a4:27:ed:1a:46:7e:cf:1c:60:f0:06:16:
                    1f:2f:64:c1:cd:8a:4b:84:03:71:c9:fe:e3:b2:55:
                    ef:e2:15:6a:ed:b8:27:67:16:60:88:4b:11:55:ef:
                    cd:5b:94:0d:0f:0c:49:99:ae:64:72:ad:09:68:68:
                    8a:9b:1a:ad:29:fe:88:54:22:6e:b6:24:64:2c:4b:
                    f1:ba:80:60:a7:87:d9:f6:09:b5:66:a7:63:f0:5d:
                    43:83:b7:e5:4d:5f:28:3c:87:f3:66:5a:af:da:19:
                    a5:8d:7c:86:c4:d0:c5:22:cb:a9:15:3f:32:67:99:
                    a5:3d:6b:f5:75:33:de:a7:12:d4:7f:bb:58:a2:15:
                    d9:db:c1:31:0d:1c:35:9a:d4:9e:ce:8d:db:49:53:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6A:E1:08:EB:1B:DB:54:E9:24:09:D6:B9:F3:54:61:78:D5:C8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3547953e-b284-3355-b944-705652c836b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:45:c7:bf:49:5e:de:d2:61:fe:48:04:20:ea:3c:b1:a9:95:
         2c:27:13:d0:9a:5b:47:4e:4b:e5:ad:d5:7f:1d:d6:37:14:ba:
         07:73:c9:09:99:13:0b:ed:d5:cc:27:b3:e1:10:55:2e:1a:dd:
         66:96:63:fd:e3:e0:93:07:d3:c0:1f:32:3d:c3:a0:75:f0:ba:
         0f:ed:12:9c:4c:d1:4c:21:0a:87:ed:98:fa:3e:14:2c:24:c3:
         c6:df:03:b9:1c:98:3e:2c:c3:23:0a:89:63:8c:4c:e9:50:aa:
         65:d6:87:ab:94:45:5f:3d:11:51:54:c0:36:e4:24:a8:9c:6e:
         6c:87:f0:01:e2:2f:cb:e1:cd:34:94:83:d4:37:31:27:25:34:
         28:f1:d7:62:7f:c0:cf:03:bd:9b:cd:67:52:fc:7d:36:84:89:
         f7:00:66:b2:23:24:38:33:95:40:12:43:74:0b:40:b9:4c:c3:
         92:86:4e:72:ce:ad:bc:5a:5d:fb:68:39:ad:c0:5b:99:37:4c:
         b9:9b:5e:8c:32:98:29:b8:e5:54:c1:7d:12:91:bc:b8:ad:b7:
         79:1f:6b:fa:23:74:0d:fe:69:07:43:85:6b:8c:6c:90:df:74:
         6a:67:d5:a3:c1:cc:0d:c2:c7:a3:92:f7:98:94:c1:ab:25:ea:
         88:ec:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:34:58 2024 by rpki-client on console-fra.rpki-client.org