Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44a8b039-d5f9-306b-a48f-c692619f6463.roa
File:                     44a8b039-d5f9-306b-a48f-c692619f6463.roa (raw, json)
Hash identifier:          SbK6Kgmj/tIG7nbyteZvFpvSwKjfd2HzOWZPqAQwrxg=
Subject key identifier:   14:47:FE:FD:81:E8:E6:8D:CC:33:9D:32:E0:56:57:F6:C4:6F:AC:67
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490545E81533E74299129C40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44a8b039-d5f9-306b-a48f-c692619f6463.roa
Signing time:             Thu 21 Mar 2024 21:30:43 +0000
ROA not before:           Thu 21 Mar 2024 21:30:43 +0000
ROA not after:            Wed 19 Jun 2024 21:30:43 +0000
asID:                     396982
IP address blocks:        34.94.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:05:45:e8:15:33:e7:42:99:12:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:30:43 2024 GMT
            Not After : Jun 19 21:30:43 2024 GMT
        Subject: CN=012e46ed-8730-40fc-bdd4-e13448c4635d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:4c:a2:0c:c9:d2:06:de:66:fe:2c:09:b2:
                    73:96:60:34:e8:01:8a:90:07:cd:3e:94:90:c5:ea:
                    fb:a1:52:65:d1:fc:3e:5c:07:09:de:ba:7d:5e:85:
                    9d:e6:b1:9b:37:9a:cc:78:8a:96:99:e8:00:ff:1f:
                    9f:26:ed:78:a5:5f:7f:84:6b:8d:2b:19:20:ef:ad:
                    58:66:2c:1c:99:f5:80:ec:46:1b:a9:2d:7d:b2:28:
                    2e:de:51:5b:2e:a8:89:a8:07:a6:ad:8b:c3:7d:fb:
                    b4:c1:5f:1a:2b:22:1d:4f:48:83:93:dc:3c:01:40:
                    49:17:e0:62:e8:32:6c:0a:48:50:fc:c8:b3:57:a5:
                    69:dc:c8:54:a6:5b:a7:47:69:7d:67:a0:19:64:46:
                    31:6e:d6:04:66:8a:45:a4:99:21:6d:2c:d0:e1:bf:
                    0b:d6:ec:6e:a4:a4:1c:67:2a:57:d3:1e:10:4f:85:
                    0d:c3:14:bb:8e:bc:ab:2b:13:58:02:1d:3e:a1:ee:
                    0a:ae:06:f8:b2:d1:83:68:6c:05:fc:9e:69:62:bf:
                    f6:72:8c:5a:a1:a4:88:82:d2:d5:ad:a0:0d:dd:48:
                    3b:1a:e3:b8:1a:52:56:b3:82:04:02:5f:0a:cd:94:
                    ef:2f:b4:f5:74:ef:bf:bb:cd:1e:a0:43:c7:28:1b:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:47:FE:FD:81:E8:E6:8D:CC:33:9D:32:E0:56:57:F6:C4:6F:AC:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44a8b039-d5f9-306b-a48f-c692619f6463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.94.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:bd:39:73:bf:8b:d9:24:c8:51:ec:d9:f3:71:69:ff:12:08:
         b8:da:e9:53:d6:4e:4e:3a:80:91:8a:95:d3:20:ca:28:08:5a:
         2b:08:2c:b7:77:7d:fa:0a:ee:52:6c:e3:b2:39:2a:b0:6f:2b:
         30:51:7c:92:4b:0b:e3:3d:78:65:12:2a:4a:b1:7c:e1:d3:6f:
         fa:6c:d7:0e:c4:72:40:b0:cd:de:35:bc:09:d2:15:1c:f1:fe:
         81:7d:bb:b9:35:a0:42:92:e3:ae:96:dd:2f:3e:88:f0:7e:43:
         23:f9:9b:10:c5:d0:d3:79:bd:a0:bc:78:1a:6b:26:62:be:56:
         95:a7:69:3a:86:97:a7:dc:ae:78:57:1e:c5:01:82:f9:73:54:
         27:93:ff:69:ea:eb:6e:cb:3c:a9:bb:08:12:4d:93:07:71:dd:
         13:0a:32:01:a8:5c:ed:bb:a2:9f:72:be:7a:0b:f5:a0:61:a0:
         95:c0:cc:a0:1a:fa:a2:57:84:93:ce:0b:73:3b:04:48:fa:22:
         87:ac:b3:49:b4:c0:af:e4:ce:b4:6a:0c:41:0c:49:52:10:74:
         fe:bf:8c:e0:30:fc:52:14:78:29:6b:bf:9b:f0:ae:61:a3:df:
         e8:2c:57:18:78:45:7e:fd:8e:79:3a:47:6b:e5:3f:ff:68:3b:
         e1:d0:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:26 2024 by rpki-client on console-ams.rpki-client.org