Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44b84c45-6b44-3064-97a5-840e10be1c91.roa
File:                     44b84c45-6b44-3064-97a5-840e10be1c91.roa (raw, json)
Hash identifier:          LHwxhby1wFGqi5MQ4OpEN3pJvboL6OsLhRUcoD/tQqw=
Subject key identifier:   08:7F:80:76:FB:FB:AD:B0:D8:A1:63:1A:6F:C7:6A:11:B0:61:EE:1B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462B0D258945D5E44C3D1600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44b84c45-6b44-3064-97a5-840e10be1c91.roa
Signing time:             Wed 20 Mar 2024 20:59:24 +0000
ROA not before:           Wed 20 Mar 2024 20:59:24 +0000
ROA not after:            Tue 18 Jun 2024 20:59:24 +0000
asID:                     396982
IP address blocks:        34.104.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2b:0d:25:89:45:d5:e4:4c:3d:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:59:24 2024 GMT
            Not After : Jun 18 20:59:24 2024 GMT
        Subject: CN=f0be3085-208f-4363-9709-4a9d844fd274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c8:48:3a:f1:3b:01:38:61:82:aa:dd:ae:56:
                    cd:2b:63:a6:a0:7c:84:b2:e7:67:12:03:09:40:8a:
                    18:fa:89:60:10:39:83:b7:3f:b5:24:2f:48:4c:39:
                    af:0b:30:90:df:a3:8d:41:81:c5:2a:1d:ba:d6:b9:
                    f5:e8:d4:e5:99:77:ec:f1:f8:61:97:6c:22:ae:d4:
                    e8:45:6a:8c:9e:e2:1f:e5:79:94:03:8c:a2:86:18:
                    f9:f3:ae:d4:4f:6c:cc:e7:36:0e:76:5c:e5:86:10:
                    d7:d5:a3:48:5e:72:3c:c8:26:9f:5f:d2:09:ee:af:
                    0f:f3:02:22:68:2c:df:a2:d5:ed:80:1d:c9:a6:52:
                    1f:d1:22:9c:96:79:4e:d7:57:4e:59:8d:b5:b4:90:
                    99:fc:58:8a:d6:84:60:01:d2:57:a8:6a:d0:62:7f:
                    9c:02:fe:3a:28:ea:e9:da:1f:3e:21:2b:06:de:d5:
                    85:a5:8f:df:d5:2d:66:56:69:52:d9:5e:7e:50:52:
                    83:e6:2a:bf:2d:0d:a4:5b:c0:27:79:93:c7:5b:0e:
                    9c:98:9f:6b:98:5f:3e:de:9a:e7:4f:dc:44:f0:a9:
                    1c:2a:df:ef:14:16:fa:ce:de:e3:0b:ef:d7:81:76:
                    2f:c0:e5:01:0d:24:a7:6c:e8:f0:37:63:f0:c1:b7:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7F:80:76:FB:FB:AD:B0:D8:A1:63:1A:6F:C7:6A:11:B0:61:EE:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44b84c45-6b44-3064-97a5-840e10be1c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:85:a6:68:a2:19:55:3f:e9:99:7a:d2:58:0e:ad:1d:0c:4a:
         d9:75:a9:dd:b4:43:08:c7:43:dd:70:b7:ef:ae:57:0b:18:b3:
         f0:72:d5:fe:b9:96:18:39:6a:e7:70:22:65:9e:2a:c2:c9:24:
         15:45:7f:28:47:84:07:ad:78:61:33:02:e4:3c:52:b2:bb:ec:
         10:36:c6:06:71:03:06:39:73:ab:ba:5e:4d:0e:95:aa:9d:bb:
         b5:0a:a1:3f:3a:dc:57:01:50:1f:e4:b2:f2:a8:eb:01:47:35:
         4f:12:d8:45:48:ff:67:9c:28:07:41:02:10:7f:18:9c:29:f9:
         e1:fc:19:12:02:e9:77:0b:6e:5b:81:08:37:2a:0e:20:eb:1f:
         cd:80:31:fe:0c:db:6f:c1:87:99:56:59:ee:cb:2b:03:73:8a:
         c1:f2:b5:d0:f1:63:ef:02:f8:d4:79:61:07:18:7b:3f:f6:76:
         90:b8:28:62:76:66:40:20:dd:25:3c:84:e6:a8:27:6b:a7:df:
         4d:1e:2d:7f:f1:bd:91:0d:45:da:47:c1:d8:d9:f8:75:07:90:
         22:da:8e:19:d3:41:95:aa:67:af:cd:ad:a1:76:73:53:fd:72:
         50:4b:ee:13:a3:97:b0:24:31:5d:a3:e1:51:dc:be:75:4a:78:
         1d:d8:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:49:10 2024 by rpki-client on console-ams.rpki-client.org