Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4558b15d-f15a-31e9-bbf4-0279a4a1188b.roa
File:                     4558b15d-f15a-31e9-bbf4-0279a4a1188b.roa (raw, json)
Hash identifier:          0crhNkQSKmb+1PeLtk7W3/tQjSTZ0tN+1Vgww5/u7Dg=
Subject key identifier:   69:81:26:DD:01:AD:84:94:8E:1C:49:04:B2:80:8C:01:3C:EF:90:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FBEDB7565F5717864514C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4558b15d-f15a-31e9-bbf4-0279a4a1188b.roa
Signing time:             Thu 21 Mar 2024 21:11:53 +0000
ROA not before:           Thu 21 Mar 2024 21:11:53 +0000
ROA not after:            Wed 19 Jun 2024 21:11:53 +0000
asID:                     396982
IP address blocks:        34.64.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fb:ed:b7:56:5f:57:17:86:45:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:11:53 2024 GMT
            Not After : Jun 19 21:11:53 2024 GMT
        Subject: CN=79f1c24a-30c1-435f-b8c4-daf1953b67fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:79:18:1f:a2:7b:94:13:39:a0:62:fb:a9:70:
                    5b:63:f0:c5:a9:59:91:1c:1a:af:3d:7a:29:5c:07:
                    6e:21:30:16:c9:b5:3e:27:28:0a:87:d6:81:96:07:
                    1e:99:d7:3c:ad:8f:4f:97:ca:66:6f:aa:0c:63:93:
                    43:4b:ce:61:29:b4:7f:7e:34:40:18:b9:15:e0:ad:
                    df:6f:7f:2b:0e:90:77:6a:03:0a:65:9f:be:e3:f5:
                    df:9d:97:4a:8a:f5:a7:64:ae:64:8d:0b:7e:a6:0f:
                    96:d7:cf:b3:b6:d2:13:b8:ae:64:7d:b8:a4:2c:a3:
                    f2:54:a7:ef:63:15:28:af:95:b2:54:80:74:5f:c5:
                    d3:4a:c4:61:55:77:4c:1f:a3:6e:1b:30:be:27:a6:
                    72:57:e7:38:e7:09:b6:b6:db:84:e9:c0:71:c2:de:
                    8c:2a:06:f7:1e:10:23:ed:a7:fc:25:c0:ec:c5:18:
                    06:3c:38:94:fa:f6:6d:cd:cd:e1:30:7e:e6:b1:ac:
                    ab:dd:7a:e5:fd:38:ff:31:60:c3:f8:00:2d:df:da:
                    85:b5:38:f3:c0:82:24:32:14:08:d1:bb:3a:2f:f8:
                    d1:90:67:bf:43:7c:86:aa:26:a0:77:76:26:04:9d:
                    17:76:23:c3:f7:ad:93:15:22:2e:48:e2:40:01:e0:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:81:26:DD:01:AD:84:94:8E:1C:49:04:B2:80:8C:01:3C:EF:90:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4558b15d-f15a-31e9-bbf4-0279a4a1188b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.64.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:9e:d8:4e:f0:2e:2c:60:ad:f2:d2:80:34:7d:e0:69:54:
         1b:9f:b1:d1:f2:d8:a0:4f:7c:88:ee:2a:31:6e:4f:1a:63:52:
         80:45:6a:06:13:47:ad:d5:22:be:4c:69:33:07:67:24:f3:92:
         95:51:a1:b2:b0:44:79:e3:55:94:72:ae:b7:cc:1b:b5:bd:2a:
         c5:4c:7d:e5:9f:83:7d:1f:42:a7:ee:22:ab:9b:87:24:7d:1d:
         2b:68:54:38:60:1b:a7:91:1b:36:15:2a:78:24:fe:50:96:1d:
         5e:76:85:03:3f:4e:1c:f7:b0:01:1e:d1:c6:b9:f1:ad:83:48:
         db:37:62:e2:86:40:86:66:25:88:db:1c:53:25:e8:4a:03:df:
         9f:4c:c3:5a:8c:62:ad:00:cf:46:38:91:1c:03:77:8e:37:af:
         b7:2a:cf:dc:80:ea:87:2f:cf:0a:97:86:54:4a:27:e2:d6:19:
         37:24:77:17:34:b0:9d:0d:6c:64:8b:51:3b:7c:cf:79:54:e9:
         b1:8b:f0:74:66:83:57:f9:da:2c:e6:02:07:78:4a:3f:73:0e:
         d1:c7:db:7a:14:ce:0f:b9:0f:74:c7:2c:2f:1c:7a:5f:c0:bb:
         bf:89:a3:52:89:fe:e9:69:d8:6f:79:b3:d8:19:3b:5d:45:b0:
         8d:67:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:15 2024 by rpki-client on console-fra.rpki-client.org