Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4a30d11c-5a7e-3eb7-9a8a-e4699e19ef54.roa
File:                     4a30d11c-5a7e-3eb7-9a8a-e4699e19ef54.roa (raw, json)
Hash identifier:          DjZPIuC9xoKWNtETtqqeoiolOhZq9RH+gpNiyZOuLLA=
Subject key identifier:   B1:56:6E:5F:8E:26:6D:E2:D4:12:E6:61:60:9A:59:5A:3B:0F:1C:36
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F061EDE57C14886607C86D0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4a30d11c-5a7e-3eb7-9a8a-e4699e19ef54.roa
Signing time:             Fri 29 Mar 2024 18:40:12 +0000
ROA not before:           Fri 29 Mar 2024 18:40:12 +0000
ROA not after:            Thu 27 Jun 2024 18:40:12 +0000
asID:                     396982
IP address blocks:        34.137.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:1e:de:57:c1:48:86:60:7c:86:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:40:12 2024 GMT
            Not After : Jun 27 18:40:12 2024 GMT
        Subject: CN=6ee13b9c-07c3-41f7-a0d1-d207823535a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d2:94:c1:ad:7f:eb:98:1a:1a:fa:46:90:b6:
                    af:0a:5c:f5:72:dc:81:e2:9e:9c:c1:fb:a9:d0:41:
                    6a:38:7c:55:20:6a:fb:1a:eb:1f:9b:16:53:b7:4e:
                    60:17:86:0d:ed:08:d1:90:2d:4c:9f:4e:0e:56:74:
                    ef:1e:e5:5a:80:85:ce:45:a5:e8:18:cf:94:41:29:
                    15:52:f8:01:64:32:5f:be:4b:5e:24:2d:ef:b3:12:
                    23:90:81:f5:98:eb:b7:28:49:dc:f9:fa:94:8c:7b:
                    b8:a0:a7:25:5c:0f:67:ab:61:26:68:49:f0:e0:68:
                    28:c3:30:56:3b:57:b2:2f:b4:00:a5:da:56:01:22:
                    0e:53:f9:0f:d6:b6:0b:8c:62:41:1c:26:b5:67:df:
                    df:7b:5e:40:15:2b:07:34:77:b6:0e:e6:c2:03:a8:
                    f9:b2:e4:40:d2:01:3f:c8:d8:79:48:89:c6:d0:cf:
                    5b:96:ec:4d:55:5b:ff:db:4a:4e:05:1e:cb:9d:20:
                    f5:e3:81:d4:7f:16:39:e9:1b:52:70:77:d3:3f:3f:
                    96:c7:4a:b6:ea:00:42:c1:e0:a6:81:a6:45:51:41:
                    d4:6d:30:9c:bb:77:cb:20:fc:7a:31:4b:0b:c9:8a:
                    fb:4b:3b:de:a6:bc:73:1a:c6:73:75:ad:d9:6e:d2:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:56:6E:5F:8E:26:6D:E2:D4:12:E6:61:60:9A:59:5A:3B:0F:1C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4a30d11c-5a7e-3eb7-9a8a-e4699e19ef54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.137.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:bc:d0:88:ea:fc:cb:80:fa:5a:ac:1c:18:a2:c6:e1:16:1b:
         58:9f:df:46:f6:c2:9b:3b:89:12:27:85:21:4f:41:4d:16:a4:
         6c:1d:42:c2:cf:bb:23:22:98:eb:46:aa:3c:c4:3c:96:dd:c8:
         2b:cc:36:16:2f:d6:09:06:58:98:b7:4c:5e:97:5f:e1:d1:e4:
         4e:43:99:0d:93:b4:ff:e7:8b:71:a4:29:b5:d4:4b:8f:b4:88:
         03:33:84:f9:11:c3:c7:db:f8:85:d9:1d:90:99:82:e0:6c:68:
         43:d7:ef:65:3e:b8:46:b5:9b:73:68:02:53:27:72:52:fa:3f:
         0d:ce:34:7d:a3:e4:60:da:4a:df:53:a7:42:ea:94:dc:9e:b1:
         f0:99:e6:dc:f9:29:11:94:e9:90:85:2b:d0:79:36:b5:f7:95:
         2f:19:d1:3e:14:51:64:7e:f4:ac:7e:cf:01:9c:5d:6b:e8:47:
         cd:37:db:f2:d9:c3:1d:7b:23:01:dd:04:95:d8:44:7a:77:8c:
         9b:93:e2:cb:d3:fb:cd:3f:e0:64:94:60:d1:99:6a:be:56:ab:
         31:0b:c2:b4:60:12:f2:2d:5c:da:f7:00:d0:8a:89:ec:82:63:
         3f:db:a7:70:08:4d:cc:0e:4f:b0:7c:cc:02:df:f4:f0:92:73:
         af:45:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:35:07 2024 by rpki-client on console-fra.rpki-client.org