Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53ac9ba7-516b-3532-9a22-18594ccc15a1.roa
File:                     53ac9ba7-516b-3532-9a22-18594ccc15a1.roa (raw, json)
Hash identifier:          uWy7xJz7P6s80BL9IMl2N2a2IHgHeA3/awr+BouXQKk=
Subject key identifier:   A7:E0:0D:58:D6:6F:40:16:2D:B0:DC:48:A1:1C:B6:99:A2:FC:D6:25
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490806D41F8D237192ED5440
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53ac9ba7-516b-3532-9a22-18594ccc15a1.roa
Signing time:             Thu 21 Mar 2024 21:36:15 +0000
ROA not before:           Thu 21 Mar 2024 21:36:15 +0000
ROA not after:            Wed 19 Jun 2024 21:36:15 +0000
asID:                     396982
IP address blocks:        34.144.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:08:06:d4:1f:8d:23:71:92:ed:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:36:15 2024 GMT
            Not After : Jun 19 21:36:15 2024 GMT
        Subject: CN=6ce79018-32e2-4671-a1d5-c01a7fce4dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:9b:15:80:d7:7c:03:d1:ff:04:0c:5a:4b:
                    1f:bb:45:09:78:36:b6:93:b3:06:90:b8:19:50:0d:
                    35:1c:20:3b:87:fc:b2:b6:85:84:a4:d2:e4:bd:ec:
                    ed:41:13:f1:cf:f5:b3:a8:49:e8:8e:8d:e9:03:15:
                    51:12:3e:e8:1e:f4:f2:19:58:d3:af:ce:52:af:cc:
                    1a:00:ce:a3:4c:e0:f0:1d:d3:c9:aa:5a:92:e4:c9:
                    41:30:3a:b2:7b:fd:ce:3a:46:95:1b:f5:4c:76:3c:
                    f4:4f:1d:81:33:98:c4:7a:e5:3a:a0:2f:29:4c:48:
                    ba:b0:92:42:e2:a9:31:d2:54:02:d3:74:89:20:5d:
                    d2:5b:cd:98:e3:7e:db:de:11:86:98:a2:50:c8:7b:
                    2f:2e:38:ae:ad:e5:53:6c:44:14:51:9b:7e:5b:b5:
                    db:e6:3c:99:4e:77:e6:16:92:1d:3b:05:9d:2d:bf:
                    77:8d:24:a7:bc:32:46:22:53:15:0a:4a:21:c1:68:
                    a9:44:27:bb:c4:54:92:a3:d2:ab:18:21:cd:48:e4:
                    65:ec:c1:85:94:e4:b0:dc:bb:00:f4:26:91:b6:86:
                    1d:33:63:e0:50:87:d2:95:ca:45:81:ba:6f:f4:e9:
                    33:3b:a5:18:c3:02:4b:3d:6a:8f:6e:11:ae:68:1f:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:0D:58:D6:6F:40:16:2D:B0:DC:48:A1:1C:B6:99:A2:FC:D6:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53ac9ba7-516b-3532-9a22-18594ccc15a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2c:5b:db:df:04:6b:91:64:e6:8a:2a:d6:c5:38:22:62:4b:
         4c:fc:b2:30:a7:10:5c:6c:84:a1:9c:ea:8a:72:68:31:ea:1a:
         3a:a2:e7:79:a7:25:33:7e:37:16:4b:cb:1e:48:0f:f0:85:84:
         c9:56:77:81:ef:39:07:0a:27:10:3f:c6:8f:a7:ce:4a:ca:f7:
         5d:80:61:d2:a2:46:b6:a1:31:b3:e5:e0:8d:41:2f:a4:47:6e:
         f1:7d:e4:d5:e8:a8:69:21:3d:18:f9:dc:26:04:7a:fc:db:bd:
         50:33:3d:00:8b:f1:27:29:a7:db:c8:5c:2c:5f:05:a6:c3:08:
         8d:7f:1d:33:db:0d:5a:18:a6:92:b7:68:3f:22:64:f2:70:38:
         48:5d:9c:76:8b:d4:0e:c7:e4:44:a9:0c:c8:14:86:e1:14:83:
         6a:ed:36:af:24:b3:08:a4:a4:26:13:ed:37:56:26:3e:02:31:
         0e:00:d1:8e:25:e2:e3:84:82:72:a0:b4:a0:f4:4e:4a:4c:cf:
         86:02:9b:20:70:01:36:ba:93:27:c6:4c:6a:15:7a:03:0b:dd:
         f8:82:bf:0e:61:e6:f5:29:fa:4f:85:9b:e9:39:97:38:07:44:
         fa:1d:01:e6:e2:ea:a2:ba:c9:f7:9b:d0:12:9d:3b:71:97:8b:
         5b:ed:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:07:51 2024 by rpki-client on console-ams.rpki-client.org