Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/56c851ec-2ab3-34e1-b081-9868f7089d87.roa
File:                     56c851ec-2ab3-34e1-b081-9868f7089d87.roa (raw, json)
Hash identifier:          pN2ObSyvzjXaiQrbLqN5IQJXHH3FkLer1yOVTo5GXy8=
Subject key identifier:   0A:90:53:61:3B:A6:41:5C:9E:5F:6A:5F:14:A7:81:2B:6A:8D:BD:26
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454900A7B1339348CA94EE8C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/56c851ec-2ab3-34e1-b081-9868f7089d87.roa
Signing time:             Thu 21 Mar 2024 21:21:24 +0000
ROA not before:           Thu 21 Mar 2024 21:21:24 +0000
ROA not after:            Wed 19 Jun 2024 21:21:24 +0000
asID:                     396982
IP address blocks:        34.139.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:00:a7:b1:33:93:48:ca:94:ee:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:21:24 2024 GMT
            Not After : Jun 19 21:21:24 2024 GMT
        Subject: CN=c35e3855-1da5-42b1-b2ba-53503d1df53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6c:a6:2b:1e:30:c6:4b:5f:a3:c1:ef:c2:93:
                    8d:27:9c:2e:83:57:64:45:92:28:05:8d:c3:b0:13:
                    7c:5e:5a:2d:b2:ca:3b:b6:e2:59:87:1d:98:0a:a0:
                    e4:13:d5:b6:08:ec:10:4f:8f:27:5d:28:e4:bc:34:
                    4e:da:b8:b0:47:7a:ef:f5:db:13:82:e9:13:3c:f3:
                    f1:ca:3e:9d:53:ba:a1:c3:62:c8:71:27:98:7f:45:
                    97:57:73:fa:2c:d9:7d:9a:a7:e4:5c:ee:54:98:3c:
                    25:eb:07:79:46:5a:9f:bc:54:29:bc:f6:1e:33:07:
                    61:15:4b:09:7d:08:04:50:8f:95:74:8d:96:76:76:
                    fa:b7:52:f5:8a:25:45:ea:8a:90:58:89:33:59:38:
                    2a:3f:0c:5d:a1:74:9e:c2:36:7f:d4:f9:0e:63:c2:
                    aa:d6:5a:36:0e:2f:df:02:b5:1d:4a:58:e1:eb:eb:
                    80:ae:3d:12:1d:09:59:22:e0:56:a7:67:49:a9:33:
                    2f:52:69:b8:f8:af:c6:41:cf:85:d3:7b:8f:38:4c:
                    96:f4:56:d9:90:11:8a:00:be:d1:d7:68:f9:f6:f3:
                    0c:95:d3:b5:e9:5d:16:4e:22:a6:38:58:49:6e:b6:
                    c8:de:aa:74:e4:53:5d:cd:ff:90:b9:c4:1c:1f:ff:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:90:53:61:3B:A6:41:5C:9E:5F:6A:5F:14:A7:81:2B:6A:8D:BD:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/56c851ec-2ab3-34e1-b081-9868f7089d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.139.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:18:d7:ae:c2:1a:7c:0e:a3:2d:ed:e5:4f:7e:ac:5b:69:b5:
         59:1d:89:69:0d:36:4d:67:ac:ac:b5:bf:99:1a:a7:37:98:15:
         84:fe:14:28:e2:ea:24:53:d3:4c:cb:4b:b5:5b:65:42:00:6a:
         ee:10:33:fc:33:6c:bf:7f:72:64:58:7e:9d:7e:c8:b3:2d:18:
         29:20:c8:b4:dd:3b:e9:3a:34:bd:ea:f2:08:b4:6d:dc:68:6d:
         dc:9e:50:c4:c0:c6:83:aa:33:a9:df:5a:3a:5c:c2:17:fe:a9:
         82:a5:e8:af:66:21:35:e6:b5:4c:25:f4:94:24:78:ca:e8:80:
         98:4e:21:d8:04:93:54:d0:1c:1f:47:e0:c5:81:a1:b4:7c:c4:
         3c:fe:8c:8a:d3:c7:db:9c:67:f7:3e:5f:a6:90:69:b4:3f:7d:
         f9:34:4f:d6:12:e6:a4:c4:44:79:a7:04:1b:e1:a5:5d:e9:63:
         23:a1:46:80:d7:70:fe:72:e6:29:75:c1:a5:3b:ca:e1:1d:a7:
         0a:a1:94:49:7c:f2:81:5e:0e:44:53:2e:7a:4f:11:d7:09:4a:
         d2:a2:a4:57:67:f6:bf:cf:62:d4:34:88:a9:4b:ac:dd:20:47:
         68:a3:03:20:19:ca:e1:ac:2c:9b:76:ae:1a:a1:7f:44:25:26:
         c3:1c:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:21 2024 by rpki-client on console-fra.rpki-client.org