Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58689ecf-b76c-3838-a357-ce037f3b4a37.roa
File:                     58689ecf-b76c-3838-a357-ce037f3b4a37.roa (raw, json)
Hash identifier:          DhQtfPaiB2FRDJgnBMBQ7TRmP5r9og+/eJi2tQ58Xv8=
Subject key identifier:   B5:05:EB:49:51:A0:C9:CC:E7:31:E0:4C:FA:83:36:44:99:32:D8:84
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490B28D5DE7F09478ABA16C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58689ecf-b76c-3838-a357-ce037f3b4a37.roa
Signing time:             Thu 21 Mar 2024 21:42:34 +0000
ROA not before:           Thu 21 Mar 2024 21:42:34 +0000
ROA not after:            Wed 19 Jun 2024 21:42:34 +0000
asID:                     396982
IP address blocks:        34.126.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0b:28:d5:de:7f:09:47:8a:ba:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:42:34 2024 GMT
            Not After : Jun 19 21:42:34 2024 GMT
        Subject: CN=2fdb4362-1ae5-4009-a51b-da7a36f3e97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:cd:9e:e0:e3:32:3b:8b:19:23:cf:b6:b6:
                    dc:9c:f8:3f:99:c2:ea:63:31:e6:e2:ba:ef:18:ab:
                    56:57:af:a3:1e:cf:9a:ae:84:c7:ef:db:be:fe:f9:
                    b3:9e:99:a9:70:e2:05:3c:16:7e:de:05:51:52:99:
                    03:46:29:1b:20:89:11:79:b3:1f:7a:d4:b6:de:44:
                    00:f1:0f:99:d6:47:54:a0:17:47:05:71:41:60:79:
                    fb:8b:25:4b:b1:61:2a:77:b8:73:b6:6f:88:a4:61:
                    0a:ad:83:7f:3b:9f:a9:4b:25:48:f1:e3:bc:72:e2:
                    72:b2:2c:82:c4:1e:04:af:26:cc:70:e4:f7:06:c9:
                    7c:d2:a8:f7:21:6f:9e:4b:95:ce:1f:f1:ec:0c:7e:
                    ea:5e:34:c9:8f:82:2a:b3:56:24:1d:0f:83:82:8c:
                    17:73:e0:5e:65:6a:5e:b4:bb:e7:8b:dc:27:42:ff:
                    24:f0:8f:b5:32:5b:24:d8:10:1b:da:f8:36:5e:c0:
                    6a:ed:27:1e:d0:47:7d:d6:aa:be:69:b6:6c:e0:af:
                    66:88:f4:23:c7:dc:94:b3:62:ef:98:d2:4f:00:7b:
                    7a:67:6c:52:00:73:cd:5c:5e:bb:43:e2:c9:4f:be:
                    12:3f:fd:84:ec:3d:91:ea:3c:8d:9b:17:48:e1:4a:
                    dd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:EB:49:51:A0:C9:CC:E7:31:E0:4C:FA:83:36:44:99:32:D8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58689ecf-b76c-3838-a357-ce037f3b4a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.126.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:2c:c6:c9:1d:33:46:48:0e:1f:57:6a:bb:25:27:55:6a:80:
         4f:37:17:9f:6b:af:95:70:f1:75:b9:b2:b2:0d:82:7c:4e:23:
         70:e7:df:0b:1b:60:f8:4e:26:e9:63:f7:ee:32:91:82:47:58:
         d7:17:09:e9:9b:7c:5e:e9:3a:63:d9:32:6f:33:71:75:a5:b6:
         81:36:97:d8:ce:5d:0b:8c:85:cc:f0:6c:d5:2a:e7:97:79:7d:
         7a:96:79:85:78:ea:44:87:97:82:c5:7d:ac:33:56:dd:5a:a7:
         87:0e:9b:67:03:98:15:e1:8e:72:82:53:0d:ae:ed:d5:ad:bd:
         f5:bb:0b:3f:bb:ff:1f:ba:ec:35:6b:05:90:79:67:03:9e:f4:
         a9:81:af:8b:82:29:fb:7f:61:31:ef:85:a4:55:59:71:39:cb:
         6b:02:50:9d:61:fa:71:5c:9c:27:30:c4:a4:ff:bc:c0:f1:63:
         96:81:6e:5a:02:3b:a3:2a:4d:7d:58:d3:3a:89:b0:40:b3:49:
         6e:3e:aa:2f:b5:0f:bf:30:b5:6c:11:3d:16:cf:7a:e5:b0:df:
         46:63:1c:5d:70:fd:9c:a8:84:95:2a:d9:37:97:09:ce:bd:db:
         68:59:fd:cf:63:aa:c4:c5:97:0e:77:f0:43:2a:5f:e0:5f:3d:
         3b:e7:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:22 2024 by rpki-client on console-fra.rpki-client.org