Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e333209-13e7-3857-a87b-a955e6954bfd.roa
File:                     5e333209-13e7-3857-a87b-a955e6954bfd.roa (raw, json)
Hash identifier:          RWgrwdsbv82Lfnnzbom7g+qb2huNnuA51U3/XREmXLs=
Subject key identifier:   65:2F:94:02:21:27:96:70:15:B4:04:45:1E:26:3D:6C:E8:E9:31:79
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F04D1F59817BED537AF3400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e333209-13e7-3857-a87b-a955e6954bfd.roa
Signing time:             Fri 29 Mar 2024 18:37:35 +0000
ROA not before:           Fri 29 Mar 2024 18:37:35 +0000
ROA not after:            Thu 27 Jun 2024 18:37:35 +0000
asID:                     396982
IP address blocks:        34.168.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:04:d1:f5:98:17:be:d5:37:af:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:37:35 2024 GMT
            Not After : Jun 27 18:37:35 2024 GMT
        Subject: CN=b17f31ae-ba28-4550-86d5-a3d2e59915a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:4e:d2:9f:a9:ec:1a:ae:aa:6e:d0:97:bf:
                    20:a6:fa:20:e1:d1:c7:ef:6b:74:e7:05:57:c5:95:
                    5d:7f:6c:16:03:22:f4:15:98:bd:1c:36:99:1e:c1:
                    ba:dd:67:6e:e1:02:78:62:57:af:b0:94:05:ed:c1:
                    16:91:49:3a:42:d8:cd:b9:32:16:23:23:22:d7:81:
                    7a:b4:c2:e7:e9:05:cd:b5:6f:64:f5:9e:1c:f7:e5:
                    5f:34:c5:0e:5e:28:fa:1f:3b:a9:e2:44:63:b4:dc:
                    78:20:89:39:40:ef:65:a2:f2:fa:c6:1a:f6:70:81:
                    6e:31:4e:0d:d9:ea:f6:6a:13:a4:1c:e9:c9:4d:95:
                    c5:d1:38:54:44:0b:53:ab:44:a7:c1:38:64:6b:45:
                    e3:96:39:5e:c8:aa:50:9d:6b:18:a3:a0:59:ab:b9:
                    c6:95:c0:32:01:33:a9:ef:ac:9b:ca:66:8e:fc:09:
                    c7:c9:7e:bb:c3:48:d6:b9:13:ca:9b:0b:13:9a:5d:
                    f3:07:56:f1:b9:c5:2a:d9:6c:bf:a3:16:e3:2a:97:
                    da:fd:38:8d:1e:8e:f1:82:1e:b7:0a:78:1f:47:96:
                    1a:02:6e:3d:c6:a6:85:ec:85:b5:c1:5d:7f:d3:5a:
                    85:4b:51:39:bc:4f:24:ae:7b:12:6a:68:d8:a2:f1:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2F:94:02:21:27:96:70:15:B4:04:45:1E:26:3D:6C:E8:E9:31:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e333209-13e7-3857-a87b-a955e6954bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:18:d1:0b:69:15:0a:81:c2:fb:d4:9b:f4:3f:dc:69:fa:
         fa:c6:6a:2a:ff:1e:31:c2:9e:8c:aa:23:55:25:30:08:ae:62:
         59:7e:07:27:97:9c:80:54:7f:e1:51:2b:7a:d1:a7:d0:f0:43:
         4b:7b:a2:f3:c9:dd:e5:41:ca:de:59:d7:12:f2:c6:44:f5:73:
         69:97:71:17:89:46:2c:85:d4:60:15:b4:53:ad:c6:fb:88:75:
         13:62:52:13:04:ba:7f:ec:f4:a6:8b:ff:3f:30:82:de:8f:89:
         4c:ca:2f:64:87:3c:01:56:57:23:38:fa:1b:da:17:2a:9f:fb:
         fd:dc:78:c9:bf:7f:50:92:b5:53:a7:47:ab:47:78:5d:09:02:
         73:79:d3:65:c9:3e:7d:95:30:70:c6:0d:66:f9:ac:c2:5b:2a:
         48:29:f2:04:a4:0b:45:7a:87:5b:d9:0d:03:58:0b:ac:72:c5:
         57:84:bf:9c:f4:e4:0f:c4:47:cd:32:66:ba:a6:fa:eb:6f:be:
         c3:58:09:f3:f3:6f:e5:8b:01:08:f8:3b:77:11:70:f0:94:cd:
         94:5d:5c:b6:59:bc:ad:68:af:41:65:34:48:05:c8:db:f6:2d:
         0a:b5:f3:3c:2f:df:f3:e5:5c:88:0d:32:f6:af:77:87:17:30:
         e5:78:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:24 2024 by rpki-client on console-fra.rpki-client.org