Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/626fa3be-cc4e-33cb-bd8b-bcc061b3b215.roa
File:                     626fa3be-cc4e-33cb-bd8b-bcc061b3b215.roa (raw, json)
Hash identifier:          h6xJle5y8pv3Wn22YQwALYb75o7YAr2A9dSZxtBEbiQ=
Subject key identifier:   4A:40:06:A7:BE:1F:A1:D8:D4:DA:3E:FD:1B:29:FE:B1:4D:82:B9:62
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454906BA9A746DC47A3C322280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/626fa3be-cc4e-33cb-bd8b-bcc061b3b215.roa
Signing time:             Thu 21 Mar 2024 21:33:39 +0000
ROA not before:           Thu 21 Mar 2024 21:33:39 +0000
ROA not after:            Wed 19 Jun 2024 21:33:39 +0000
asID:                     396982
IP address blocks:        34.70.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:06:ba:9a:74:6d:c4:7a:3c:32:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:33:39 2024 GMT
            Not After : Jun 19 21:33:39 2024 GMT
        Subject: CN=0e360cca-c6f6-413e-9e00-4cdadf1de847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:f0:b2:b8:95:89:22:1a:a9:af:f6:96:79:
                    7a:4f:3e:8f:1e:56:2d:bd:df:56:a8:b6:26:98:ad:
                    f3:da:00:89:82:c4:ce:41:99:a6:12:32:ce:4c:f2:
                    18:65:92:69:d1:97:2e:85:cb:8d:73:95:90:9b:02:
                    93:2b:0c:c7:90:e5:09:da:11:d5:28:b7:b3:66:39:
                    dd:e3:2d:3e:cb:0d:8e:37:a3:b8:6b:dd:19:ea:2e:
                    8e:d6:9b:a9:3f:a6:d1:b6:03:31:de:73:c3:dc:84:
                    ee:de:33:c3:11:a9:23:e5:5c:b1:5e:4a:fb:0e:d2:
                    9a:93:9d:1b:a6:ac:f4:54:7f:30:a7:60:49:03:31:
                    58:dd:e4:81:16:ee:cd:e2:52:b9:94:7f:f8:9b:3e:
                    74:77:b2:9e:5a:51:b7:02:6f:20:00:0c:ae:35:c9:
                    f5:b5:ce:fc:e4:cd:78:b9:8c:ea:0b:1b:3d:1e:5c:
                    16:01:98:74:d8:a7:0b:ec:d8:d9:3f:b9:69:57:4a:
                    53:fc:ba:d7:ce:3c:8a:73:38:59:20:eb:4c:06:8e:
                    2a:0d:3b:af:14:69:4d:59:1d:aa:68:96:0d:4f:f2:
                    f0:cd:24:28:5d:04:a5:ca:1d:ec:42:26:1e:b2:0b:
                    8b:ca:6c:e9:28:9a:ae:45:26:01:eb:41:38:2f:78:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:40:06:A7:BE:1F:A1:D8:D4:DA:3E:FD:1B:29:FE:B1:4D:82:B9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/626fa3be-cc4e-33cb-bd8b-bcc061b3b215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.70.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:d3:5d:65:94:e7:9a:56:7b:98:6d:e5:67:b4:45:fd:02:
         8d:76:76:61:76:58:fb:ce:73:49:e4:99:7e:d3:c7:34:7b:e2:
         b3:fb:e6:0d:4d:25:79:78:c4:e5:b0:58:52:eb:96:ca:a6:d2:
         19:2d:b1:54:21:f1:3f:66:e8:ea:f4:b4:f3:be:da:fd:e3:5b:
         b4:90:8e:7d:fa:cc:bb:c9:47:e0:8c:11:99:46:02:1c:79:46:
         c7:99:5e:99:16:f2:02:81:6b:ba:3c:6b:7b:a6:ce:f3:88:d6:
         16:92:75:43:6c:2e:a3:8d:13:fb:f9:e2:e8:68:56:5e:84:dd:
         3f:b2:76:f5:ec:85:e9:17:e1:a3:fe:4d:c3:cc:1d:30:48:d8:
         f0:d4:ff:f0:81:88:60:bb:6e:0c:3e:c6:97:01:e0:64:09:b9:
         ed:10:a2:22:04:20:4c:7d:fb:2a:87:a4:d0:9a:98:e4:e4:9b:
         01:88:b8:62:41:4f:b8:a3:e3:da:2d:4b:81:58:71:ff:58:d1:
         c5:18:df:32:be:3a:c2:45:b5:f4:dc:5d:46:8b:47:ab:6c:0a:
         1b:69:b7:1a:4f:4b:b9:28:38:d3:a6:be:34:f2:23:db:08:4d:
         3c:49:02:c2:c6:0c:bb:00:df:12:fc:93:44:c3:31:89:02:6b:
         04:d6:08:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:35:16 2024 by rpki-client on console-fra.rpki-client.org