Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63ce8947-b33c-387a-815f-520f18856d41.roa
File:                     63ce8947-b33c-387a-815f-520f18856d41.roa (raw, json)
Hash identifier:          L50L+ZPwBOXsa3M1GJCOqUQ/jMqsnlq2+ZRm/FMA554=
Subject key identifier:   BD:38:2C:66:7F:CB:C2:EF:D4:4F:DB:39:0C:29:0C:67:80:47:51:D2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454908AE5ADA3D43CC5FBB9100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63ce8947-b33c-387a-815f-520f18856d41.roa
Signing time:             Thu 21 Mar 2024 21:37:35 +0000
ROA not before:           Thu 21 Mar 2024 21:37:35 +0000
ROA not after:            Wed 19 Jun 2024 21:37:35 +0000
asID:                     396982
IP address blocks:        34.94.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:08:ae:5a:da:3d:43:cc:5f:bb:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:37:35 2024 GMT
            Not After : Jun 19 21:37:35 2024 GMT
        Subject: CN=d3a6a96e-bf0f-4bf4-a1ea-b39e2bea515d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b6:3c:24:dd:30:92:a6:e5:0f:c4:cf:91:7a:
                    d5:36:d9:05:5c:22:48:f3:05:f9:c4:c7:d4:43:ba:
                    8b:e3:43:c3:a0:a2:81:e4:ff:39:de:16:92:11:5e:
                    7b:9b:67:cc:46:2b:eb:fa:4e:33:09:3b:2e:cb:7d:
                    d0:48:a5:64:a3:a5:3c:c7:f1:ce:22:ce:57:9d:d9:
                    a2:ec:e8:47:32:d1:81:4c:c6:9e:4c:7b:01:64:da:
                    26:c7:84:6e:ed:af:ce:87:fb:0f:30:27:38:38:10:
                    5e:20:3e:e8:94:27:16:81:ec:c2:d9:70:d2:14:aa:
                    32:28:11:1a:95:25:99:f5:8b:0e:5d:5e:87:f1:7f:
                    75:c1:08:0a:0e:6b:a4:d2:f8:2d:de:9f:0b:24:1c:
                    10:a6:20:b5:c6:e7:df:8c:09:11:c3:fb:37:4c:d8:
                    a5:02:a4:8d:93:a5:e8:b6:16:f9:b1:73:e8:66:fc:
                    2b:99:06:73:a3:e5:6f:3c:0d:2b:9d:12:9e:9b:6b:
                    50:d9:25:bb:57:93:fb:d5:11:6a:9a:bd:5a:97:0d:
                    2c:1a:5e:67:00:2c:79:3d:bd:4a:49:39:fa:ea:ac:
                    20:39:ce:85:21:3f:ff:cd:48:6b:26:09:6d:ae:1f:
                    c1:65:75:dc:33:6e:76:dd:70:c5:61:87:de:e5:46:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:38:2C:66:7F:CB:C2:EF:D4:4F:DB:39:0C:29:0C:67:80:47:51:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63ce8947-b33c-387a-815f-520f18856d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.94.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:a8:5e:5e:c0:a1:38:f2:42:ab:e4:d8:56:00:1a:2b:a3:
         9c:52:3b:69:b0:69:e9:34:a0:0c:cf:a0:25:ff:ba:38:2f:2b:
         4c:c6:f7:9f:fc:14:46:3b:7b:dc:57:21:e5:0c:be:c5:ad:7c:
         de:0d:3a:7d:5c:61:69:b0:ba:a6:24:f9:c0:14:0f:71:90:a9:
         57:db:9e:94:6d:77:bb:13:f1:20:67:97:6c:a4:90:b0:e3:e0:
         5f:da:3f:6b:b5:2d:53:4a:76:01:8f:76:9e:34:12:56:cf:d3:
         73:d1:9d:d0:d6:b1:c6:b8:83:30:c7:37:39:c1:dc:17:ae:33:
         6f:a5:dc:89:8c:f1:2c:18:51:35:d4:19:d3:45:62:a7:9a:31:
         a4:d2:a3:dd:59:e2:13:71:ed:b2:32:28:ef:c7:6d:ee:35:1a:
         0f:ed:ef:72:90:be:79:a6:02:e5:0c:41:28:17:59:ed:6d:96:
         0e:0e:34:a9:cc:28:09:ce:72:3d:fc:27:3e:27:27:d5:97:56:
         81:7f:a7:51:b4:b5:cf:bb:67:80:3e:2c:32:1a:3e:06:80:cc:
         9b:c8:a3:26:f1:8e:ee:a2:ee:fd:e8:6e:99:f5:a4:43:7b:83:
         88:6c:1a:44:3a:ab:e8:b9:22:06:46:2d:08:0f:7b:98:55:9f:
         0d:d7:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:26 2024 by rpki-client on console-fra.rpki-client.org