Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6793e914-b666-37e6-99f2-2d669cd5f77d.roa
File:                     6793e914-b666-37e6-99f2-2d669cd5f77d.roa (raw, json)
Hash identifier:          xEc0zGBXNzkqv0ZkjhdXAKO9krrNy+Pmyz25+SkbN9s=
Subject key identifier:   19:F6:B1:E7:9A:4B:A4:AD:A3:DD:21:77:E3:BE:5E:09:28:64:62:66
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F0602F4EA1AFE7E65A26BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6793e914-b666-37e6-99f2-2d669cd5f77d.roa
Signing time:             Fri 29 Mar 2024 18:39:59 +0000
ROA not before:           Fri 29 Mar 2024 18:39:59 +0000
ROA not after:            Thu 27 Jun 2024 18:39:59 +0000
asID:                     396982
IP address blocks:        34.86.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:02:f4:ea:1a:fe:7e:65:a2:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:39:59 2024 GMT
            Not After : Jun 27 18:39:59 2024 GMT
        Subject: CN=1f8f251c-3525-4541-b8ca-6b44e4ab1a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:65:e8:49:3f:6b:e0:8d:ae:6d:b0:9d:38:
                    bd:ab:7d:b4:4b:85:35:10:c5:e1:a8:2e:9c:fa:b5:
                    1d:91:82:06:fe:61:97:ee:42:7f:b2:c4:d3:df:9d:
                    c8:a6:9d:d8:65:64:5a:1a:9c:f7:f3:65:bd:b0:c2:
                    72:62:68:16:76:e9:7d:3c:eb:04:56:0a:46:d1:8b:
                    ea:b2:1e:01:e6:9b:f6:66:89:0e:99:73:5b:b3:ba:
                    2b:18:45:22:b2:eb:97:f8:62:8c:5d:19:b1:d4:cd:
                    66:48:89:80:00:b5:58:8c:a6:21:cc:02:39:12:c0:
                    25:c6:1b:60:48:76:64:33:d3:e7:5e:a9:74:9d:94:
                    fd:b5:a9:9b:e6:c5:8d:ff:7f:e3:c2:5e:c7:a6:af:
                    c3:48:4a:f8:15:f4:66:96:e0:b2:9d:f0:1c:55:9b:
                    65:e5:ba:14:2c:b3:45:a4:7d:70:3e:56:ee:69:27:
                    d0:55:4e:82:20:69:dc:70:a4:df:3e:d1:dd:e3:5a:
                    78:7a:6f:fe:38:da:bf:b1:aa:7f:74:31:d4:ac:72:
                    7e:29:35:c4:dc:2b:9c:8a:6a:7e:33:2d:4d:d4:1f:
                    8e:54:50:ec:aa:80:a1:bb:6a:a7:ae:6b:6c:6d:31:
                    83:3f:c0:dc:0b:c1:ed:cb:06:2c:e8:21:b7:0c:6c:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:B1:E7:9A:4B:A4:AD:A3:DD:21:77:E3:BE:5E:09:28:64:62:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6793e914-b666-37e6-99f2-2d669cd5f77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:9e:74:20:4e:3e:1f:f4:54:8a:53:94:41:0b:df:d4:5c:bd:
         92:67:e3:75:35:4d:ed:e2:8c:7c:c1:31:40:08:be:d7:a8:d0:
         4a:45:e2:fe:dd:11:e1:5a:27:d2:60:96:f1:ef:17:7e:f3:56:
         8b:d7:86:cd:e5:e1:75:43:98:bf:7c:ab:4b:6d:72:ab:7b:ea:
         27:b5:d8:f8:13:e4:d6:ba:d1:a3:f5:fb:69:5b:30:1c:93:2d:
         69:0f:86:0f:6d:13:56:e9:b3:4e:74:19:51:02:bc:a3:cd:24:
         6a:a3:70:de:dd:cf:53:c0:75:f0:82:59:d2:1a:69:74:c9:23:
         16:0a:ad:9b:d8:29:20:5e:1a:31:f8:5c:a2:1b:09:eb:0e:d5:
         b1:74:2f:c5:4c:0a:55:14:17:22:67:98:31:2c:6f:f0:45:c0:
         bd:ea:a2:57:d2:d8:83:f6:89:2c:7c:7e:ed:59:e0:ef:d3:93:
         d1:cc:49:0a:48:82:52:7c:e2:75:6a:1d:3e:e6:37:53:58:46:
         ae:0e:38:70:68:a8:c2:ba:a2:b5:5b:16:1c:be:9c:3e:c9:61:
         89:6b:15:17:da:c0:7a:a3:04:26:fb:7c:81:54:81:ea:ed:68:
         7d:b0:47:33:5d:f9:5f:14:9d:01:e3:3e:7f:46:70:ac:bd:71:
         5c:2b:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:49:23 2024 by rpki-client on console-ams.rpki-client.org