Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa
File:                     67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa (raw, json)
Hash identifier:          YZoaSanuZ0aTPmyOmbhbNn5WjrVGYBJ/ixXMlF5cWZg=
Subject key identifier:   3A:1F:1C:00:49:73:72:DB:69:75:E1:D2:DE:0E:AC:27:7B:78:2C:9D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454623712130446929ED546180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa
Signing time:             Wed 20 Mar 2024 20:44:04 +0000
ROA not before:           Wed 20 Mar 2024 20:44:04 +0000
ROA not after:            Tue 18 Jun 2024 20:44:04 +0000
asID:                     396982
IP address blocks:        34.108.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:71:21:30:44:69:29:ed:54:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:44:04 2024 GMT
            Not After : Jun 18 20:44:04 2024 GMT
        Subject: CN=4cc5bfb9-0e18-4ad9-b83b-d84c6726fa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:39:91:d6:f0:e4:5c:0a:2f:da:5b:8d:2a:05:
                    e3:c8:8a:68:44:23:27:5c:d9:25:1c:5d:9e:29:ab:
                    7c:3a:36:2b:86:18:0e:c5:c8:c1:fe:d9:c3:29:0e:
                    d7:6e:60:76:f5:10:eb:2f:e4:78:f2:13:b6:ab:79:
                    54:53:fb:e4:5c:0d:89:60:c2:98:ff:31:84:b6:2c:
                    cc:26:c6:77:42:6f:2b:81:ba:45:99:d7:51:50:47:
                    50:3e:92:eb:21:87:5f:2b:62:e4:96:65:4c:a9:2a:
                    0b:ae:18:c1:f5:4b:60:e2:ca:4b:bf:27:79:90:b6:
                    81:c9:57:38:83:ce:96:93:27:11:3f:54:ab:0a:54:
                    95:0c:3f:31:ca:3f:ad:22:25:4a:51:d2:3c:98:8d:
                    c4:8a:d9:59:d6:08:5f:66:f3:ed:e3:9f:17:a8:a4:
                    c9:8b:92:fa:d8:03:76:0d:92:fd:f5:52:07:7b:9c:
                    44:81:13:bc:9d:e6:e2:83:d7:2e:bf:40:09:44:43:
                    f1:9e:64:5f:52:99:45:f2:84:91:bc:35:8a:f6:81:
                    ab:e9:36:f7:8c:d3:9f:d9:61:7e:bb:35:b7:18:47:
                    da:78:85:9f:51:08:62:da:19:4d:a4:bc:56:db:42:
                    b5:48:87:33:9b:84:cf:35:f2:62:ae:be:ff:a9:8b:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1F:1C:00:49:73:72:DB:69:75:E1:D2:DE:0E:AC:27:7B:78:2C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.108.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:42:14:75:f8:35:af:ca:03:53:71:15:d5:e3:52:34:40:
         0d:c0:34:b0:5e:24:35:25:00:af:83:56:89:84:c3:ad:cc:14:
         2a:4d:85:e3:8b:45:64:e3:28:80:1b:f3:8b:b3:b5:31:36:fc:
         fd:32:98:83:87:5a:59:7c:63:29:b8:f3:29:fc:b7:f6:57:9f:
         bc:dd:98:80:a9:3a:f0:94:33:4c:59:3e:e3:62:8a:6e:4e:c9:
         5c:7c:57:f7:c7:36:93:32:ba:13:26:60:8f:ee:c4:68:9c:b8:
         6f:19:ca:8d:01:94:88:31:3e:fc:24:05:80:fb:55:b7:d9:64:
         50:be:c2:92:47:2e:be:ca:21:43:42:06:0a:89:7c:fd:58:07:
         79:02:e3:c3:f9:80:88:e4:9b:f9:63:f2:20:94:76:00:1f:67:
         3b:47:77:e9:77:ad:4b:0a:09:84:fa:06:a0:f9:d0:13:7b:2b:
         73:84:42:60:1b:07:97:6f:5d:a5:bb:1e:07:8d:80:00:5b:39:
         02:d0:8a:20:5b:63:44:39:12:3c:2a:6c:8b:78:db:46:8f:89:
         52:7a:56:c9:95:31:05:8a:d5:95:0d:90:fe:a0:67:bc:e3:03:
         c6:19:49:f0:20:0d:2b:87:f1:31:fd:3d:c7:93:e4:3c:6d:be:
         de:24:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:35:18 2024 by rpki-client on console-fra.rpki-client.org