Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dadb7a8-a16a-3a6f-97d8-4181044ee0db.roa
File:                     6dadb7a8-a16a-3a6f-97d8-4181044ee0db.roa (raw, json)
Hash identifier:          g4y8v0jmHxhkV3mlm1tRlmy+HYhb5LiBcUHMS/pFLgo=
Subject key identifier:   55:DC:4D:29:DE:86:26:E4:40:C4:9C:E2:99:81:8F:BE:BF:D6:8C:2B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FF03B05261008D099A2DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dadb7a8-a16a-3a6f-97d8-4181044ee0db.roa
Signing time:             Thu 21 Mar 2024 21:18:06 +0000
ROA not before:           Thu 21 Mar 2024 21:18:06 +0000
ROA not after:            Wed 19 Jun 2024 21:18:06 +0000
asID:                     396982
IP address blocks:        34.96.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:ff:03:b0:52:61:00:8d:09:9a:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:18:06 2024 GMT
            Not After : Jun 19 21:18:06 2024 GMT
        Subject: CN=ccd7dbff-57f6-436c-aa14-44a649cf5dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:64:9a:10:90:99:e7:1a:e6:a1:29:58:56:
                    f8:6d:a7:3b:58:d2:85:75:5a:05:0c:68:9e:57:46:
                    90:4d:4c:65:fa:ad:e7:8e:2e:54:f5:6f:cb:88:d0:
                    c2:7c:2f:03:80:b1:92:4e:91:67:78:d6:61:58:d3:
                    1f:33:53:ee:61:5d:01:e2:83:ab:42:e0:1c:2d:2d:
                    97:11:5f:72:60:dd:67:28:5b:2e:22:04:8e:42:63:
                    26:3d:b3:2a:7c:9a:70:1c:c3:eb:6f:c0:4a:d1:40:
                    bb:bc:f9:5a:ce:4c:f8:36:95:c7:62:0d:31:4f:70:
                    8d:4d:fc:c1:2e:c0:19:01:7b:45:c2:51:ed:ea:dd:
                    ab:84:6a:88:3e:e0:e7:f6:1e:76:28:e4:08:2c:2c:
                    e6:54:bd:01:f9:05:bd:15:42:af:06:65:08:87:c0:
                    d9:73:02:f6:70:5b:91:69:ec:ec:61:86:63:a6:6a:
                    5e:16:43:12:bb:d6:a5:16:e4:f1:79:d9:a2:f6:41:
                    10:a1:72:74:86:e1:7a:4a:91:55:22:51:5a:08:5b:
                    6a:a6:b5:ce:75:d8:62:06:05:cb:f5:07:3a:b6:6b:
                    08:7d:a9:1e:ec:f6:14:08:a7:f8:f0:d6:a9:dc:fb:
                    57:f6:65:4c:30:ea:d6:33:8e:d1:1f:5e:12:50:09:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DC:4D:29:DE:86:26:E4:40:C4:9C:E2:99:81:8F:BE:BF:D6:8C:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dadb7a8-a16a-3a6f-97d8-4181044ee0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.96.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:a9:e9:e4:36:45:b2:da:93:7a:e4:23:e1:19:ba:70:fd:
         6f:c7:13:7e:fe:86:90:44:c7:e6:78:b5:a6:9a:b1:6a:5f:c0:
         dd:31:99:89:3c:ae:77:bc:d2:87:4e:89:cf:8f:a5:54:e8:0b:
         87:ac:c3:24:89:d1:aa:9a:6c:b5:a1:d2:25:af:b0:0b:a5:de:
         84:88:6c:80:46:4b:b0:8c:63:20:d8:d1:ec:03:35:f3:cc:48:
         9e:31:4d:c8:de:02:33:f4:c3:26:e1:4d:34:29:71:ef:8a:97:
         4c:ff:d1:ea:6f:c3:50:81:53:d6:a7:70:4d:fb:26:e5:92:82:
         33:79:2d:7c:fb:59:12:00:51:96:65:32:2a:4b:b1:d6:fe:c5:
         0f:64:e3:c9:ee:38:13:22:6f:0b:e5:a1:c6:e7:d3:76:e5:b3:
         cb:71:3e:04:74:c4:1e:a6:4e:1a:83:2e:82:c2:87:f3:e1:aa:
         bf:06:45:2e:e1:39:56:42:d3:58:5e:cc:16:03:a2:0d:09:3e:
         25:f9:e4:f8:3a:f0:47:13:bc:b5:16:b4:84:6c:7e:8e:ce:6f:
         3c:61:f5:42:0a:93:53:ce:56:91:f1:d1:bc:9d:07:bb:a7:d2:
         13:95:32:35:ae:7a:f6:0b:90:f8:d8:3a:9c:e8:16:d1:5a:06:
         8b:21:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:31 2024 by rpki-client on console-fra.rpki-client.org