Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fde6cab-1e4e-355a-a3a9-a061d339430d.roa
File:                     7fde6cab-1e4e-355a-a3a9-a061d339430d.roa (raw, json)
Hash identifier:          h0qvsh+7A3xLDzqDV1P0SPSLrkduUtLHBUkHNA/mY/o=
Subject key identifier:   69:5D:18:3B:19:49:37:D9:3F:CE:18:A8:31:C0:F1:3A:CA:0E:26:6F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462E0B1CB6299BA333E9D680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fde6cab-1e4e-355a-a3a9-a061d339430d.roa
Signing time:             Wed 20 Mar 2024 21:05:26 +0000
ROA not before:           Wed 20 Mar 2024 21:05:26 +0000
ROA not after:            Tue 18 Jun 2024 21:05:26 +0000
asID:                     396982
IP address blocks:        34.116.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:0b:1c:b6:29:9b:a3:33:e9:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:05:26 2024 GMT
            Not After : Jun 18 21:05:26 2024 GMT
        Subject: CN=5f66ba70-2516-40f3-ac2e-b544f06403b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:b9:e3:0a:1b:68:d8:27:5f:df:1b:62:47:
                    ee:b5:87:70:61:bd:e0:e8:20:ea:a3:ca:91:49:5e:
                    87:15:4b:78:85:c7:1a:7a:89:0c:8a:2b:16:86:be:
                    06:45:c2:83:44:08:14:6b:bf:34:fe:94:ee:41:5e:
                    88:7a:52:c1:04:1e:75:a3:17:e8:44:9a:c4:10:d4:
                    ae:96:77:27:c3:2d:0e:e6:db:db:75:5d:8c:4e:da:
                    eb:11:70:71:f4:ea:8d:f0:ef:83:7b:c8:be:56:69:
                    c7:16:46:8e:24:f9:05:2d:a6:08:19:f9:fb:71:74:
                    26:7e:32:85:16:b6:2a:41:e5:6a:4d:b8:7f:bb:a3:
                    a8:33:ec:f9:e2:db:76:ae:41:63:3e:7b:d5:7e:a5:
                    19:6e:99:2f:d9:9b:e4:dd:2d:88:1b:2c:a1:e1:a4:
                    49:5d:24:79:79:31:bc:ee:04:04:6e:f0:1f:a9:81:
                    e0:e0:16:31:ae:4f:49:a0:50:bb:c3:4e:fc:c6:60:
                    26:b3:df:c5:3e:dc:f0:8d:4e:8f:2d:88:ec:9e:49:
                    a2:e0:f0:24:fa:95:2f:98:3c:75:e6:e7:27:e1:61:
                    85:7c:64:f5:95:7f:a5:a4:ed:02:79:0b:13:fa:2b:
                    36:dd:9b:48:2b:01:c0:88:1d:13:1f:5d:93:8b:d4:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:18:3B:19:49:37:D9:3F:CE:18:A8:31:C0:F1:3A:CA:0E:26:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fde6cab-1e4e-355a-a3a9-a061d339430d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.116.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c3:35:f0:da:ac:bd:1c:04:1a:7b:fd:54:1e:2e:56:46:15:
         b4:30:66:03:47:8e:63:59:58:83:dd:54:5f:7f:b2:5f:27:4a:
         af:d5:ec:c2:76:4e:0d:9d:98:8f:30:a1:99:52:09:66:30:3d:
         84:52:55:ca:1c:5b:4d:28:f8:06:7c:a6:d3:25:10:99:b9:92:
         b5:0d:43:3d:55:05:89:12:ab:8b:79:54:76:40:ca:43:7b:fd:
         d7:6a:0a:f5:68:1f:0f:3e:ba:5a:7f:ee:6a:f2:8a:d2:aa:bc:
         d3:ae:3b:77:f3:08:1c:4e:8e:e8:ad:4f:cd:9c:c4:4e:d0:90:
         d5:75:f9:32:63:e6:e5:fb:24:73:8d:c3:b0:1e:d7:8b:71:0e:
         93:79:db:fa:1f:fb:17:80:ca:df:09:ec:d1:6e:de:cb:5a:33:
         13:a4:b9:c4:71:17:7c:1e:c1:73:b9:3c:19:b9:f7:8b:18:1c:
         b5:ea:0b:7b:a8:98:17:8a:68:25:b9:5e:d7:fc:18:e4:c5:36:
         58:2b:9d:78:23:ac:6f:1f:f2:13:16:60:40:2b:b0:31:bc:c9:
         5f:70:b0:5e:d8:93:3c:a2:75:d8:16:21:0d:6a:39:8d:ee:2c:
         1d:7e:7d:82:f7:80:5a:cd:d1:95:3e:1a:f6:7a:ee:32:aa:bc:
         29:d5:40:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:35:27 2024 by rpki-client on console-fra.rpki-client.org