Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/813a3e53-f26d-35bb-bc9c-480f0bb22b15.roa
File:                     813a3e53-f26d-35bb-bc9c-480f0bb22b15.roa (raw, json)
Hash identifier:          YD6/0By4tPmkonllCfW7wPqsQq+zgba0Aj2RuPigFSU=
Subject key identifier:   7A:FC:34:7C:9A:04:23:A3:E4:2A:AA:1E:4F:DF:E8:B6:5B:94:35:FD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490A5CFD0ABAA94B8E80BFC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/813a3e53-f26d-35bb-bc9c-480f0bb22b15.roa
Signing time:             Thu 21 Mar 2024 21:40:58 +0000
ROA not before:           Thu 21 Mar 2024 21:40:58 +0000
ROA not after:            Wed 19 Jun 2024 21:40:58 +0000
asID:                     396982
IP address blocks:        34.72.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0a:5c:fd:0a:ba:a9:4b:8e:80:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:40:58 2024 GMT
            Not After : Jun 19 21:40:58 2024 GMT
        Subject: CN=038f5de9-c724-43f1-8c43-8a51d437f9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:13:9a:4a:67:07:9c:2c:70:87:4e:34:07:
                    65:41:a8:c7:ad:f5:bd:c7:65:ff:2a:8b:3a:82:a7:
                    18:0a:c6:ae:e7:14:f1:a6:5a:28:20:eb:6f:90:91:
                    4e:48:57:41:59:a5:b6:9d:26:d9:5c:48:b7:ad:ad:
                    c8:c9:9b:68:40:7d:64:24:29:42:1b:ca:43:bd:04:
                    80:99:84:d5:a1:41:cc:d0:13:16:96:9c:3c:c0:87:
                    17:d8:5b:3e:b9:f4:dc:03:c5:99:d6:5b:a5:7f:54:
                    01:4b:c6:01:c1:aa:a7:23:25:1b:f3:64:13:2c:41:
                    be:aa:fd:05:24:a4:11:b2:f8:b7:9d:94:16:7f:0e:
                    ba:eb:13:f3:56:5d:85:9e:8a:6d:66:78:89:ad:b8:
                    da:3e:54:e9:26:46:62:5b:8e:52:72:43:9d:a0:0e:
                    df:27:8e:dc:63:00:77:37:7c:5e:9b:ed:23:f4:a5:
                    90:89:c2:d5:cc:60:0a:cd:f1:06:8c:54:12:dc:cf:
                    58:e3:48:3a:e1:86:ad:24:41:90:cf:69:ca:e2:fa:
                    76:58:b8:e6:00:93:33:9a:5e:72:7c:82:cb:d2:e5:
                    32:0f:db:6e:ab:42:a2:ca:78:0c:02:b1:f1:73:58:
                    8c:c1:64:3c:d7:db:60:77:a1:c7:36:b8:d0:a6:2f:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FC:34:7C:9A:04:23:A3:E4:2A:AA:1E:4F:DF:E8:B6:5B:94:35:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/813a3e53-f26d-35bb-bc9c-480f0bb22b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.72.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6d:68:51:34:09:86:56:db:93:d0:89:cf:92:c7:02:8b:59:
         ea:00:cc:17:b6:fa:62:68:68:82:48:4b:72:6c:2b:96:31:df:
         87:82:cb:db:ec:1b:63:3c:c0:55:b5:ac:6c:dc:f7:6c:e1:59:
         52:5a:53:4f:b5:e9:f8:0d:ca:cd:12:20:b2:0b:f2:de:a9:bc:
         c8:cc:57:a4:62:89:bb:a9:dc:e7:8d:8a:f4:85:00:c4:29:98:
         54:3a:aa:b8:eb:ac:e6:a0:fe:fb:7b:1d:1c:72:1b:79:0f:04:
         0a:87:c9:44:a7:d9:83:c8:a9:3d:81:5e:46:b4:99:eb:52:bd:
         97:6e:95:42:0e:60:e6:4a:93:5a:28:03:f0:fc:09:54:aa:b8:
         db:b1:8f:10:12:50:04:1c:cc:37:15:c6:12:4c:56:49:e9:c7:
         45:95:10:47:63:fb:c0:e5:3a:ca:06:56:0c:74:61:41:25:cd:
         5f:f8:61:8e:9a:b7:af:80:81:25:d6:b1:d4:32:19:db:d7:5d:
         d9:e0:c4:d6:4d:cb:9a:9e:c6:38:d7:6b:c0:0f:07:65:96:0e:
         a4:78:b5:2c:99:d8:3c:5a:8b:0e:60:1b:61:c8:aa:70:7e:89:
         d8:4a:a2:54:4e:27:66:57:df:c9:77:e0:7f:e4:0d:cf:5f:1a:
         df:e5:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:46 2024 by rpki-client on console-ams.rpki-client.org