Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87c6aaf6-d5ef-3290-b1bf-190f9a47adee.roa
File:                     87c6aaf6-d5ef-3290-b1bf-190f9a47adee.roa (raw, json)
Hash identifier:          ZhMa5H1QUNjey47qYRMKC3RTAO0plhksN/rtCHfE1CM=
Subject key identifier:   59:D9:0B:10:6B:A9:36:F2:FA:F1:C7:D3:3B:6D:20:1A:98:77:F9:15
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454627C8E12155A59810774A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87c6aaf6-d5ef-3290-b1bf-190f9a47adee.roa
Signing time:             Wed 20 Mar 2024 20:52:49 +0000
ROA not before:           Wed 20 Mar 2024 20:52:49 +0000
ROA not after:            Tue 18 Jun 2024 20:52:49 +0000
asID:                     396982
IP address blocks:        34.105.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:c8:e1:21:55:a5:98:10:77:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:52:49 2024 GMT
            Not After : Jun 18 20:52:49 2024 GMT
        Subject: CN=268583e7-956a-40c3-bee5-f3a4e0cb4e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:1c:f7:77:36:02:6a:dd:99:31:2a:55:3a:
                    3c:41:c6:02:12:d2:b6:a2:fb:cc:ee:7c:e1:3e:b5:
                    e6:04:9a:ad:30:18:fe:f4:88:f5:a4:27:99:36:4c:
                    2e:63:16:6a:4a:80:1f:40:5d:a4:f6:70:19:e3:93:
                    b0:9b:90:81:14:40:83:9e:17:57:fb:04:65:79:3f:
                    dc:79:88:86:08:77:ed:ea:55:98:6a:9a:d7:bd:49:
                    8d:fd:a1:7b:c6:f2:26:5b:03:68:f1:5a:90:fe:81:
                    ef:91:84:16:07:2a:91:39:45:77:30:80:03:b5:54:
                    e9:e4:47:f4:46:4b:f4:30:12:9e:64:25:b1:77:fe:
                    57:2f:7c:ee:9d:bd:d4:2e:be:8b:28:41:7b:0a:2a:
                    ec:5f:66:3f:92:1a:b2:17:7f:04:8d:9a:54:02:74:
                    b3:41:d9:b9:44:08:07:27:fc:b2:fc:a0:be:ef:47:
                    58:14:3f:d5:cc:de:f0:9a:37:36:57:fc:25:7f:c5:
                    82:02:e5:86:c1:af:62:d4:85:9b:cd:9d:5b:2f:30:
                    c1:e4:f0:5c:b4:4a:53:1c:73:e7:08:d0:7b:2c:d4:
                    6a:0c:dd:0e:4e:d8:83:3f:05:59:79:61:ac:28:e2:
                    63:e9:c4:05:28:7e:78:ae:a3:c6:7e:ed:18:48:6d:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D9:0B:10:6B:A9:36:F2:FA:F1:C7:D3:3B:6D:20:1A:98:77:F9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87c6aaf6-d5ef-3290-b1bf-190f9a47adee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.105.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:7b:06:f6:14:4f:99:64:99:03:b7:45:7e:50:d9:a4:71:
         0d:e5:8e:40:7c:59:08:d6:fd:e3:b3:53:5c:56:1e:e5:84:13:
         90:40:fa:a1:d9:61:3f:89:a3:1d:83:2b:42:df:8d:f2:ca:dc:
         5c:1e:8f:73:2b:9a:b6:3d:80:be:99:dd:e2:a8:8b:69:ac:61:
         bd:00:8c:c7:97:4f:45:4a:5a:ee:d5:82:34:58:ba:3f:77:79:
         4b:05:71:e3:58:b1:bd:69:64:66:d6:ca:29:3b:53:b8:2d:a9:
         d2:e6:ac:b2:5e:68:09:88:bf:de:b4:4e:28:ab:ce:ba:da:73:
         14:45:4e:30:22:c4:8d:42:33:e1:a4:2a:7a:02:e6:2d:d3:1d:
         28:89:b1:fb:f7:e1:6c:ed:78:07:2e:d3:a8:74:57:43:e3:78:
         22:36:70:ff:63:e4:28:b1:f8:e6:f8:09:30:e2:2c:9f:3f:47:
         de:d0:9e:21:be:ca:8f:93:32:a9:ac:e5:68:47:61:ab:cd:9b:
         ce:ae:d2:a4:60:2b:ed:53:a4:f0:a6:f8:e3:2b:5f:46:24:4a:
         3d:ae:4b:88:27:4f:cd:83:b8:d4:1f:47:74:46:59:3a:44:cb:
         a5:67:0d:d8:61:dc:b7:ff:ef:fb:20:59:9e:1c:45:65:72:0e:
         0b:7a:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:42 2024 by rpki-client on console-fra.rpki-client.org