Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa
File:                     8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa (raw, json)
Hash identifier:          GXzw0DLAMquNpciwkvgyCXJjP0h2Ignylg09a1wQ6T8=
Subject key identifier:   5F:D3:F2:3B:76:16:B6:15:03:80:7A:D4:E6:2B:EB:3F:22:31:E6:CB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490D82F7C8664427E3815680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa
Signing time:             Thu 21 Mar 2024 21:47:18 +0000
ROA not before:           Thu 21 Mar 2024 21:47:18 +0000
ROA not after:            Wed 19 Jun 2024 21:47:18 +0000
asID:                     396982
IP address blocks:        34.95.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0d:82:f7:c8:66:44:27:e3:81:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:47:18 2024 GMT
            Not After : Jun 19 21:47:18 2024 GMT
        Subject: CN=a0bdf847-cbe1-4da0-9fc2-2c34db140c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:f8:87:1e:03:8b:de:5b:31:6d:26:0c:68:
                    21:e1:d3:66:96:9b:06:22:45:6f:f6:53:23:7d:30:
                    c7:90:98:5a:b3:cb:ab:94:24:a7:e2:d9:99:a3:1e:
                    1e:b6:38:dc:aa:a0:97:0f:66:87:a4:00:b8:b5:62:
                    fd:54:31:65:1a:24:b7:58:93:48:4a:8c:42:70:bb:
                    53:99:2c:bd:e2:c0:9e:39:26:9e:bb:00:18:17:c4:
                    e8:a9:81:73:f2:60:bf:b5:60:fd:50:a3:17:fa:49:
                    5c:b8:91:e5:3e:28:4a:36:f8:ef:32:3a:74:47:19:
                    59:77:46:3a:61:71:42:2d:42:23:c7:1e:bd:51:c0:
                    7a:46:2d:41:35:a0:75:1d:32:d0:88:4f:9c:8b:e2:
                    29:40:cf:14:11:09:ea:af:39:68:8c:32:0d:ad:68:
                    16:3f:5e:57:03:db:b1:c2:cf:e8:a5:42:48:cb:a3:
                    a6:c7:26:eb:27:9c:38:77:a4:87:33:cd:aa:de:aa:
                    a2:a9:97:25:c8:04:7a:1f:60:97:1a:8c:c3:c2:7d:
                    26:a9:aa:47:7b:ba:a6:be:96:19:dd:71:29:92:7e:
                    ab:cf:ef:29:8c:63:e2:01:9f:ff:28:4b:86:4a:35:
                    df:ba:59:62:2c:e1:c5:84:e2:63:f6:0d:15:60:ec:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D3:F2:3B:76:16:B6:15:03:80:7A:D4:E6:2B:EB:3F:22:31:E6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.95.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8b:82:9c:f9:c5:d4:5d:82:23:65:d2:50:21:00:28:a8:49:
         d9:27:ab:ef:0f:2c:b2:5f:49:1e:03:91:f1:96:0b:d3:3c:c5:
         df:06:c7:0f:86:c0:13:93:3b:92:b2:e6:10:08:17:23:55:94:
         80:49:5f:4d:6b:5d:53:6a:f4:1a:f0:fd:9a:43:7f:7e:0a:f0:
         a8:ff:af:aa:7b:80:d4:0f:c1:a0:75:c9:3e:4c:ee:ec:e2:67:
         83:eb:21:05:46:47:95:42:81:b4:17:ec:d4:5b:8f:15:7d:16:
         4f:25:7c:ee:20:f8:c3:16:21:a1:39:64:bb:12:66:fb:4b:8c:
         59:a9:9b:1d:8a:61:09:e9:cd:cd:49:62:61:35:a9:44:f0:ba:
         a8:1c:12:14:03:76:8f:88:86:e5:bc:86:bf:7a:95:60:d6:5d:
         ba:24:fb:75:20:06:aa:8b:32:4a:7f:3c:76:90:52:75:6f:de:
         60:5c:c8:e5:b1:57:98:45:65:74:34:b3:d4:ef:79:a5:a5:b1:
         52:4c:2f:45:a5:41:4e:73:29:50:83:0c:f9:46:95:16:09:06:
         5c:8e:20:6d:66:14:93:ec:7d:67:a7:b6:2e:53:7d:ce:c4:11:
         b3:28:8e:59:d2:8a:9e:6a:05:4d:ae:59:d1:c2:39:5a:6c:3c:
         34:4d:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:44 2024 by rpki-client on console-fra.rpki-client.org