Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/925f0613-3e6f-3b4b-80dc-11ec03ad5622.roa
File:                     925f0613-3e6f-3b4b-80dc-11ec03ad5622.roa (raw, json)
Hash identifier:          oBE7klD3HA0vL44oUP1I47jKVkwhWbB1jRjZVFlpiUs=
Subject key identifier:   39:E7:A8:C0:83:14:D2:15:C0:7D:0B:37:48:F4:9B:91:AB:9D:09:28
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F0502C9E555F5FCF46CC880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/925f0613-3e6f-3b4b-80dc-11ec03ad5622.roa
Signing time:             Fri 29 Mar 2024 18:37:58 +0000
ROA not before:           Fri 29 Mar 2024 18:37:58 +0000
ROA not after:            Thu 27 Jun 2024 18:37:58 +0000
asID:                     396982
IP address blocks:        34.178.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:05:02:c9:e5:55:f5:fc:f4:6c:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:37:58 2024 GMT
            Not After : Jun 27 18:37:58 2024 GMT
        Subject: CN=6e15b286-d279-4289-a2db-7c8a107543cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:3d:36:71:64:70:1f:f2:f0:e1:8e:a7:86:
                    cf:f2:7d:81:39:71:f7:5a:75:5c:3e:48:13:7f:af:
                    14:a0:e3:50:25:62:76:55:33:ce:4e:15:64:4f:9e:
                    35:8d:76:8c:18:c8:b0:bb:32:18:a1:70:5c:b6:6c:
                    a8:fb:c9:d8:09:14:8d:cc:6d:a6:23:9d:ae:b4:cb:
                    98:ad:00:81:20:20:56:a2:71:e5:b6:d6:18:b1:ff:
                    e7:d2:f5:2f:ba:f7:3c:d6:72:98:a3:77:73:ce:59:
                    a4:22:d7:67:85:cf:69:bb:4b:16:ab:16:ca:2a:4a:
                    a1:01:c5:55:2c:c4:44:a0:ea:ce:f0:26:49:27:91:
                    fe:b5:cd:95:dc:ef:4e:5e:0e:fc:59:fd:7a:e2:79:
                    d0:9d:e0:60:e8:6e:6d:85:2c:93:82:cf:a1:1d:80:
                    d4:35:df:6e:b7:23:db:82:3b:22:be:d0:f7:a2:63:
                    a3:77:6f:d2:7e:f1:ba:54:84:fb:18:c0:f8:c2:9a:
                    2b:07:39:54:82:fa:ff:33:a5:8b:cd:e7:3d:f1:5b:
                    9b:6e:64:3f:e6:f1:ab:55:c1:ec:d1:34:d2:b7:49:
                    93:1f:07:c6:b1:68:de:8a:b6:17:5a:31:bc:98:7d:
                    89:aa:98:f3:73:56:8b:e3:91:d7:96:42:41:5e:3f:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E7:A8:C0:83:14:D2:15:C0:7D:0B:37:48:F4:9B:91:AB:9D:09:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/925f0613-3e6f-3b4b-80dc-11ec03ad5622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:08:44:93:b1:b4:af:81:4a:d3:c3:49:c2:07:0d:ab:ff:15:
         13:49:68:23:2d:70:ca:57:87:90:63:23:65:b3:d7:72:1a:f6:
         84:1e:ce:93:fb:f4:3b:61:01:27:9f:55:f5:15:ab:c9:98:66:
         6d:b9:62:de:1c:a2:0c:28:a5:40:a7:c5:cb:9f:fb:22:38:56:
         88:17:76:74:c3:b8:9f:61:35:e7:81:48:9a:1e:41:0e:cb:ae:
         33:d2:2f:b4:4b:4a:2c:f7:9e:61:bc:d2:b7:ab:5c:cc:f5:f5:
         92:b0:ba:6d:84:bb:75:05:1d:d1:46:fb:b3:95:fb:e3:db:91:
         17:47:da:22:57:24:ef:c7:18:c5:7f:fd:91:d8:59:d0:e9:34:
         24:e6:2b:7f:76:7b:e8:3e:cc:92:80:d8:29:47:15:82:80:a4:
         51:96:c6:26:85:1b:d6:7c:cf:1a:38:d4:23:f7:63:b9:b8:a5:
         ce:55:74:1c:cb:72:40:11:a2:23:80:ed:44:89:7c:e5:a9:b6:
         6e:0c:ab:38:6b:a5:ce:65:d0:86:6b:1b:05:da:ce:d6:18:96:
         80:c2:7a:79:da:44:97:3c:fe:7e:6b:e2:8e:e9:7a:47:b1:1e:
         a8:d1:6b:ef:64:4d:1d:c1:43:b7:13:aa:a7:dd:71:5e:fc:9c:
         dd:31:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:08:08 2024 by rpki-client on console-ams.rpki-client.org