Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9644554a-5e3f-3de7-8492-63fcf4f1b1c1.roa
File:                     9644554a-5e3f-3de7-8492-63fcf4f1b1c1.roa (raw, json)
Hash identifier:          hRn5waVFCWdse9WqEgg5/zA1hC1Tug8tDULubXcdSUo=
Subject key identifier:   A7:BE:0B:3B:B5:49:AC:86:11:AA:5B:A6:7C:53:D3:36:C9:81:53:9B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584546266A0E2FCDB623FF9F1200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9644554a-5e3f-3de7-8492-63fcf4f1b1c1.roa
Signing time:             Wed 20 Mar 2024 20:50:04 +0000
ROA not before:           Wed 20 Mar 2024 20:50:04 +0000
ROA not after:            Tue 18 Jun 2024 20:50:04 +0000
asID:                     396982
IP address blocks:        34.103.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:6a:0e:2f:cd:b6:23:ff:9f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:50:04 2024 GMT
            Not After : Jun 18 20:50:04 2024 GMT
        Subject: CN=55268d8d-27c4-43d5-af34-b4a9e7162405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:3d:89:f7:be:6d:1e:b4:d5:1a:df:9c:9c:
                    a1:ab:f9:48:65:47:37:43:4a:b4:36:5a:20:33:a6:
                    fc:3b:5d:b5:33:35:ef:4b:b1:7c:98:d3:d9:54:e3:
                    35:e3:bd:80:84:07:59:0c:66:00:f6:30:a9:da:ec:
                    b3:e3:a8:fa:53:a9:c2:12:d4:da:70:57:4a:52:fb:
                    56:fb:3f:46:29:10:82:49:d8:f1:44:a5:4d:7d:a6:
                    b5:a5:23:c7:ae:e8:fb:27:4c:97:b6:d1:5d:d6:1e:
                    f8:63:2b:2d:e5:97:ea:d1:03:8a:91:ce:7c:4e:79:
                    69:87:8d:16:b3:1b:a7:ee:51:9e:90:45:31:cb:d6:
                    b0:27:91:89:c3:b0:09:5c:ea:3b:66:fe:52:9d:b9:
                    43:06:bc:a6:49:1c:ef:b1:3d:19:cd:cc:1b:a3:9a:
                    f8:73:1c:e1:26:85:70:3d:3d:07:b4:d2:da:67:a7:
                    bf:92:7e:42:5f:f4:3d:d7:46:0f:00:7d:1d:b3:51:
                    19:07:71:ff:f9:52:8c:c5:8e:e4:cd:bb:1e:f4:1c:
                    98:72:d3:9b:bf:1c:dd:c2:51:fc:c5:7f:b7:7a:0f:
                    58:ef:ce:1b:a5:53:bf:3d:84:5d:96:9d:e6:c2:a3:
                    2e:e6:ef:73:a6:b2:c5:bb:39:68:49:04:a4:62:99:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:0B:3B:B5:49:AC:86:11:AA:5B:A6:7C:53:D3:36:C9:81:53:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9644554a-5e3f-3de7-8492-63fcf4f1b1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.103.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:72:f3:d3:e0:b4:9c:90:55:2f:ba:5f:70:f4:87:ae:7e:1a:
         3d:ee:33:c8:56:de:e8:2e:aa:b6:81:52:42:e9:48:25:c0:2d:
         eb:37:f8:cb:43:fd:10:63:32:e3:d0:69:26:04:e4:a8:5b:4f:
         1d:28:02:e1:f9:04:9c:d2:bc:42:14:7e:25:12:aa:27:a6:1e:
         cd:12:ef:f8:83:ee:48:c0:f9:31:3b:42:c2:b1:7b:2e:98:ba:
         6f:de:17:55:0d:76:1f:33:4e:e7:f5:c6:3b:70:ac:b4:52:7c:
         21:2e:82:5c:e6:ac:e4:3c:28:3b:a6:e4:1d:ac:2f:94:82:9d:
         89:25:0f:ef:d7:7c:1c:c7:ca:e5:95:f7:17:fe:e5:df:15:69:
         76:7e:5e:10:71:a7:97:69:f3:a6:df:64:da:9a:d4:fd:4b:bd:
         7d:c8:3e:2c:10:98:21:8d:3a:f4:b5:04:e0:58:da:85:37:9c:
         e8:fa:ca:f0:c3:23:42:75:7a:c0:80:d5:f0:a5:3b:72:1b:eb:
         a0:64:74:ce:88:ba:92:38:4f:00:c7:a9:36:f4:ab:d1:49:e0:
         4d:07:38:c0:b1:89:b4:08:18:7a:be:62:5b:97:33:3e:ed:34:
         71:34:6e:08:3e:4e:44:53:03:68:5c:12:72:8d:e8:56:29:8b:
         b9:21:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:49:38 2024 by rpki-client on console-ams.rpki-client.org