Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96b7fe3a-201a-32f4-bce5-e58fa81513bc.roa
File:                     96b7fe3a-201a-32f4-bce5-e58fa81513bc.roa (raw, json)
Hash identifier:          n633bsnY8JNRQGTq5lzfc7tjiCMvVYbsOOCxXkFGQFs=
Subject key identifier:   E3:0E:D4:FE:9F:EA:CC:9B:24:66:6D:A7:03:E5:33:9F:89:A9:8C:E5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F060589C41A3A648C76D600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96b7fe3a-201a-32f4-bce5-e58fa81513bc.roa
Signing time:             Fri 29 Mar 2024 18:40:00 +0000
ROA not before:           Fri 29 Mar 2024 18:40:00 +0000
ROA not after:            Thu 27 Jun 2024 18:40:00 +0000
asID:                     396982
IP address blocks:        34.151.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:05:89:c4:1a:3a:64:8c:76:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:40:00 2024 GMT
            Not After : Jun 27 18:40:00 2024 GMT
        Subject: CN=36cd1479-e01b-46ba-bcea-64ab80b0a644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:21:07:a1:4a:77:58:83:81:e1:8f:e1:e6:05:
                    0d:44:06:c2:3a:44:65:49:a0:ae:b5:ad:a5:e8:8e:
                    52:24:65:3e:b6:39:b7:0a:01:49:25:d4:14:99:ca:
                    33:17:6f:86:a0:b5:3f:07:40:13:f9:cd:4c:27:42:
                    91:9a:45:48:63:c9:ea:04:e8:c0:c1:f6:36:38:2d:
                    92:18:74:d6:c6:0f:53:9c:b0:d4:a2:28:53:df:28:
                    94:91:77:0b:8d:93:f1:a3:0b:7e:a6:da:89:2f:78:
                    42:84:74:85:2b:62:e4:62:b1:76:26:96:19:d5:0a:
                    8a:9a:56:99:2a:e6:79:5b:60:4a:8c:e5:2d:48:07:
                    73:24:11:39:8e:d6:a8:de:8d:20:34:01:22:13:68:
                    ac:ed:2d:99:14:09:6b:97:79:28:a1:5b:31:28:6f:
                    f3:a8:a5:b3:4c:5e:15:5e:00:12:6c:42:4d:7f:65:
                    68:e7:2f:3f:d8:52:57:d8:0e:43:c6:62:c0:b0:4d:
                    89:95:41:bc:4d:36:18:93:7b:45:24:81:01:c6:94:
                    fc:12:12:00:32:41:01:ab:b9:15:ce:26:6c:72:af:
                    65:9c:09:82:06:bb:06:aa:7b:3c:66:15:a9:b6:48:
                    73:13:67:d4:1e:8a:19:30:73:e5:b9:29:bc:3e:e6:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0E:D4:FE:9F:EA:CC:9B:24:66:6D:A7:03:E5:33:9F:89:A9:8C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96b7fe3a-201a-32f4-bce5-e58fa81513bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.151.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:cf:17:fd:64:2e:c1:d8:b9:9d:09:ee:98:d4:84:e0:1d:12:
         1f:0b:5c:c2:09:8e:d5:13:b6:fc:58:14:28:08:87:6c:a2:d3:
         18:e5:cb:53:e7:dc:83:fd:a4:0f:35:3b:5b:da:de:cb:38:6e:
         20:4d:4e:a8:12:3b:37:64:cb:91:e1:b2:7c:04:16:f7:75:14:
         7a:ab:a6:f6:dd:07:e0:8b:5f:67:78:e6:6d:ee:9d:34:a6:89:
         5a:cd:bb:0e:22:77:9a:ed:80:6f:62:65:7f:2d:50:3e:d2:cc:
         02:70:c8:f5:f5:a8:a9:62:c8:eb:da:5e:5a:af:57:93:bb:57:
         64:5d:d6:5e:a3:21:63:e1:05:6b:a8:19:8c:61:92:93:4b:dc:
         8d:82:09:5e:98:cf:ad:12:45:d5:19:be:98:13:15:fe:87:db:
         70:d6:4a:a3:fa:04:d5:f9:ee:ce:ef:d0:9a:67:51:3f:9b:9b:
         7a:b9:b6:ca:70:1a:60:88:20:a8:8a:7e:83:0b:c4:32:c2:71:
         e0:dd:76:9b:6b:82:f1:53:52:9c:19:b7:85:65:a7:e1:c0:52:
         d0:72:46:95:00:3d:1c:b4:78:44:06:33:a4:79:5e:08:b6:25:
         24:b7:9a:4a:e2:21:51:0f:6e:81:10:15:7c:94:98:20:58:ab:
         54:b8:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:08:09 2024 by rpki-client on console-ams.rpki-client.org