Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99640c9b-303a-3c89-981c-f6f6d3ae8069.roa
File:                     99640c9b-303a-3c89-981c-f6f6d3ae8069.roa (raw, json)
Hash identifier:          cldWAYLQZJH4G5SUzBuMEMebr5TEbg+oLGAmBViXhew=
Subject key identifier:   4C:F4:BD:53:73:10:37:00:0B:FA:88:09:85:51:0C:47:54:26:0F:28
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490D9A3F1448E115BBE65840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99640c9b-303a-3c89-981c-f6f6d3ae8069.roa
Signing time:             Thu 21 Mar 2024 21:47:29 +0000
ROA not before:           Thu 21 Mar 2024 21:47:29 +0000
ROA not after:            Wed 19 Jun 2024 21:47:29 +0000
asID:                     396982
IP address blocks:        34.125.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0d:9a:3f:14:48:e1:15:bb:e6:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:47:29 2024 GMT
            Not After : Jun 19 21:47:29 2024 GMT
        Subject: CN=624da114-7abe-4edd-a972-fadb9f1e9a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:d8:d3:38:f2:f9:8e:90:a1:9e:6c:c6:9b:
                    8d:58:fc:c8:f8:12:44:7e:33:36:1a:16:ef:29:fe:
                    70:cc:fe:32:4f:a6:bb:ae:51:86:8e:8c:94:1a:83:
                    81:f5:b2:da:76:76:68:24:24:ec:6f:0b:75:ae:83:
                    17:1c:30:ce:ee:6b:e9:d7:61:54:f7:d5:ff:53:f7:
                    1f:9b:d4:e8:10:5b:68:e9:f4:df:1f:43:a6:c9:8e:
                    ff:51:e9:e2:d4:2d:3a:27:e9:48:01:ac:20:99:24:
                    5b:62:ed:60:a7:5b:0d:0b:f8:c3:fd:87:18:1e:2b:
                    ee:b6:7e:b8:b7:b6:d1:55:73:9e:03:a4:20:05:39:
                    be:1b:39:50:66:bf:e6:53:33:d6:32:17:67:e5:31:
                    cd:6c:c5:ed:e7:5d:bb:69:2b:47:a0:86:ad:2f:fd:
                    66:df:0f:56:2a:05:51:60:77:6c:57:4e:a1:b6:79:
                    1e:1c:df:8f:50:25:79:d4:53:72:ee:f7:ff:30:d3:
                    70:14:ee:84:bb:04:7a:58:bb:82:db:ff:81:a2:0f:
                    a2:d6:d9:3e:80:95:a8:95:94:83:f2:09:48:04:9f:
                    e0:74:7f:e2:25:d4:8f:bd:29:14:51:6d:57:a2:55:
                    20:94:99:7e:9d:8d:b7:4a:fe:51:6e:72:45:09:bc:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F4:BD:53:73:10:37:00:0B:FA:88:09:85:51:0C:47:54:26:0F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99640c9b-303a-3c89-981c-f6f6d3ae8069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.125.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:85:d2:b8:17:bd:8a:19:9a:f2:bc:2a:cf:36:87:38:8b:
         93:25:59:11:3d:e5:18:bf:5a:88:11:6a:c4:60:71:9d:c0:aa:
         f9:25:c2:ba:7e:22:5f:9d:98:97:21:e4:a7:2d:6a:60:bf:1e:
         7c:da:08:ce:d2:c4:43:96:6a:1f:1e:79:c2:1e:ac:0e:c8:ed:
         a9:c0:8d:95:71:5a:2d:16:5c:f0:a3:eb:46:69:c1:dc:d4:0d:
         09:ae:b6:ea:67:08:17:58:96:71:51:90:53:16:fd:e7:0d:f8:
         51:38:e3:75:64:bb:de:cb:55:bd:ac:b1:38:5e:03:9d:12:4d:
         c3:fc:3a:30:17:40:bc:97:02:af:49:3f:2f:43:8f:bb:37:2b:
         72:9f:e7:4f:38:45:0a:8e:c9:e4:ba:02:d5:c5:97:94:70:3b:
         24:e7:7f:68:1e:94:fd:57:63:99:d1:5b:2f:41:b8:bb:36:f4:
         18:f9:43:95:98:33:8c:5d:7e:e0:3b:b7:d1:e4:f9:0b:7b:5e:
         f8:0a:9b:f1:7b:bd:a9:14:7f:b4:4f:9d:fd:9a:a9:9a:ce:fe:
         ec:8b:2c:57:d0:f2:4a:2e:6b:86:bd:b9:40:d9:89:d0:e7:b1:
         5c:f1:8b:b4:40:c0:6c:6c:8f:43:7b:a8:fe:48:75:ad:86:ff:
         35:c5:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:49:39 2024 by rpki-client on console-ams.rpki-client.org