Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa
File:                     9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa (raw, json)
Hash identifier:          HtnB7AEPz/4k1dspa0+1GcB6nZZKfpvH1fYNVxc07zA=
Subject key identifier:   6F:5B:D3:B3:A7:C5:E6:C0:C9:EA:07:EF:37:CC:A4:B8:56:15:95:A3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490FD7113BD912D203BE3580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa
Signing time:             Thu 21 Mar 2024 21:52:00 +0000
ROA not before:           Thu 21 Mar 2024 21:52:00 +0000
ROA not after:            Wed 19 Jun 2024 21:52:00 +0000
asID:                     396982
IP address blocks:        34.143.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0f:d7:11:3b:d9:12:d2:03:be:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:52:00 2024 GMT
            Not After : Jun 19 21:52:00 2024 GMT
        Subject: CN=0d226e8e-b780-443a-b17f-004ff4f1efe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:ce:10:af:88:fb:09:5b:4d:de:33:b3:33:
                    d0:db:ac:c8:ad:ec:d8:bb:3e:dd:5f:29:a2:d6:44:
                    08:ff:4a:1d:9d:a4:a1:a0:af:f1:ac:15:c7:7e:62:
                    fd:06:99:b6:9c:be:2f:1d:39:29:8a:06:d9:29:00:
                    bf:b5:12:d1:7d:87:ae:a9:7e:c5:d0:60:9e:0d:07:
                    82:e6:08:0b:de:f6:24:8d:a0:37:55:20:29:f5:0c:
                    da:ee:3e:1e:84:40:b3:0a:26:3d:75:22:5d:94:9f:
                    86:22:73:0b:f0:6c:c4:ff:a8:83:55:1f:c9:92:26:
                    91:55:ca:c0:95:fe:af:6e:72:2a:fa:bc:4e:6b:53:
                    5d:69:b7:2d:68:b7:0f:7b:0e:58:63:a9:c9:a4:aa:
                    78:22:36:b2:20:30:dd:98:8e:bf:9a:84:ae:73:10:
                    62:7f:14:9b:9b:14:40:12:c0:88:29:ab:1e:85:e0:
                    11:87:db:7c:1a:db:b4:1d:62:22:1b:25:ae:7a:17:
                    de:6f:c1:6a:c7:8d:5f:13:e6:a0:ac:53:22:f1:4f:
                    f3:42:5a:ef:5b:af:5c:5d:0a:c8:4a:bd:67:eb:1d:
                    59:80:a3:c3:41:bd:a6:da:b7:2e:22:ef:b6:0d:15:
                    ad:8a:35:ce:21:b0:87:9a:dc:37:b4:ca:1a:6f:65:
                    fa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:D3:B3:A7:C5:E6:C0:C9:EA:07:EF:37:CC:A4:B8:56:15:95:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.143.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7f:d4:60:2b:bf:81:73:0b:fc:d2:27:03:a9:e3:30:8a:82:
         14:34:49:b8:28:ce:c8:4c:07:83:bf:d5:5e:67:be:08:84:e3:
         40:1c:0d:c2:e7:fd:94:6b:5b:d4:11:32:82:d2:67:ee:5b:ca:
         36:fa:df:ec:31:45:ff:0b:30:7f:28:3c:0e:1a:77:d3:7e:47:
         74:ec:63:bc:b8:16:bd:15:aa:20:08:55:de:26:0a:7e:94:12:
         2b:a7:86:a5:ad:17:dc:31:1b:35:fe:16:0b:4b:c4:c6:5c:c4:
         d7:7a:5a:9e:ba:77:fc:c2:c8:4b:18:e4:c6:ad:e2:7f:94:66:
         5e:b4:f2:7c:69:20:6e:f5:64:45:76:e8:9d:ec:28:28:50:40:
         b3:04:37:1a:7f:e1:07:1e:9e:53:d0:c4:a9:03:93:33:19:e5:
         4b:b8:10:77:e6:88:3c:26:37:3a:78:ad:54:19:4d:a4:9e:cf:
         82:62:3b:e8:03:e4:a6:6c:b3:96:e8:50:1a:ba:77:97:54:cd:
         a2:df:91:e8:81:84:c0:d1:8d:ba:32:55:1a:96:d8:4d:2f:05:
         b0:ed:52:83:4c:63:07:95:c5:0e:51:44:5e:ca:c1:b1:01:bf:
         58:68:1c:0d:ff:a5:d2:30:0c:4c:8b:a8:f9:32:22:b7:62:9f:
         cc:0b:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:35:38 2024 by rpki-client on console-fra.rpki-client.org