Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a15ae371-0462-3246-aaf5-053b05336402.roa
File:                     a15ae371-0462-3246-aaf5-053b05336402.roa (raw, json)
Hash identifier:          ifES8wrhmVBz0W3gk7BsHycHXbrUC6F1KHbPWBf9/sU=
Subject key identifier:   58:BC:8B:21:6D:CA:05:D3:16:C9:CF:94:3B:9A:59:B4:ED:F4:3B:65
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FDE7D65F0AD02E7637FEE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a15ae371-0462-3246-aaf5-053b05336402.roa
Signing time:             Thu 21 Mar 2024 21:15:52 +0000
ROA not before:           Thu 21 Mar 2024 21:15:52 +0000
ROA not after:            Wed 19 Jun 2024 21:15:52 +0000
asID:                     396982
IP address blocks:        34.34.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fd:e7:d6:5f:0a:d0:2e:76:37:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:15:52 2024 GMT
            Not After : Jun 19 21:15:52 2024 GMT
        Subject: CN=07b8290a-2d91-4721-9fd0-b6be8204c60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:94:44:33:b2:6b:6c:f2:44:4b:c5:bf:99:
                    a1:f6:55:20:c7:77:ba:a2:4f:f2:5e:c8:29:f7:e6:
                    55:e2:65:2c:6e:9f:e6:84:af:5f:04:45:34:57:9a:
                    a2:8d:ac:3a:13:e3:d7:00:cb:8c:e2:d7:79:c9:f6:
                    f7:9b:b5:ce:b0:57:14:d8:82:9e:f2:16:7a:e8:fb:
                    fc:1c:0f:65:bb:7d:54:cc:0a:46:ce:b0:9b:32:75:
                    e3:6d:3f:dd:69:91:e8:79:b7:10:37:ed:20:d1:92:
                    b6:c4:23:fd:40:4f:2d:72:85:ad:76:b4:29:6e:15:
                    7e:39:ca:d2:7a:9f:70:33:ca:e2:fa:9b:0e:7f:b4:
                    b9:b1:1a:36:b1:73:bc:59:e4:f9:2a:fb:df:57:11:
                    5c:03:78:81:3f:2c:87:c3:5b:f2:cb:34:16:e9:55:
                    30:80:90:2d:2d:d0:f6:2a:a0:60:41:06:40:6a:c1:
                    2c:0d:b8:89:59:8f:3e:54:77:a5:bb:ee:e8:51:2f:
                    d9:07:8d:8b:21:5b:07:48:12:7b:ea:e1:fd:ca:c6:
                    a0:d1:e9:e5:fa:88:74:9b:e1:6f:03:2c:da:60:b6:
                    05:aa:f2:1f:84:99:d9:56:ca:18:fd:fc:9d:b6:a8:
                    cc:1a:55:01:34:a0:e8:93:01:5c:b4:88:22:4b:aa:
                    bd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:8B:21:6D:CA:05:D3:16:C9:CF:94:3B:9A:59:B4:ED:F4:3B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a15ae371-0462-3246-aaf5-053b05336402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.34.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:ff:f2:23:67:0f:65:84:99:e4:45:67:fd:c3:2f:94:27:
         02:8a:29:3e:70:23:d4:e4:a6:73:28:4f:d0:3c:b5:ca:70:ab:
         e4:b3:99:d4:ec:ee:d8:c5:f1:84:b1:9d:08:22:b9:ee:89:09:
         3a:5f:7c:15:49:80:8f:41:06:4f:71:2b:e8:59:d1:9f:5a:bf:
         41:a0:47:41:46:e3:4f:a2:60:54:91:04:ad:f4:c8:80:8d:dd:
         14:72:3d:25:5d:bf:c1:6b:7a:00:93:02:cb:95:d0:16:72:de:
         9a:e7:72:23:da:44:c9:1d:5a:c6:2f:5e:fc:b7:d8:95:d7:f0:
         4a:30:e0:42:d5:2e:d2:62:8d:ae:12:33:e7:8a:01:50:07:14:
         4b:1f:6a:a0:f9:6c:84:04:d5:4b:4f:04:69:66:24:96:4d:a4:
         8f:11:85:39:b1:31:77:59:b4:1f:58:f4:8e:2d:87:40:68:b8:
         6c:5a:21:43:81:40:69:98:67:a1:84:03:68:47:c8:1f:6f:f9:
         09:89:eb:f2:c5:63:44:aa:79:19:c3:fa:6a:3f:9e:fd:89:5d:
         f6:5a:75:31:77:a8:2f:26:87:2a:0c:57:e9:c9:1b:ea:6f:cc:
         0e:eb:40:9f:3b:a7:53:86:7f:38:c8:29:f9:da:88:d9:1f:02:
         59:2a:de:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:52 2024 by rpki-client on console-fra.rpki-client.org