Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8eff06e-0451-353d-b4b2-0329776778b5.roa
File:                     a8eff06e-0451-353d-b4b2-0329776778b5.roa (raw, json)
Hash identifier:          XEG3XDVEWbREEKTS2WYwKYMLAnfBfBeH6Et66oc5Eo8=
Subject key identifier:   71:C0:3E:46:F7:A2:42:7D:3B:E7:5B:EA:C4:C5:B0:40:D3:02:47:87
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F03B20B57C22CF4CB40A380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8eff06e-0451-353d-b4b2-0329776778b5.roa
Signing time:             Fri 29 Mar 2024 18:35:19 +0000
ROA not before:           Fri 29 Mar 2024 18:35:19 +0000
ROA not after:            Thu 27 Jun 2024 18:35:19 +0000
asID:                     396982
IP address blocks:        34.64.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:03:b2:0b:57:c2:2c:f4:cb:40:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:35:19 2024 GMT
            Not After : Jun 27 18:35:19 2024 GMT
        Subject: CN=58e0a5dc-2f8d-4fe3-a151-aab65088a4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:ca:95:05:d5:56:c6:b1:08:31:52:36:f6:
                    5b:b5:67:b7:14:31:86:1c:5a:42:93:b6:43:ea:53:
                    46:cd:25:16:76:b4:07:ef:8b:ff:dd:8b:09:67:69:
                    b6:33:5d:5c:aa:be:55:e4:92:99:53:90:59:2f:b3:
                    b3:f0:45:d8:b2:0e:23:3a:98:77:5e:ab:56:e0:c8:
                    f2:fe:3f:36:cd:f8:71:13:de:cb:87:8b:98:75:2e:
                    39:3f:9a:4c:74:30:07:ec:0c:7b:a0:31:d5:62:53:
                    2a:a6:51:b7:df:cd:3e:67:df:61:ee:7b:98:1e:7b:
                    f1:db:bb:98:4b:d5:3b:4a:fe:fd:37:72:d3:96:e8:
                    c4:51:4b:ce:94:5b:88:65:ef:b5:94:59:86:30:56:
                    41:5d:ef:8c:66:df:a4:e2:da:58:0d:3b:37:0f:09:
                    55:db:e8:a8:3d:6c:3c:31:ee:78:09:e5:de:b9:3c:
                    d7:32:f5:5a:10:e9:11:91:f3:e6:bd:9a:96:5b:67:
                    07:d3:21:41:93:80:0d:31:e0:8e:06:a1:7a:c7:d0:
                    76:ea:5c:3f:52:26:ef:4f:27:5b:45:77:4a:5f:bb:
                    38:4f:40:f0:59:14:aa:c4:0e:06:9e:53:19:14:0a:
                    0f:4e:36:40:f1:9c:d8:f8:85:7b:52:88:1a:f1:a1:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C0:3E:46:F7:A2:42:7D:3B:E7:5B:EA:C4:C5:B0:40:D3:02:47:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8eff06e-0451-353d-b4b2-0329776778b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.64.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:84:51:34:1d:b1:2e:bc:83:96:23:00:04:4d:54:bb:fc:b8:
         46:8d:37:da:85:b9:95:93:0b:30:bb:65:3c:f2:aa:70:62:f7:
         6e:e1:84:d1:03:10:c1:97:c4:6f:4a:fe:c7:7b:fc:e2:99:6c:
         48:3c:21:96:b1:0a:e0:4e:d3:48:5b:ac:c7:2b:ed:d7:03:39:
         ee:17:9e:dd:d5:0b:0d:23:4f:ad:2d:60:b3:84:98:22:22:c7:
         08:23:47:d3:9d:23:17:85:ce:c4:07:be:35:f2:78:df:e5:41:
         c9:a2:1c:8a:6a:08:45:ed:1b:87:d5:e9:ea:2a:15:98:3d:c5:
         e0:ac:eb:22:09:d1:1a:a8:fb:c0:91:85:7f:77:3c:e9:88:13:
         ec:4f:7d:a3:a8:f5:94:85:aa:fc:f8:e6:9d:24:45:5d:c8:14:
         fd:7b:8b:2f:8c:68:d3:6f:27:43:49:a3:e3:a3:64:79:e1:d7:
         19:db:4b:74:e2:8c:e2:05:ea:da:86:39:4e:43:66:76:38:6c:
         71:73:5e:08:4d:0e:6d:ee:20:77:94:cd:59:d1:e8:49:3d:78:
         aa:c5:73:9e:db:cb:1d:df:07:fe:a0:ae:95:f6:45:fa:8a:e0:
         a7:9d:4b:ec:2a:cb:e5:4f:d1:a1:97:dc:3a:75:05:bd:53:55:
         70:86:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:12:57 2024 by rpki-client on console-fra.rpki-client.org