Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b517895c-fefc-33ea-ab54-1cea61b54e92.roa
File:                     b517895c-fefc-33ea-ab54-1cea61b54e92.roa (raw, json)
Hash identifier:          FnQXDtrnnWbEXknjWFIcTytDMQHZR9vz4o6FTwLqnbc=
Subject key identifier:   E4:A7:A5:D5:2E:4D:B6:8C:6C:67:FB:2B:5B:39:8B:6E:34:74:FF:90
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549018837A6A36376CFA42A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b517895c-fefc-33ea-ab54-1cea61b54e92.roa
Signing time:             Thu 21 Mar 2024 21:23:10 +0000
ROA not before:           Thu 21 Mar 2024 21:23:10 +0000
ROA not after:            Wed 19 Jun 2024 21:23:10 +0000
asID:                     396982
IP address blocks:        34.90.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:01:88:37:a6:a3:63:76:cf:a4:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:23:10 2024 GMT
            Not After : Jun 19 21:23:10 2024 GMT
        Subject: CN=8f3e9104-717e-4172-8e2f-df3f7eed24bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:32:80:78:0a:3e:72:9e:54:be:b5:94:35:
                    a2:55:8b:c3:18:a8:7a:d1:3d:a2:66:d5:df:d3:60:
                    61:d6:ab:f3:75:23:71:c1:a8:51:e6:1b:69:13:93:
                    11:8d:44:dd:0c:1a:65:b4:73:6a:8a:73:44:88:a4:
                    13:8a:0f:3a:24:e7:54:7c:ab:aa:c4:c0:91:c2:32:
                    da:94:ef:f2:dd:70:97:32:fc:92:3e:31:19:27:63:
                    bd:fd:2c:10:05:ec:cf:80:79:b1:85:ea:d8:d7:63:
                    a3:bb:f7:29:55:80:41:49:1f:fd:fa:06:e8:0e:67:
                    e2:dc:a1:41:d7:55:7b:ab:e6:b3:23:99:aa:63:14:
                    9e:fd:c8:c3:5b:d3:36:f1:5b:a6:72:c4:36:c7:2e:
                    43:e4:f1:2b:b1:77:5d:be:a7:08:fc:be:b7:eb:0e:
                    82:e9:d6:04:1e:60:d3:84:3d:8f:2b:04:78:e9:c0:
                    f3:42:cd:48:1f:dc:81:2f:a5:4d:97:b1:42:2a:8d:
                    0e:52:09:45:06:9c:85:63:31:7a:38:0a:dd:b0:f7:
                    63:1d:be:df:0a:88:86:1e:99:72:a4:31:2b:5c:3f:
                    a2:32:bf:0d:bc:c2:8f:53:35:5d:37:7d:36:0f:7b:
                    5c:44:1c:2f:4e:4e:c2:d9:13:ed:fc:a9:fd:06:25:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:A5:D5:2E:4D:B6:8C:6C:67:FB:2B:5B:39:8B:6E:34:74:FF:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b517895c-fefc-33ea-ab54-1cea61b54e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.90.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:08:d9:55:e5:ef:62:a3:96:de:5c:75:79:c9:df:0a:02:
         00:b0:db:1b:24:24:18:f4:cc:0b:3c:5c:1d:cd:fd:44:ff:df:
         00:8e:5c:ea:79:d3:74:a5:e0:7b:dc:7c:b3:27:07:98:9d:c3:
         08:af:5c:80:cf:39:f8:56:cf:0b:dc:2a:d1:62:05:04:6f:42:
         79:d1:9b:3c:c4:f5:2c:4f:29:4d:8c:68:12:6a:ab:f8:68:34:
         43:22:bb:8f:e1:0c:bc:1d:92:c9:e6:1c:19:33:28:44:9d:70:
         b0:b9:3a:e3:3f:0e:29:e1:d5:cb:69:5f:7b:2a:81:16:94:44:
         46:88:72:0e:fa:80:3e:e6:28:4d:f3:09:95:e0:ba:7d:92:55:
         e9:95:71:50:32:02:9b:e4:3e:bc:1d:4f:fd:f9:74:9a:f3:0b:
         79:ea:14:fd:60:2b:05:0f:ca:de:fd:2e:21:68:2f:7a:1e:d1:
         0b:5b:db:50:ec:a7:24:4c:08:8e:ff:bc:52:23:0c:87:f7:81:
         20:24:86:6a:35:11:80:c3:8f:5c:f6:70:19:40:29:68:c4:6c:
         96:93:50:54:c6:c7:b4:93:55:a4:0b:b5:29:ac:f8:b9:68:27:
         25:d8:97:c0:40:29:ce:f1:49:49:9b:04:2a:ee:13:ef:d0:2e:
         89:7c:19:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:35:49 2024 by rpki-client on console-fra.rpki-client.org