Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b819afde-db05-35ff-b3f5-40159e8c48cd.roa
File:                     b819afde-db05-35ff-b3f5-40159e8c48cd.roa (raw, json)
Hash identifier:          Uhmno2OjY9txmtB4V22t6AOKWCc4F7hiWz4hVveE7qo=
Subject key identifier:   0F:95:81:81:E2:08:C1:30:BF:AE:DC:07:B7:EE:2A:F3:A5:0D:32:CD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FCB0BA7EEC685661412AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b819afde-db05-35ff-b3f5-40159e8c48cd.roa
Signing time:             Thu 21 Mar 2024 21:13:25 +0000
ROA not before:           Thu 21 Mar 2024 21:13:25 +0000
ROA not after:            Wed 19 Jun 2024 21:13:25 +0000
asID:                     396982
IP address blocks:        34.85.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fc:b0:ba:7e:ec:68:56:61:41:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:13:25 2024 GMT
            Not After : Jun 19 21:13:25 2024 GMT
        Subject: CN=9ad16c5a-522c-40b5-9645-d33b97308f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:5d:fb:21:b2:2b:ec:f6:38:75:80:a9:ba:
                    bd:14:23:66:38:fb:65:94:9b:5a:49:fa:1a:68:85:
                    fd:9e:f2:c2:74:4f:cc:99:54:63:a7:97:57:ff:49:
                    6b:e4:e2:78:99:2b:cd:bf:a1:5b:1f:fc:c3:6e:41:
                    ba:c5:d8:5b:29:cd:61:9f:59:35:33:19:bc:b7:69:
                    d8:2b:df:96:8c:d4:20:45:75:89:9d:2f:f0:11:93:
                    3b:58:4f:d6:74:f2:0a:94:ae:63:a7:c1:90:10:08:
                    5c:de:ea:2b:3d:36:10:80:5b:d3:70:77:09:bf:35:
                    81:c4:b0:6a:ab:bb:01:82:81:65:55:e1:80:3d:50:
                    23:d5:9c:0b:ce:ab:26:10:a7:3c:67:68:4c:7b:9f:
                    e6:01:9c:2f:c2:8d:90:df:2a:1c:9b:28:cb:7a:14:
                    3b:6f:13:cb:5a:1e:a6:e7:b4:d7:24:31:bb:b7:b9:
                    89:47:21:5b:d5:87:bf:7d:10:b1:cf:31:f1:4c:23:
                    48:bb:2b:fc:fa:5c:bb:3a:03:11:07:5b:6d:ec:6c:
                    35:6d:13:bb:ac:70:2f:d0:0f:28:16:4c:02:5f:46:
                    92:47:63:6c:f3:c9:8b:04:75:1e:29:5c:50:06:20:
                    c5:7c:79:0a:cc:9a:0e:49:3e:33:e3:80:d1:3f:80:
                    10:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:95:81:81:E2:08:C1:30:BF:AE:DC:07:B7:EE:2A:F3:A5:0D:32:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b819afde-db05-35ff-b3f5-40159e8c48cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.85.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1d:2d:8f:db:a3:dc:82:28:8c:60:93:d7:cd:3f:ba:2f:c7:
         92:30:28:9f:80:c3:02:e7:55:c6:e0:7a:12:1d:89:9b:15:8d:
         cb:aa:0e:b1:e6:4b:83:cd:a5:85:1c:88:ad:6c:df:5e:17:44:
         d0:15:a2:94:37:e0:52:0e:a8:e8:d4:ea:78:5f:9d:36:ac:98:
         34:4f:18:99:39:83:98:fc:9e:21:1a:60:8a:03:fa:69:20:de:
         b8:25:5d:4d:0f:49:6f:a8:92:9c:49:4d:51:dc:65:2d:c4:ee:
         32:3b:54:d5:98:9a:f0:2e:39:53:ce:71:b5:47:d2:5d:d2:f9:
         cf:45:f8:ae:ec:da:f4:1d:f6:a0:e3:c5:50:3e:5c:a1:69:c1:
         85:63:4c:13:da:59:52:7c:de:8e:a1:46:28:93:f5:a4:6e:6f:
         b4:91:74:b4:ad:f4:c6:b1:cf:4c:9f:5f:8a:7d:6e:78:2a:e4:
         1c:94:15:ac:d3:79:98:13:1a:40:d8:f4:4a:e9:e8:27:61:6c:
         42:65:7d:9b:27:fc:92:9e:61:f9:a2:7c:ab:49:04:2f:64:d9:
         18:06:12:7a:a1:45:ed:38:12:45:d9:b4:85:62:3f:29:9b:9a:
         26:06:f1:43:16:3d:36:d7:a1:f6:9b:41:34:90:d8:a5:5b:72:
         3e:d1:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:08:18 2024 by rpki-client on console-ams.rpki-client.org