Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2f5c71d-70c0-3d57-b8da-ff25e4aa6fd5.roa
File:                     c2f5c71d-70c0-3d57-b8da-ff25e4aa6fd5.roa (raw, json)
Hash identifier:          fM9w/IMcoT4Ckek3vm5gmUHSnihhU4XcI3uOwcRD69U=
Subject key identifier:   27:94:F8:99:C2:52:8B:73:93:D5:CA:15:F2:04:97:81:D1:56:0A:02
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454908197D1B18A1C7D0736930
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2f5c71d-70c0-3d57-b8da-ff25e4aa6fd5.roa
Signing time:             Thu 21 Mar 2024 21:36:24 +0000
ROA not before:           Thu 21 Mar 2024 21:36:24 +0000
ROA not after:            Wed 19 Jun 2024 21:36:24 +0000
asID:                     396982
IP address blocks:        34.87.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:08:19:7d:1b:18:a1:c7:d0:73:69:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:36:24 2024 GMT
            Not After : Jun 19 21:36:24 2024 GMT
        Subject: CN=04fdb769-72d6-480f-9ce2-1d963b05b4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:8a:fd:d0:52:74:54:90:37:f1:7d:1f:24:
                    64:d8:98:a9:bf:78:26:da:9a:fc:18:2a:a6:30:3d:
                    ce:d7:0d:91:70:f0:1b:27:61:a7:45:94:6b:71:ca:
                    78:76:d3:32:0d:cb:42:44:f2:c3:a4:0d:a8:1f:d9:
                    5f:53:20:91:b8:d8:9f:69:1f:c7:2a:b0:13:8f:6f:
                    0e:f4:3f:b5:c4:9b:37:cd:a0:c5:ad:1e:5b:a9:e3:
                    74:e7:a8:4f:93:26:78:3f:3d:a4:d1:73:0b:f8:3b:
                    98:18:83:16:86:62:61:04:11:c1:9c:7f:ad:a5:ad:
                    f3:de:49:00:2c:5f:36:35:48:b4:1d:60:b1:af:2f:
                    cc:fe:36:c1:8d:fe:47:c0:d4:e7:e9:af:91:f8:82:
                    53:2c:20:f4:f4:be:8f:90:d4:d9:28:e9:2a:2a:b7:
                    2f:5e:dc:0d:18:af:1f:e6:84:32:ac:97:a1:e3:3b:
                    f5:de:05:37:41:31:74:ef:87:a5:47:c4:e1:42:17:
                    05:8e:f2:35:b8:8f:d4:5c:7b:ce:87:17:e4:28:28:
                    6f:1c:8f:c9:27:7e:dc:cc:19:6d:fd:39:c7:73:74:
                    b9:f4:fe:95:07:c1:d8:ab:e9:28:c0:11:90:d2:df:
                    31:0d:b9:38:43:26:3f:8e:5a:97:d0:8c:54:21:e0:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:F8:99:C2:52:8B:73:93:D5:CA:15:F2:04:97:81:D1:56:0A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2f5c71d-70c0-3d57-b8da-ff25e4aa6fd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.87.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:60:dc:76:c7:1d:5a:80:3f:73:e7:fe:52:17:df:91:57:19:
         a4:fe:39:9c:97:6c:12:f5:1c:70:93:b9:ba:2a:83:4a:a3:a7:
         73:91:92:6c:6c:b2:58:00:1f:35:06:81:bb:e3:5e:74:03:39:
         d2:a9:f5:7e:ca:6e:96:8c:27:fc:04:0d:f3:2c:d1:0c:ac:83:
         6b:58:26:c2:89:02:eb:90:c0:14:44:b6:84:d5:5a:71:97:7f:
         af:93:76:4d:ba:fb:c9:05:35:f7:c7:ce:98:0c:cd:e2:85:7a:
         26:b6:b3:78:eb:de:73:6f:05:48:cb:84:f0:fe:55:d1:54:91:
         c5:8d:b2:f4:e7:48:c1:6b:ce:ec:5e:10:7a:58:47:f0:7a:31:
         16:c0:ac:f0:a9:f8:a2:f4:bc:40:ce:93:55:41:96:1a:63:49:
         1e:07:63:03:90:36:2d:70:f1:bb:94:05:43:e3:37:86:6b:8c:
         59:aa:49:31:0a:32:ab:ae:90:bb:10:59:07:7b:30:79:d5:60:
         03:ef:a6:4c:24:c5:a7:b2:c6:70:51:bf:37:ab:00:60:e1:b9:
         cf:06:ba:96:54:37:39:11:ed:3b:ee:6b:f2:85:df:9a:b8:2c:
         3a:22:cb:b8:b3:83:1c:fa:28:cf:80:81:21:ac:3a:45:da:61:
         2d:9d:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:08 2024 by rpki-client on console-ams.rpki-client.org