Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa
File:                     d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa (raw, json)
Hash identifier:          nB8BeHrkBhWQJnjriMN5kCK8cX57NbGguq///CIivrg=
Subject key identifier:   63:63:6D:6B:54:F3:74:E7:5B:D2:76:1B:F9:7F:06:FF:01:05:D1:3F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462A3CA166BBC0DC3FE23580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa
Signing time:             Wed 20 Mar 2024 20:57:46 +0000
ROA not before:           Wed 20 Mar 2024 20:57:46 +0000
ROA not after:            Tue 18 Jun 2024 20:57:46 +0000
asID:                     396982
IP address blocks:        34.108.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2a:3c:a1:66:bb:c0:dc:3f:e2:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:57:46 2024 GMT
            Not After : Jun 18 20:57:46 2024 GMT
        Subject: CN=ce1787dc-a0d5-4089-b721-742b247af3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:00:f3:c6:d4:a7:f7:7b:43:58:13:02:97:
                    1d:25:6e:50:13:ce:fb:48:8d:2c:df:19:4b:af:ed:
                    df:04:9d:20:43:35:76:83:c4:ed:42:db:8c:35:a3:
                    bf:84:6a:ef:40:7e:1f:99:02:82:2c:32:23:90:ef:
                    d5:21:55:c4:f0:2c:5f:76:50:a2:f7:5f:7d:c8:4f:
                    ef:76:b6:b8:e5:b7:0a:de:34:89:ce:ea:20:95:22:
                    8f:f7:26:92:81:5c:e1:12:9d:90:87:4a:ce:a9:23:
                    84:69:5b:f6:f0:4e:4c:e6:c5:e5:48:87:65:51:61:
                    db:b0:5d:04:e1:b6:bc:96:d4:df:9d:9b:75:74:60:
                    df:79:17:9b:0c:09:50:d2:0d:05:ee:12:9c:09:ad:
                    da:a4:32:ef:73:71:1a:0c:ef:43:5d:dd:1b:25:29:
                    82:3f:ea:e6:15:89:f4:b3:33:88:31:71:c9:f7:9f:
                    a1:1b:7d:c0:d5:f6:c6:c0:bf:e3:a4:0e:e4:f7:86:
                    68:50:87:b8:d0:f7:76:2a:28:12:62:e2:9a:6a:af:
                    8a:b8:4b:22:92:c7:5a:7f:8e:11:0c:97:c5:02:94:
                    75:c4:35:41:ed:af:07:51:d8:09:03:9b:e5:60:7f:
                    43:53:4e:60:4e:a1:1e:c9:01:f6:7b:7e:e4:0a:f2:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:63:6D:6B:54:F3:74:E7:5B:D2:76:1B:F9:7F:06:FF:01:05:D1:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.108.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:01:2a:e8:91:70:4f:4d:ce:38:00:4c:10:fe:e2:7b:3e:90:
         87:44:07:d0:0a:28:27:49:29:24:3f:b4:39:05:d6:ba:97:93:
         6a:9d:72:ad:4d:86:76:63:ab:71:aa:13:28:f7:f6:61:6f:92:
         af:36:7e:50:30:17:7e:25:77:59:c6:16:a8:e5:b7:de:af:ed:
         19:33:5a:3d:8c:64:e4:9d:af:d1:fb:d9:15:0b:f6:fb:de:e8:
         43:a3:e9:f9:33:ed:4a:72:b5:06:45:f0:6b:00:e2:34:84:81:
         71:c1:d0:69:dd:10:ba:64:6a:35:8b:14:83:94:d7:ce:d7:88:
         bc:c9:96:ba:78:9e:ce:7c:8c:33:ef:f9:4c:63:2b:eb:ea:55:
         bb:10:80:fa:d0:1e:7f:2e:8f:3f:e5:97:4d:d7:f2:86:d2:24:
         37:f8:25:a9:d9:42:c4:22:67:69:a3:6c:89:be:7c:61:35:48:
         30:3d:16:98:2f:cb:08:32:3f:ac:ea:e9:a5:13:35:7a:f0:11:
         b9:5e:69:f8:13:c9:b5:a5:1d:a5:a0:0c:1d:b6:ce:72:03:f3:
         d6:6e:01:d9:f0:d8:10:a1:70:2d:d0:f4:ab:ac:63:ed:1d:0f:
         36:5b:d3:6f:3f:e0:50:27:2b:ea:ee:06:df:d7:19:30:bf:23:
         ee:33:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:14 2024 by rpki-client on console-ams.rpki-client.org