Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd7699ab-4990-3cb4-a38d-d21affd6272b.roa
File:                     dd7699ab-4990-3cb4-a38d-d21affd6272b.roa (raw, json)
Hash identifier:          Rx+VGw3ALdc6T8K0x6wXKToQt4EYMLYKPm86priqnbQ=
Subject key identifier:   82:3C:A5:B9:B8:44:60:BA:CA:5C:28:07:26:50:BC:47:56:17:2E:BB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490B1C14CC98451F415B5C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd7699ab-4990-3cb4-a38d-d21affd6272b.roa
Signing time:             Thu 21 Mar 2024 21:42:28 +0000
ROA not before:           Thu 21 Mar 2024 21:42:28 +0000
ROA not after:            Wed 19 Jun 2024 21:42:28 +0000
asID:                     396982
IP address blocks:        34.152.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0b:1c:14:cc:98:45:1f:41:5b:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:42:28 2024 GMT
            Not After : Jun 19 21:42:28 2024 GMT
        Subject: CN=1935493c-9477-4e86-99e2-6e84829b6c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:a7:07:8d:06:98:18:64:47:21:00:51:3e:
                    fb:75:97:64:14:4d:60:63:84:be:5c:ac:8c:46:83:
                    b0:ba:d8:62:5a:69:46:e6:a7:de:2b:a0:cd:f6:92:
                    b8:66:d9:55:e8:63:47:8d:4a:d3:3c:ca:fb:a6:db:
                    b4:75:b1:b8:03:76:0b:e4:03:68:7a:df:2c:e2:0f:
                    e2:8e:a5:53:70:8e:1b:0b:72:2d:fb:ba:c9:d0:b7:
                    76:d3:93:9c:ad:a6:04:11:88:9a:86:c7:5a:57:1b:
                    53:44:5d:d5:f0:d3:9c:4e:fd:89:8b:a5:1b:e6:fb:
                    c0:fa:a9:50:a9:ad:e3:77:9a:dc:53:14:30:b0:3e:
                    17:cb:98:95:f9:1f:c2:64:23:c9:ea:1e:66:61:b6:
                    d7:fc:99:e9:b0:44:f0:cf:b4:da:4e:9c:37:54:02:
                    43:9a:66:af:c4:cf:a6:0d:ab:4d:c1:a0:94:b3:1e:
                    77:f0:5a:39:02:0c:27:88:fe:33:85:a9:86:e3:ae:
                    4f:09:1c:7c:79:e0:1b:5e:80:96:50:ef:56:8c:bd:
                    2c:61:96:c8:4c:9f:7b:35:c4:56:8e:69:a8:3a:19:
                    c2:cc:b6:c2:c6:55:09:bb:98:3c:32:71:ec:89:40:
                    87:d0:64:66:b9:47:21:4c:fc:58:58:06:8e:85:57:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3C:A5:B9:B8:44:60:BA:CA:5C:28:07:26:50:BC:47:56:17:2E:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd7699ab-4990-3cb4-a38d-d21affd6272b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.152.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:98:ab:35:04:f9:05:7f:ab:3a:35:9f:8e:56:2b:d1:e6:
         c8:15:d6:c6:cc:ad:2d:36:90:31:9c:ee:1f:c6:9e:88:db:cd:
         89:cf:a7:94:e9:5b:c0:e8:31:f2:57:91:c1:29:2c:48:16:ed:
         25:06:43:48:4a:3b:f2:bb:1e:8d:35:1c:ee:76:1d:8e:12:a1:
         a5:7e:a7:07:6b:0f:dd:b4:2f:08:cb:1c:23:97:cf:9f:c0:ed:
         1e:b5:19:86:40:8b:ad:1d:b8:1d:d6:ca:7a:77:61:ae:72:ed:
         09:39:d1:75:41:ac:bc:40:fa:a0:06:48:66:c8:9a:af:aa:95:
         9a:43:ca:f2:8c:86:b9:fb:9f:dd:bd:8f:a4:59:18:3d:a5:a0:
         80:0b:1b:bb:bf:de:da:d5:47:89:ff:57:e7:e3:9f:00:1f:1f:
         36:00:c9:58:ac:b5:41:39:b4:62:4b:35:9c:cc:0f:a5:db:24:
         93:8b:2e:ec:e7:3a:3d:c5:d5:38:11:21:96:33:77:85:21:73:
         ea:0d:21:fe:14:20:68:60:7d:55:2f:ad:51:5d:49:56:10:18:
         e1:db:90:3a:4c:8e:a7:5c:27:26:d0:71:13:04:69:19:08:01:
         7b:77:4e:d7:00:32:29:0c:1c:82:1c:a0:10:3c:42:e3:59:af:
         33:18:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:36:07 2024 by rpki-client on console-fra.rpki-client.org