Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f779fd-3c12-3d0c-9769-5d2a7e4932be.roa
File:                     e5f779fd-3c12-3d0c-9769-5d2a7e4932be.roa (raw, json)
Hash identifier:          vecMkVrW1RBbbJJZTAHlcXm+7um6Pjg9TJrwpncTUGg=
Subject key identifier:   2D:76:50:42:05:1A:3E:FE:EC:4C:DA:20:20:AB:A6:05:25:92:2A:FF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454905CD6FAEA5BE108296A200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f779fd-3c12-3d0c-9769-5d2a7e4932be.roa
Signing time:             Thu 21 Mar 2024 21:31:47 +0000
ROA not before:           Thu 21 Mar 2024 21:31:47 +0000
ROA not after:            Wed 19 Jun 2024 21:31:47 +0000
asID:                     396982
IP address blocks:        34.141.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:05:cd:6f:ae:a5:be:10:82:96:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:31:47 2024 GMT
            Not After : Jun 19 21:31:47 2024 GMT
        Subject: CN=3ebb4dab-ac11-4c6e-bc3c-8c19bf19425e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:82:ae:cb:fc:fc:b0:48:f6:0c:b2:6e:1d:
                    c9:56:6f:6d:d7:c8:b0:ea:0e:2a:fc:a7:b6:4c:a4:
                    7a:51:1e:1d:2e:9f:d8:ab:fc:7d:64:42:de:55:65:
                    ec:c8:11:c4:f2:35:27:ec:ed:ec:68:13:db:1b:7a:
                    eb:9b:2d:b4:a9:de:03:77:0f:de:03:6f:f0:c2:aa:
                    76:e5:20:8d:6f:9a:91:cc:56:bc:7d:c9:9c:6a:ea:
                    dc:60:2c:1a:14:7f:6f:41:b0:a2:24:82:50:b7:b5:
                    5c:e1:b8:cc:84:53:f7:23:f9:97:8a:c5:a4:05:1a:
                    85:13:5e:4b:04:14:f8:af:11:f4:13:b9:14:c1:4d:
                    8d:27:21:08:a2:65:f4:34:70:de:e6:45:cf:a9:c8:
                    c7:c3:da:3d:70:8f:0d:e6:0f:17:e9:1e:69:16:90:
                    55:04:9c:de:ec:43:33:52:48:40:51:c4:fd:f1:43:
                    de:fc:4a:98:c0:f4:74:7d:c6:09:87:3a:41:ba:69:
                    61:1d:3c:93:98:26:10:fe:c4:36:ff:ba:ec:f1:c3:
                    24:3c:7e:ef:86:5e:0d:35:20:be:40:4d:60:c2:d9:
                    17:bf:a4:7d:b9:30:db:57:de:c8:ce:a3:5a:3b:10:
                    00:93:ea:03:47:11:a4:28:6a:c8:10:aa:b1:81:ba:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:76:50:42:05:1A:3E:FE:EC:4C:DA:20:20:AB:A6:05:25:92:2A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f779fd-3c12-3d0c-9769-5d2a7e4932be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.141.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:29:b7:52:41:d8:ff:12:e4:06:13:b5:05:92:92:ef:f0:5e:
         dc:f8:92:b1:d2:3a:9b:48:3e:0b:6d:3c:15:59:40:57:c7:6f:
         52:7e:b9:4c:84:5f:45:47:61:d4:df:e6:8e:cb:5b:ac:03:f1:
         05:53:64:04:b0:5c:e7:80:16:66:de:6c:0f:ad:3e:58:66:c6:
         03:7e:c4:13:e5:c1:84:7a:54:76:3a:03:d9:8a:cf:4c:5d:02:
         5a:19:b9:9c:8f:d4:d1:75:c0:c1:7d:78:0a:62:e3:d2:e7:4d:
         c5:ce:e9:e0:01:b4:b5:61:9b:c0:6d:f4:79:39:73:54:30:fe:
         6b:aa:4d:cb:e3:d2:29:3b:81:28:ac:50:55:fc:6a:a9:6a:ba:
         be:90:39:81:ff:41:cf:cc:70:97:91:eb:7f:28:26:42:63:e6:
         9c:f9:b0:36:e5:58:38:b9:27:3d:79:48:3c:53:d2:22:c1:d3:
         dd:5a:35:dd:22:52:ad:a4:70:16:76:82:a6:2b:0a:cd:a1:81:
         ad:d3:5a:5a:78:91:a8:96:a1:7b:5a:a4:35:50:7a:ff:de:32:
         32:84:e9:f1:96:c7:f4:ee:61:cd:0c:e8:be:ac:5f:64:c8:60:
         b1:37:ea:f5:4a:da:d9:97:01:9f:06:ea:7c:5c:7c:ce:41:86:
         f7:6a:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:50:16 2024 by rpki-client on console-ams.rpki-client.org