Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef2704e7-f58f-324e-86e7-e88d952e6411.roa
File:                     ef2704e7-f58f-324e-86e7-e88d952e6411.roa (raw, json)
Hash identifier:          t4p8IwlQsC7rqAdxlN57Qb/KTMEbzv1Y/r5WGPD3skQ=
Subject key identifier:   EA:E0:B1:AE:6F:C4:19:AF:FE:95:94:57:4D:4B:9E:82:CB:67:27:31
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454622277F0C4D0DFD22A28B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef2704e7-f58f-324e-86e7-e88d952e6411.roa
Signing time:             Wed 20 Mar 2024 20:41:29 +0000
ROA not before:           Wed 20 Mar 2024 20:41:29 +0000
ROA not after:            Tue 18 Jun 2024 20:41:29 +0000
asID:                     396982
IP address blocks:        34.119.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:22:27:7f:0c:4d:0d:fd:22:a2:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:41:29 2024 GMT
            Not After : Jun 18 20:41:29 2024 GMT
        Subject: CN=2352bece-d65f-4139-ad8f-c848b65626a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:e9:43:84:1a:47:6f:aa:a8:66:4e:67:1d:
                    48:16:3e:15:e6:bb:19:cf:c6:64:7a:19:41:d9:fa:
                    f6:8e:97:ae:0a:d9:28:fd:d4:96:9b:cf:d1:1f:e4:
                    fc:5b:53:17:fe:59:84:23:c2:04:d9:2f:33:87:44:
                    49:f2:16:77:e4:fd:b3:89:41:2a:28:53:7e:47:77:
                    d0:d4:f0:35:6f:25:b2:e7:cc:ba:18:96:84:e7:3d:
                    cb:a6:e4:2c:b0:06:15:bb:4c:7d:07:82:28:4f:81:
                    c2:01:26:43:e2:96:4b:0c:ef:c5:04:66:0f:df:55:
                    da:79:b2:cb:a8:9f:13:8f:e0:51:55:83:88:67:3e:
                    d4:13:da:b3:62:16:77:26:41:0b:20:d5:26:66:1c:
                    55:a0:47:90:56:b4:b0:af:09:19:6d:23:2c:df:ad:
                    35:1d:27:9f:0f:4b:97:5b:ee:ca:e0:76:14:14:be:
                    be:ff:93:da:d0:d2:1e:fe:29:79:d2:e2:97:a7:f2:
                    b2:d4:b5:fe:d6:59:87:6e:96:57:98:30:f3:47:89:
                    c5:06:ac:cc:35:e2:b1:6b:f5:dd:7c:cf:b4:49:cb:
                    15:d5:27:60:ec:10:a0:f9:2d:66:a7:6a:95:1c:5a:
                    d3:4e:38:6d:82:d0:1c:fd:e7:46:e9:d5:0f:8e:62:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E0:B1:AE:6F:C4:19:AF:FE:95:94:57:4D:4B:9E:82:CB:67:27:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef2704e7-f58f-324e-86e7-e88d952e6411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.119.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a1:9a:24:49:32:21:a4:a8:2c:c6:1c:39:b6:fb:d1:ed:35:
         3c:7d:50:97:4e:c5:20:c8:3d:d1:e8:aa:f8:f1:92:a4:13:8f:
         ac:c7:f4:0e:5d:a9:d5:80:31:46:b3:bd:94:a6:df:ae:0e:f6:
         1f:45:98:2c:b8:8b:20:1c:4c:70:87:11:50:08:04:a8:71:ac:
         49:ff:74:5f:24:3c:b7:9a:6f:4e:1f:e2:7f:29:e5:53:45:14:
         dd:ba:44:37:66:0b:a4:1f:8b:a3:8d:bf:ca:63:4e:26:de:f4:
         82:fb:d6:3b:b3:43:f7:d9:7a:ad:a9:f2:fd:13:2f:2a:62:91:
         07:c0:79:37:34:1e:24:d3:c6:55:e3:e9:9c:e2:d7:2c:63:ec:
         63:e6:da:3f:4a:65:64:68:f8:e4:48:29:d1:60:74:18:d2:d9:
         ed:1b:4c:05:a0:bf:09:f7:9f:f4:f0:11:97:3c:1c:39:22:95:
         c4:4a:dc:85:cc:57:a4:9c:03:23:b4:83:61:f9:a6:69:0e:fd:
         0a:61:09:ec:7f:ae:a2:d2:9b:eb:3b:1c:c1:31:3f:9c:62:48:
         f3:de:9b:56:36:6b:c7:9e:b6:da:76:98:bb:e2:af:4b:a3:b4:
         07:35:4a:eb:c1:85:ca:ba:32:01:c2:66:38:2b:6e:75:68:1e:
         25:95:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:22 2024 by rpki-client on console-ams.rpki-client.org