Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3763e74-66c7-372d-860b-a5d82723a2c9.roa
File:                     f3763e74-66c7-372d-860b-a5d82723a2c9.roa (raw, json)
Hash identifier:          trZ2OKOFwroN4+FiYe6q5ud7mRBApA8mkk8HowA+Db0=
Subject key identifier:   A9:8A:24:F2:6D:0D:89:E9:C3:40:50:86:EC:3D:5A:13:0C:54:EA:69
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549076F52F69A17FCDBF290C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3763e74-66c7-372d-860b-a5d82723a2c9.roa
Signing time:             Thu 21 Mar 2024 21:35:04 +0000
ROA not before:           Thu 21 Mar 2024 21:35:04 +0000
ROA not after:            Wed 19 Jun 2024 21:35:04 +0000
asID:                     396982
IP address blocks:        34.74.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:07:6f:52:f6:9a:17:fc:db:f2:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:35:04 2024 GMT
            Not After : Jun 19 21:35:04 2024 GMT
        Subject: CN=ebd557e9-0634-4e33-915e-06e99ef8affe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:d2:73:1e:37:77:95:02:84:1a:7c:18:0b:
                    09:3f:fa:c6:14:14:f6:65:37:0c:1e:46:0a:7b:6e:
                    e2:9e:de:14:b6:50:b8:1b:de:0e:b8:08:d5:47:4a:
                    e2:56:e4:49:ab:57:0b:8c:8e:71:f5:b9:8b:f6:2c:
                    c6:23:21:71:9a:9c:7e:2b:9b:d2:20:f3:5c:4a:9f:
                    23:89:a7:7d:c5:a4:62:ae:bf:18:4d:fd:af:16:e3:
                    2e:fe:fb:02:64:36:b7:49:9b:34:36:9d:e2:17:b1:
                    bf:8c:e6:22:36:a3:23:7b:a6:52:b5:9d:c1:1b:22:
                    d3:86:24:5a:a4:61:62:08:3b:7a:2d:8e:25:b0:fe:
                    ff:7c:7b:04:56:0e:88:d6:8c:1f:02:e7:0c:39:66:
                    77:cc:02:8d:bf:ed:61:5a:2d:70:96:6e:18:5e:63:
                    11:c4:c1:73:06:7f:d6:82:8b:09:d6:82:67:39:47:
                    8d:a3:83:eb:98:67:2c:1f:1d:0f:c7:10:f6:ef:27:
                    6c:65:67:e4:88:02:1e:4f:d9:3a:cb:6b:91:a2:be:
                    f0:c9:2a:9e:cc:bc:48:d8:da:8c:97:68:4a:ef:ed:
                    7b:19:9a:ff:d4:ff:cf:42:c4:f6:35:61:2d:5f:cd:
                    bb:b6:66:1c:13:90:ae:40:75:75:d1:e4:8a:89:a6:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8A:24:F2:6D:0D:89:E9:C3:40:50:86:EC:3D:5A:13:0C:54:EA:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3763e74-66c7-372d-860b-a5d82723a2c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.74.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d9:56:b4:35:7c:d3:1c:ab:57:08:9f:97:bc:ee:b7:4d:aa:
         eb:ac:f9:2b:0a:18:b6:8d:4d:5c:d8:25:66:13:86:f6:99:b2:
         b3:c4:d4:28:61:11:d9:f7:77:02:c5:a7:b5:56:b4:80:2f:54:
         d8:d9:3d:9b:b0:0e:fd:84:8e:14:16:31:ea:d9:25:c5:d2:81:
         35:71:b2:e1:dc:d0:c3:88:d8:0c:c2:e1:14:88:f7:5d:76:2a:
         ea:4a:42:1c:db:f1:aa:98:03:e0:5b:09:a9:bb:ee:5c:7b:21:
         d4:41:f0:a2:fc:6c:c8:92:94:f8:0b:95:e6:56:05:9e:02:82:
         c2:70:89:3d:ad:bd:7a:e8:ec:10:87:b9:14:b9:13:65:cc:ca:
         f3:dc:ac:5b:59:06:ff:84:e9:ec:06:68:36:ec:fc:37:85:fd:
         7e:62:bd:5b:b0:ac:9d:d6:ce:47:a6:5a:06:e0:cd:53:f3:ad:
         19:5b:55:ce:60:85:99:f1:f3:ea:52:a1:54:cb:be:54:e0:9b:
         63:b3:10:0c:83:81:4e:d0:f1:d3:a4:6e:3e:b5:68:49:50:b6:
         a4:08:70:bc:c4:e4:c4:54:66:c6:60:eb:91:41:cd:e2:58:26:
         4e:0b:99:71:7d:e4:ef:10:cc:b1:26:dd:a7:34:20:7f:fa:2e:
         4b:c4:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:50:22 2024 by rpki-client on console-ams.rpki-client.org