Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6bad2b2-4774-39fa-9ba4-167599a562df.roa
File:                     f6bad2b2-4774-39fa-9ba4-167599a562df.roa (raw, json)
Hash identifier:          k6TSAd8tjyoBwzEOHR85kogTh5g/yYTtXV4jaG1Ahp4=
Subject key identifier:   0A:8C:4E:CF:D9:D6:86:82:74:6D:57:01:57:22:DC:26:B4:08:5B:FA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F00F3FF8016C4347BDE1980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6bad2b2-4774-39fa-9ba4-167599a562df.roa
Signing time:             Fri 29 Mar 2024 18:29:47 +0000
ROA not before:           Fri 29 Mar 2024 18:29:47 +0000
ROA not after:            Thu 27 Jun 2024 18:29:47 +0000
asID:                     396982
IP address blocks:        34.151.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:00:f3:ff:80:16:c4:34:7b:de:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:29:47 2024 GMT
            Not After : Jun 27 18:29:47 2024 GMT
        Subject: CN=af225eac-55b1-4dd1-ae6f-4316313adbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:12:21:ac:de:18:0b:b9:68:1b:b1:03:f9:db:
                    c2:88:2d:8f:50:be:23:98:04:d4:fd:ef:f0:b9:1f:
                    65:9f:2c:0d:89:c8:18:be:e1:38:1e:7c:f9:2b:4c:
                    fb:2c:3f:23:2d:05:02:41:04:d3:04:93:50:97:93:
                    e0:06:1e:a0:0e:75:3c:2b:7f:25:3a:30:32:d5:dc:
                    dc:22:8d:3a:6f:28:94:ae:0c:fb:f4:90:9f:a9:f8:
                    78:1d:88:b9:a4:b4:cf:fd:a9:f7:5d:51:34:d3:50:
                    b3:87:43:c9:11:d3:28:74:d4:c7:16:e3:07:4b:ea:
                    9c:63:a4:c9:4f:51:2b:22:8d:98:6a:d5:4e:9f:41:
                    4d:d7:ae:a5:5f:35:1d:55:1c:30:5d:9e:8c:b5:53:
                    b0:98:c4:28:b1:65:35:b5:70:a5:3a:3b:8e:79:9b:
                    94:52:76:69:b4:6f:67:e4:d4:ac:42:ba:08:4f:d8:
                    cc:1c:89:f8:23:8c:b0:96:d6:a5:27:14:87:56:03:
                    90:28:4b:33:24:5d:23:d6:01:75:69:43:8b:d0:05:
                    11:88:c8:cb:1a:5a:86:58:6d:5d:1b:7c:f5:3e:a7:
                    66:a7:36:a3:0a:c1:ed:f1:5b:9a:05:d4:88:b9:25:
                    a8:1b:c8:0e:14:f6:91:b9:81:c2:4f:eb:5d:46:e6:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8C:4E:CF:D9:D6:86:82:74:6D:57:01:57:22:DC:26:B4:08:5B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6bad2b2-4774-39fa-9ba4-167599a562df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.151.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:d2:95:ad:95:a4:be:01:31:df:7c:13:02:fb:f0:54:4d:
         cf:36:2f:ce:f6:94:c3:79:e3:ab:ee:eb:4a:63:f6:dd:07:8b:
         7a:ab:49:cb:7a:d8:d4:59:ca:f7:ed:3e:e1:1c:95:8b:04:dc:
         d1:88:bd:6e:63:82:29:be:54:9f:90:93:50:66:35:0b:b7:36:
         32:d2:3d:26:f8:9c:0f:5a:48:d1:09:2c:f8:1d:2c:3b:62:8d:
         a7:e1:46:1b:76:9c:58:94:4c:7a:d1:4f:f7:ad:8e:84:d4:78:
         52:0b:f6:45:fa:6a:64:49:15:11:20:25:59:46:ee:21:91:86:
         f1:e5:43:0f:19:b5:fd:9d:e5:93:55:55:e1:76:94:f4:cf:3f:
         af:ff:25:00:19:11:ad:7d:ce:7a:2f:49:d7:a3:76:8e:5f:c0:
         c6:0a:19:ff:0e:4a:06:bb:7e:c6:ca:bb:80:90:f1:7d:18:ce:
         7d:c6:a5:32:df:fd:02:bd:37:2a:8e:94:27:b9:2b:95:7f:2e:
         a1:d5:30:97:6d:91:90:a1:92:7d:fd:16:50:53:8d:bb:0d:71:
         89:bb:13:37:af:9e:4a:1e:81:f1:79:1f:47:6d:7d:e8:4a:d3:
         0c:7e:50:f5:80:5b:0c:3e:88:e4:d1:b4:58:c1:c5:97:f2:e3:
         25:a1:68:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:24 2024 by rpki-client on console-ams.rpki-client.org