Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/febd9f0d-98b7-3dcc-804a-bb2297b79d97.roa
File:                     febd9f0d-98b7-3dcc-804a-bb2297b79d97.roa (raw, json)
Hash identifier:          V0Bv/qRmevD+LLJf1aeiJwaWCUREiwLUTS1A4VSPMlE=
Subject key identifier:   FD:37:DE:3E:43:21:10:C1:2A:4E:F0:89:B9:98:F3:FD:E7:9E:86:7F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490A2E664A02A63A7ADCADC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/febd9f0d-98b7-3dcc-804a-bb2297b79d97.roa
Signing time:             Thu 21 Mar 2024 21:40:36 +0000
ROA not before:           Thu 21 Mar 2024 21:40:36 +0000
ROA not after:            Wed 19 Jun 2024 21:40:36 +0000
asID:                     396982
IP address blocks:        34.90.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0a:2e:66:4a:02:a6:3a:7a:dc:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:40:36 2024 GMT
            Not After : Jun 19 21:40:36 2024 GMT
        Subject: CN=67eb1add-b06e-40d8-88e2-df6526fe6c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:4b:08:d7:4c:1f:78:16:b8:96:4a:9c:b7:
                    5c:da:3e:ad:2a:27:4e:07:9b:7a:40:38:b1:67:85:
                    c2:07:8b:f7:3d:39:12:6b:9e:ee:24:bc:20:11:c6:
                    96:b0:50:a4:2a:b4:18:79:06:07:7b:af:f1:3c:03:
                    9d:64:d2:cf:95:3f:fe:80:e0:30:07:82:1d:5e:6d:
                    60:23:fb:19:6a:a5:ab:8d:6e:32:f7:75:36:61:99:
                    2b:7f:82:ea:0c:85:da:dd:3c:cc:04:92:ad:3f:60:
                    71:8a:2a:d9:91:53:8b:cb:25:10:86:43:ac:f3:ce:
                    aa:10:5a:ff:a2:21:43:be:35:03:4c:fa:77:90:d4:
                    61:ea:04:28:86:34:25:27:14:e1:1e:b3:84:98:cf:
                    f4:0f:d2:84:1c:8b:f8:9c:b7:de:e6:cc:b0:21:34:
                    ea:aa:98:75:50:71:e9:d8:57:eb:5a:a3:03:1f:62:
                    e0:ad:f3:39:0c:61:c2:76:04:bb:b6:23:9a:35:7e:
                    13:ab:13:fb:60:73:27:8b:41:f4:0a:32:57:78:20:
                    c5:fd:e2:09:de:d8:73:a2:38:e0:49:10:dd:e8:d4:
                    84:b3:00:60:21:22:67:5b:a3:ea:ef:08:b2:b4:b5:
                    63:95:01:ee:03:84:c4:ed:58:7b:97:1e:e7:ed:eb:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:37:DE:3E:43:21:10:C1:2A:4E:F0:89:B9:98:F3:FD:E7:9E:86:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/febd9f0d-98b7-3dcc-804a-bb2297b79d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.90.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:02:ce:f7:e4:7a:c3:74:cc:78:a8:42:96:8c:e9:2d:00:
         a4:32:d4:c9:73:4a:0c:90:24:9f:57:45:34:1b:33:61:1d:06:
         da:39:50:0f:bd:71:14:a2:c2:95:45:c2:86:52:61:9a:c4:15:
         01:bd:c4:e8:36:83:06:c4:fe:06:4e:ea:47:af:a2:ee:a4:4f:
         69:be:e5:4f:a9:e1:73:52:ef:13:2b:8d:fc:86:60:74:d5:bb:
         94:6e:77:7d:9e:88:9e:1a:fa:60:95:33:ca:22:fb:90:71:f5:
         32:e7:9e:f0:db:0f:92:37:f4:62:12:b7:a0:33:2a:f4:7c:78:
         3f:c9:db:c4:9b:e0:ca:bc:80:bb:a1:0a:93:b1:6c:b9:5b:ff:
         9c:7a:77:b5:2f:82:e7:54:36:9e:10:4c:ff:d0:be:17:ce:dc:
         39:83:01:0d:a7:51:df:f2:4e:44:6d:34:ee:94:8e:f0:0d:64:
         82:4e:8a:5c:a8:74:76:86:ff:5a:72:f5:ae:df:8c:d9:e7:a5:
         34:b5:84:73:dd:c9:da:d7:bd:f2:b5:91:58:4c:88:fe:5a:20:
         5e:c9:8a:0d:b8:bb:4b:2f:7e:a5:56:2d:2b:18:94:6e:00:e9:
         48:90:c8:80:7b:0e:18:ed:08:82:4a:66:c0:81:46:73:6b:3d:
         a2:95:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:26 2024 by rpki-client on console-ams.rpki-client.org