Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffbdb0c8-cb20-385b-8c70-e37a55a0bf97.roa
File:                     ffbdb0c8-cb20-385b-8c70-e37a55a0bf97.roa (raw, json)
Hash identifier:          gOCXDPBxBbtlEM7xIHuIt0xXLZzjdVvqmgpDBM6mT20=
Subject key identifier:   5C:11:DD:C4:0B:A5:7B:AD:DB:36:2B:D2:39:BA:80:C1:81:F9:AE:46
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490BD8995A84767CD6853680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffbdb0c8-cb20-385b-8c70-e37a55a0bf97.roa
Signing time:             Thu 21 Mar 2024 21:43:57 +0000
ROA not before:           Thu 21 Mar 2024 21:43:57 +0000
ROA not after:            Wed 19 Jun 2024 21:43:57 +0000
asID:                     396982
IP address blocks:        34.84.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0b:d8:99:5a:84:76:7c:d6:85:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:43:57 2024 GMT
            Not After : Jun 19 21:43:57 2024 GMT
        Subject: CN=875d4442-2575-4600-b0ef-10455cdc9ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:bc:b5:63:9a:b5:d7:1c:3f:59:82:7f:58:
                    ba:f8:0f:96:eb:72:31:e7:8a:4a:a3:99:f4:2c:2b:
                    07:8d:e9:72:9b:60:e6:d2:d2:09:40:d9:d6:b9:19:
                    24:00:05:93:9b:ef:b0:21:1f:17:c1:be:c1:be:96:
                    52:93:a5:26:d8:eb:65:47:d8:71:17:af:25:04:2f:
                    16:77:b4:fd:7b:91:f5:9e:10:81:48:ae:f2:45:5c:
                    71:fa:51:72:52:07:8c:fe:68:aa:9a:c6:a1:b7:4a:
                    27:7c:25:20:1a:c5:2b:2a:bd:71:06:b3:4e:fb:75:
                    c8:77:14:3c:05:9b:8a:ab:69:20:4f:ef:45:e7:dc:
                    35:28:4f:25:b0:b0:7b:85:b3:f6:01:85:8d:f6:24:
                    1b:f5:19:20:08:54:30:4f:79:d3:ab:c1:50:16:72:
                    bb:e8:a4:26:30:5c:0c:ff:9d:48:fa:cf:78:a3:63:
                    ec:f9:f0:9c:f0:4c:4c:a0:9e:fd:92:3c:e4:ad:bc:
                    24:0a:34:de:95:e6:6e:eb:59:a9:06:28:ec:2d:56:
                    de:f2:23:93:32:65:7b:83:a3:8a:fa:c2:73:c1:f8:
                    a5:fe:e7:6b:c8:e5:7d:82:77:89:d9:9e:97:38:b6:
                    1e:cc:0d:6d:56:81:90:16:fb:5e:13:3b:d7:20:f1:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:11:DD:C4:0B:A5:7B:AD:DB:36:2B:D2:39:BA:80:C1:81:F9:AE:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffbdb0c8-cb20-385b-8c70-e37a55a0bf97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.84.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:20:8c:7d:fd:fc:38:5c:7a:78:5e:3b:1e:3c:2d:04:e1:
         1f:4b:c8:6a:87:f3:53:88:5d:f3:a5:fa:1d:07:ce:a8:c0:5c:
         e1:f6:d9:f7:c8:93:6c:d4:07:fb:01:99:a6:e1:e1:72:42:8f:
         df:f5:03:17:45:50:62:7c:c0:b8:24:2b:49:f9:ec:33:69:9a:
         89:33:97:25:f2:f8:78:02:c3:dd:e8:86:f7:37:f2:a3:6b:ba:
         bf:45:ec:a5:cb:37:fe:8d:75:88:86:ae:e3:5e:20:0c:0c:1f:
         24:db:3e:f3:19:3a:d8:39:64:68:54:a9:dc:3c:f0:2a:0d:fc:
         58:14:d6:f0:a2:51:91:7b:7e:22:de:e7:38:e8:2f:2e:3c:f3:
         83:9a:ba:87:db:bd:bd:58:a0:94:ff:91:99:f5:dd:93:70:76:
         ad:15:da:24:ae:f0:bc:42:66:7b:f8:12:e9:de:9b:4c:14:85:
         40:01:44:8c:cb:1d:ca:8a:0d:4c:a1:a6:89:c7:d1:5d:23:d5:
         a6:40:c1:3e:da:36:71:4d:6b:23:5f:98:31:5d:02:4e:43:cb:
         73:b6:7a:75:10:18:70:b5:e7:c6:d2:f8:be:16:c6:12:ca:a8:
         f7:e7:09:2d:7b:e2:ef:6d:53:2d:40:6e:07:62:33:21:ec:96:
         6d:03:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:27 2024 by rpki-client on console-ams.rpki-client.org