Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/02e18b04-c46c-30a7-94b5-2ed800e83880.roa
File:                     02e18b04-c46c-30a7-94b5-2ed800e83880.roa (raw, json)
Hash identifier:          MCDalGugcaygzhTWhNp0REzZ3t3IfYnD74/KDoy6Kaw=
Subject key identifier:   B6:50:6B:63:74:73:CA:BE:72:29:7D:DA:BD:18:6D:D7:88:6C:D6:C4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454628BAC920E7F16C3E816000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/02e18b04-c46c-30a7-94b5-2ed800e83880.roa
Signing time:             Wed 20 Mar 2024 20:54:43 +0000
ROA not before:           Wed 20 Mar 2024 20:54:43 +0000
ROA not after:            Tue 18 Jun 2024 20:54:43 +0000
asID:                     15169
IP address blocks:        34.1.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:ba:c9:20:e7:f1:6c:3e:81:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:54:43 2024 GMT
            Not After : Jun 18 20:54:43 2024 GMT
        Subject: CN=4c2b1d43-a2e6-411b-a1f4-f2aefd16c01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:d6:d1:db:f0:e7:83:37:8c:db:6f:27:ce:
                    f3:e7:98:22:61:8a:72:6a:df:8c:14:9b:4e:a0:f3:
                    45:38:15:04:53:52:2d:09:85:f5:d7:10:07:63:4f:
                    53:4b:39:fa:62:28:9b:7f:94:2b:0d:bf:38:1a:ba:
                    00:59:15:71:82:a0:f4:eb:c5:f3:60:bc:8f:bb:20:
                    46:ef:50:f8:31:e9:38:05:38:16:fa:1c:71:e4:ec:
                    3d:37:d4:13:cb:b9:36:ed:e5:9a:55:d5:cd:ea:a2:
                    6c:bb:14:5e:02:80:73:91:d7:21:02:d5:3f:21:4b:
                    a2:cc:2d:01:ab:3c:17:d9:80:ef:59:5b:bb:63:f9:
                    88:9b:65:ee:98:ba:cf:ac:4d:23:f8:3e:4a:5e:3c:
                    93:b5:5b:36:c2:dd:84:f5:eb:50:28:c2:0e:87:2d:
                    47:ed:60:08:b4:68:73:f7:e4:ce:f0:7d:68:89:5e:
                    67:04:0c:7f:52:f6:37:00:44:a9:02:b7:ea:f2:cf:
                    64:19:65:f3:72:40:5c:cf:d2:d1:36:b3:54:96:fe:
                    26:ec:dd:16:02:8f:b9:43:66:6c:f6:4d:23:c5:d3:
                    23:a1:17:74:40:89:18:09:18:b3:17:a6:88:c5:31:
                    88:8a:db:3b:96:34:ff:16:7d:38:89:7c:af:71:a7:
                    22:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:50:6B:63:74:73:CA:BE:72:29:7D:DA:BD:18:6D:D7:88:6C:D6:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/02e18b04-c46c-30a7-94b5-2ed800e83880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:3c:93:b0:81:25:cd:39:73:04:57:29:ad:35:8e:5c:54:6e:
         03:98:a4:1e:85:3a:71:9c:1e:7b:e4:3b:f3:36:76:21:62:64:
         96:4c:0e:55:f9:0a:2a:d8:27:59:f4:f3:24:c0:0b:75:18:b6:
         aa:a3:9d:4f:f5:2f:42:b3:f6:34:0a:9d:80:e9:cf:b3:3c:77:
         14:d9:94:7b:0b:e2:8f:dc:59:94:86:35:5f:e0:88:1c:e0:d5:
         d5:f3:35:50:50:35:fd:77:ca:97:fd:6d:2f:4f:2d:43:e0:57:
         ae:ea:1c:b2:f7:40:90:05:ce:62:c3:3f:d9:23:e1:f3:94:2b:
         47:c2:3d:40:ff:be:be:23:e0:0d:9f:07:67:f0:5a:e2:dc:53:
         79:46:df:69:91:8f:a1:8a:ec:7d:4a:d3:a6:d1:4c:f1:6f:cc:
         f0:d3:53:38:35:50:b2:4d:5e:2b:ee:98:67:44:35:0e:d3:d9:
         c0:6a:0f:25:9a:bd:1c:a7:34:58:12:68:d8:94:11:70:cf:0d:
         eb:3e:66:1e:41:72:39:ba:9e:62:4b:fe:b0:b4:0d:73:dd:89:
         46:43:10:7c:73:13:b4:3d:bd:91:69:1b:e0:2f:19:9b:6c:45:
         77:e3:92:6c:51:ae:c6:4f:8e:7e:e0:6f:e7:ef:20:a6:ac:ea:
         26:84:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:44:21 2024 by rpki-client on console-ams.rpki-client.org