Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03393c37-dbc2-3325-b2fd-809b8649a5bd.roa
File:                     03393c37-dbc2-3325-b2fd-809b8649a5bd.roa (raw, json)
Hash identifier:          JBsCdVlZxm94L0uCek1+ZZHh5Um/VBm1OPRPKGxhQw8=
Subject key identifier:   30:8C:B0:A3:5E:9D:54:10:57:9C:0E:B6:96:5C:D9:27:EC:DD:EC:DF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F52BADC9FD68D9CC8914C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03393c37-dbc2-3325-b2fd-809b8649a5bd.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.78.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:2b:ad:c9:fd:68:d9:cc:89:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=0965ca91-b800-4f37-af1b-b81cc0fdbbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:42:50:12:7c:8c:44:83:70:c1:e5:59:22:
                    9d:fb:0e:66:85:f9:7e:74:cc:8d:d7:48:68:34:39:
                    78:5b:96:ec:de:cd:c6:19:2e:34:b2:21:f2:d3:45:
                    97:ea:6b:1b:ac:a1:5a:23:92:ea:0d:9b:6a:e4:20:
                    60:04:f8:73:2b:d6:e8:d8:28:15:b4:0d:8f:dc:ed:
                    21:a8:de:91:4a:e9:85:1f:f2:b1:77:be:c2:98:49:
                    38:ea:fb:de:3d:5d:ad:42:0b:da:a8:6c:b4:32:e8:
                    21:71:09:c0:d0:a0:8d:6f:6a:6b:34:75:20:54:08:
                    3d:a3:87:1b:7d:2c:be:85:20:7a:79:fd:5d:28:ba:
                    0a:7d:fa:b2:89:85:ba:f1:61:a7:fa:28:8e:8e:3d:
                    2b:f1:82:1f:36:91:f1:e4:cc:62:e6:ae:1b:74:84:
                    ec:44:a8:33:cc:d8:e9:76:3e:10:51:48:6d:86:f0:
                    18:21:9d:8b:8c:2b:51:ef:89:be:b2:b5:21:55:2c:
                    b9:af:0f:78:1d:f3:f8:97:bf:d4:c2:f4:53:06:44:
                    33:96:f3:81:c3:50:85:c3:16:38:7c:08:ce:59:bc:
                    c2:40:2f:39:f1:c3:61:71:a9:cd:df:72:9e:a1:54:
                    d0:7e:bc:81:cc:18:d2:33:9f:52:ae:56:2f:23:b4:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:B0:A3:5E:9D:54:10:57:9C:0E:B6:96:5C:D9:27:EC:DD:EC:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03393c37-dbc2-3325-b2fd-809b8649a5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.78.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:0f:ad:c1:e5:11:4b:d0:44:03:92:4c:38:f1:91:76:55:1d:
         b7:99:ab:c3:8a:d2:48:98:b8:9f:fc:10:71:1c:24:eb:75:95:
         05:c3:c1:d1:d9:96:6b:4c:3b:42:ab:0b:07:13:63:38:aa:4f:
         25:80:e1:45:e1:28:8c:de:3f:b5:4f:f3:4a:22:e5:0d:2e:d3:
         87:a4:29:73:08:48:64:a3:c5:79:1d:c9:ab:c9:30:ad:a5:c4:
         64:55:39:40:36:cb:f3:74:6a:98:91:ee:09:89:bf:32:fb:19:
         e2:fb:45:ac:e1:18:79:b9:9b:22:91:07:e5:c5:c3:d9:55:78:
         2c:2d:d4:2f:2a:65:cd:27:50:9b:93:ee:68:52:a3:b7:7f:ca:
         2c:8f:8e:1d:fa:d7:80:69:6f:26:c7:df:42:7d:eb:5f:37:fb:
         70:ff:1b:65:7c:7d:a5:b5:66:95:3f:d6:57:a3:d7:f1:36:3b:
         c7:ec:01:f7:41:5b:95:8b:c9:86:0a:54:b8:21:3c:0a:c6:ab:
         e8:81:8d:1f:4d:49:9d:99:61:8c:4a:24:dd:cf:00:84:f0:38:
         d8:ac:bc:bb:75:27:d7:b1:89:97:c0:bf:31:ad:eb:c9:5a:8b:
         ad:8b:d5:cc:5a:42:aa:22:25:45:38:f3:cb:d2:4a:dc:30:14:
         a0:04:61:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:22 2024 by rpki-client on console-ams.rpki-client.org