Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0403580d-af92-3b57-9d33-8b901c509ba7.roa
File:                     0403580d-af92-3b57-9d33-8b901c509ba7.roa (raw, json)
Hash identifier:          rRPBNV0QLVTe2MGt230a08RqD6bEot9S2PmujA3V+P4=
Subject key identifier:   28:6D:5B:9B:69:B2:1E:66:69:C5:9F:18:11:25:D0:CC:86:90:BF:8C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F5153D24DF07F8497388E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0403580d-af92-3b57-9d33-8b901c509ba7.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.87.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:15:3d:24:df:07:f8:49:73:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=dbdc262b-39f6-4b16-9b56-411ae755011b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:29:ce:67:a4:48:bc:89:01:89:7c:d2:08:
                    03:fc:9c:bc:87:29:92:f1:a2:e1:73:4b:d8:37:ef:
                    6a:bb:44:7f:cf:e9:68:b9:20:3c:68:11:fa:2f:05:
                    0d:2f:ab:9b:14:24:48:1b:20:2a:51:9f:95:85:5d:
                    e5:d6:33:0b:5d:10:17:23:f1:a1:be:09:22:a5:27:
                    64:ca:92:8c:8f:2d:2f:73:11:a3:e9:f7:65:e8:c9:
                    69:79:53:24:2c:55:dc:f2:e3:a3:11:b5:00:f7:4f:
                    1d:07:65:8e:e0:e7:16:c5:76:0a:ae:83:90:d8:07:
                    33:d7:7c:be:9d:7a:69:21:10:c5:d2:1c:e9:fb:28:
                    10:41:d9:e9:43:b1:11:02:5b:1f:7f:97:35:cb:5b:
                    b1:4c:c0:d2:fc:34:ae:68:5f:14:b9:be:4a:c5:6b:
                    a3:46:51:53:4d:d6:a1:13:f3:91:69:61:ae:35:79:
                    26:60:12:dd:cf:a5:47:81:c2:01:3b:9f:61:d4:47:
                    29:bb:02:cd:a1:b1:93:e1:fd:87:09:52:f4:cd:30:
                    e6:59:06:28:13:dc:e8:0a:40:82:da:41:74:80:3b:
                    09:39:db:61:21:33:1e:0b:6d:f1:77:ec:68:8c:7d:
                    37:9d:a5:4e:91:8a:dd:99:8e:3a:60:b3:b6:48:0d:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6D:5B:9B:69:B2:1E:66:69:C5:9F:18:11:25:D0:CC:86:90:BF:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0403580d-af92-3b57-9d33-8b901c509ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.87.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:33:fa:fc:20:74:7c:e7:9c:1e:76:49:22:9b:fa:53:c6:f8:
         2e:95:eb:14:06:22:38:64:ca:27:9d:f4:69:62:5d:3c:b2:f9:
         6e:66:82:83:4f:08:dc:9a:66:cf:88:77:47:70:d3:1f:ba:cf:
         39:53:9f:73:0e:04:34:40:e8:86:5b:28:7a:82:94:75:ab:8d:
         cd:d5:74:d4:a5:c4:7c:0d:09:8c:53:d1:25:2b:df:dc:50:f1:
         a6:f0:8f:6f:1c:c3:d4:10:4a:a4:9e:48:b1:5b:01:1c:41:fb:
         c5:1a:35:d2:cd:9c:23:df:9e:46:f6:9d:82:68:78:54:98:4b:
         f4:2d:3a:6c:16:e4:21:3e:ca:73:44:b2:52:0e:7e:9a:b7:b8:
         9b:8e:18:2d:c5:3e:c0:67:26:b6:79:19:2b:0f:37:fc:cd:cd:
         db:f0:d7:bd:22:3e:29:b4:63:5a:e9:7c:8b:8a:17:8c:cd:51:
         c1:0e:a2:42:2c:35:67:b7:cd:04:44:ce:4a:0b:90:b3:be:23:
         b0:44:79:81:ab:d3:a4:0b:7f:18:89:71:b3:4b:d0:eb:80:ca:
         81:8c:aa:0d:fa:83:16:04:2a:d6:a0:11:89:21:b3:c2:37:43:
         76:6a:4b:35:78:04:4f:50:12:60:43:47:5c:86:31:d8:32:bc:
         31:89:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:39 2024 by rpki-client on console-ams.rpki-client.org