Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0627d87d-b68f-3fb3-b5d2-b9577132c68f.roa
File:                     0627d87d-b68f-3fb3-b5d2-b9577132c68f.roa (raw, json)
Hash identifier:          /f3QlGitWmlQ6+GH52qmL7aWNSxBQbINCRc7AlYrJ0o=
Subject key identifier:   AF:CB:32:86:2D:E1:1A:DC:2E:70:17:5F:30:41:E1:23:D5:D2:D5:39
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F520C8AE7AC301AE4FD320
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0627d87d-b68f-3fb3-b5d2-b9577132c68f.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        34.136.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:20:c8:ae:7a:c3:01:ae:4f:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=809c9330-ee46-4975-819a-b5f7461020e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:36:96:8b:d5:3a:09:d0:30:3d:08:2d:0a:
                    df:09:49:f4:2c:42:f0:9f:46:42:37:60:e7:a8:e7:
                    5b:d7:44:28:03:55:9b:79:b6:be:8c:60:be:55:a4:
                    d4:65:b0:d0:e1:26:b7:10:f1:82:0c:0d:0d:7f:98:
                    0c:31:f5:04:c0:0f:51:0d:42:50:0f:74:ff:62:62:
                    10:3d:73:22:7e:36:a6:99:a5:40:1c:4c:41:c6:c4:
                    bd:53:b1:f7:ac:8f:c9:e2:b2:4d:e7:6e:79:74:15:
                    f7:58:bb:93:d3:ed:ba:0f:9b:b4:7b:f8:2c:88:cf:
                    da:73:e1:18:6e:ee:45:82:2d:19:c5:22:e7:b2:74:
                    33:dd:91:a9:24:5b:2c:bf:be:3b:f8:7a:51:0b:6f:
                    ca:a7:79:77:04:77:d5:d1:e4:d7:6d:3b:b3:54:9e:
                    73:26:04:f8:ff:99:9d:ce:89:7c:f6:48:b2:5f:ed:
                    2e:04:bb:bc:ac:6e:8c:62:5d:98:0f:c7:e8:6f:ad:
                    ca:62:22:eb:78:9d:fd:6d:20:11:ee:27:14:08:c9:
                    6e:bc:92:d1:60:7f:9d:49:0b:58:9e:39:90:9d:b5:
                    7c:7f:25:34:a7:73:21:19:59:ce:ef:7e:81:4c:b9:
                    b4:1e:85:ff:18:fa:02:83:b4:64:a0:8d:57:6c:ad:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CB:32:86:2D:E1:1A:DC:2E:70:17:5F:30:41:E1:23:D5:D2:D5:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0627d87d-b68f-3fb3-b5d2-b9577132c68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:f6:77:ae:65:60:59:c2:7a:6c:88:cb:ad:2d:d6:52:cc:
         2a:06:62:e2:55:59:9f:c5:48:28:79:ab:f8:39:0f:5e:cd:77:
         49:4b:a2:f6:1d:cf:bd:f7:f2:59:2c:f8:76:d5:ba:84:24:62:
         ca:62:b9:74:d5:87:05:ff:07:b8:c7:2e:fc:1b:39:dd:fc:80:
         f0:ba:f0:2a:00:e2:be:ee:d5:c1:40:69:19:ef:4a:a3:e2:7c:
         a1:4a:27:b7:fa:a3:42:ba:1b:76:44:de:c6:ea:29:11:76:37:
         ae:67:0e:1a:e9:bc:eb:a8:5e:44:f7:17:47:32:b8:84:1b:40:
         b4:8c:1b:67:0e:f5:cb:f1:ba:21:e7:37:72:6e:e3:9d:f1:53:
         48:18:10:13:d7:da:53:1d:ed:86:a0:65:00:8d:0a:cc:b8:19:
         44:7d:b7:d3:20:0d:da:b6:79:7e:3e:06:c3:a2:17:95:9d:98:
         74:e2:a5:7f:e9:b4:b0:e4:10:24:1b:00:8f:d4:c6:b2:7e:b4:
         24:ab:bb:8c:2d:24:88:70:f9:26:59:59:93:55:31:56:39:fc:
         1b:30:64:a3:13:df:35:41:46:de:c3:b6:1e:74:ba:0a:d8:46:
         91:1b:98:43:2b:98:d3:e7:e8:ad:5c:8d:d5:db:6e:5d:c6:06:
         65:73:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:40 2024 by rpki-client on console-ams.rpki-client.org