Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/069487ad-25f3-34e8-8612-1f29030f365d.roa
File:                     069487ad-25f3-34e8-8612-1f29030f365d.roa (raw, json)
Hash identifier:          M4HZ/ckoGhrbF5R3pTu2SE7eEzAFY+hIfo/0aTC1+DE=
Subject key identifier:   FE:8A:0E:35:EA:A6:A4:FF:06:41:FE:23:7E:35:CF:56:6B:6A:08:0B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858473D2601E66642953D4D611E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/069487ad-25f3-34e8-8612-1f29030f365d.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        34.0.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:01:e6:66:42:95:3d:4d:61:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=84af63bd-4c3a-480a-a481-c3e2fe975df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:d4:33:c4:82:65:42:d2:0f:fd:8c:ac:0a:
                    b0:52:79:2d:33:c0:7d:93:63:96:56:3f:3b:c6:6e:
                    2e:1b:1a:fb:58:ec:ef:71:76:d1:2e:bc:be:f1:44:
                    91:a3:2e:b0:dd:04:91:62:9b:51:67:cd:f0:34:b4:
                    45:fb:0a:f4:13:5c:94:8e:ae:2f:9b:30:12:e2:7f:
                    58:09:5f:57:a0:56:bc:1d:43:da:59:89:47:d2:cf:
                    3a:19:6d:0a:0e:37:1b:8f:fe:c3:e4:1c:79:3e:a5:
                    21:14:1e:ac:12:7a:5e:2c:17:ea:ee:1c:81:a7:e4:
                    2a:eb:4e:eb:26:d6:6d:9e:85:b3:31:d0:db:e8:1d:
                    34:ca:67:96:43:e8:5a:7b:90:71:e1:14:82:4b:80:
                    f6:2a:91:9d:e4:77:82:48:d1:35:4b:11:d6:b5:0f:
                    ac:14:70:c8:9c:d1:01:3a:34:ab:79:ae:20:8c:af:
                    2f:c1:08:17:b3:b9:68:9e:11:5f:c2:f2:8e:19:9e:
                    89:f9:6a:35:50:d7:06:0e:74:71:02:01:78:77:a3:
                    16:74:53:07:d6:f5:d1:09:ce:50:22:f7:58:cb:00:
                    9d:99:8f:8e:ef:8b:78:e3:70:79:7b:f2:e7:6b:8a:
                    3b:ba:da:e6:4f:fe:bb:47:f4:d6:36:5d:f0:d8:df:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8A:0E:35:EA:A6:A4:FF:06:41:FE:23:7E:35:CF:56:6B:6A:08:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/069487ad-25f3-34e8-8612-1f29030f365d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:c9:1e:52:a3:5b:5b:f8:ab:37:4d:0c:28:d7:c6:ef:3e:
         fe:6e:a7:d5:18:60:62:6c:23:5a:74:ee:dc:3e:00:e5:f0:13:
         16:ef:47:71:a7:e0:c9:f3:79:8c:62:41:37:1c:5f:77:0b:33:
         16:8b:d0:85:9d:60:2a:02:79:54:27:c6:26:b7:f5:81:c5:9c:
         20:ab:e2:d8:87:15:b5:d4:fa:4b:6d:ee:7a:3b:b2:41:ff:f5:
         3d:9f:20:cf:63:80:5f:2c:1b:9c:1d:19:51:2d:94:24:ed:f0:
         a7:3f:65:a3:79:8d:c2:74:37:42:99:40:a5:cb:0f:30:18:4e:
         7a:f3:ce:fe:48:90:bf:e1:fd:fc:9a:f9:19:03:b4:a1:28:cb:
         f9:de:f8:3d:25:66:91:ca:ce:88:47:3b:a4:73:fe:44:ac:3d:
         d7:19:c2:2b:15:dc:4e:6e:bc:88:19:b3:fc:24:4c:37:2d:8f:
         c2:23:d8:a2:75:12:05:10:ef:2f:31:65:94:8e:69:ae:7c:b2:
         c4:37:d0:27:3c:82:e4:ca:90:5d:69:ab:fd:fd:d9:db:b1:b0:
         da:08:01:6c:76:42:9a:99:45:87:2f:69:62:b8:69:65:99:6e:
         97:90:1e:5b:3a:c9:5f:a4:18:97:b3:03:46:48:df:d6:20:ea:
         7e:1a:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:56 2024 by rpki-client on console-fra.rpki-client.org