Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09a912a7-d507-3f54-9095-1ecce3383a39.roa
File:                     09a912a7-d507-3f54-9095-1ecce3383a39.roa (raw, json)
Hash identifier:          WF7WfZ+irSVPhR5d+ozrFYwaydhVM8IRYUx6alZMDAA=
Subject key identifier:   01:3B:8E:76:73:E7:91:86:16:E7:2D:1A:B2:95:E5:1E:6C:0D:8F:41
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62AAB602A39542529FF0760
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09a912a7-d507-3f54-9095-1ecce3383a39.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     19527
IP address blocks:        34.0.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ab:60:2a:39:54:25:29:ff:07:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b406cd9f-e6f8-49c1-aa3a-18524cb35a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:34:2a:de:a2:7a:45:db:f7:f6:02:1f:65:
                    de:45:bb:a8:f3:1b:08:14:41:99:1c:bf:38:c2:89:
                    76:c3:41:df:ee:81:14:b6:41:62:56:0f:22:38:8f:
                    8c:65:ac:1e:bc:ca:08:7e:b2:01:ce:a0:d3:99:24:
                    8c:b4:b7:e4:07:4d:d4:37:15:78:38:ae:90:22:73:
                    77:52:b5:42:22:d4:9d:10:ca:bb:51:bb:82:08:47:
                    2a:67:0e:bf:03:af:4f:16:e3:86:b4:75:97:fb:4b:
                    68:7b:3b:c0:e9:d0:8a:91:9e:5f:03:58:78:64:1b:
                    b7:09:92:bd:48:30:ef:b5:12:16:3b:02:6d:99:01:
                    93:76:1b:34:7e:be:fc:9d:5b:7e:26:02:80:b6:43:
                    a2:3c:9c:76:34:93:bb:c5:77:fe:1e:1b:26:3d:df:
                    c7:17:23:92:19:c4:ac:88:5b:95:e7:ba:79:92:81:
                    d2:0e:f7:ff:23:06:72:0e:3d:7a:d7:3f:fd:26:7d:
                    62:92:20:e0:d1:27:22:b7:e3:5f:c5:a7:5a:57:95:
                    0f:a2:6c:a2:20:00:53:a0:9c:50:b2:d4:7b:62:d3:
                    c2:73:60:3a:66:46:49:b8:a1:8a:9d:a7:77:27:d8:
                    e9:50:ad:c4:fe:9f:89:62:e4:17:d3:3d:40:d6:79:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3B:8E:76:73:E7:91:86:16:E7:2D:1A:B2:95:E5:1E:6C:0D:8F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09a912a7-d507-3f54-9095-1ecce3383a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:dc:27:09:d6:2b:f7:bf:02:1d:98:35:54:48:fa:33:ef:01:
         ed:5d:d2:40:61:5a:ea:64:b6:80:1b:bd:c0:0d:17:46:5f:56:
         d1:8f:89:6e:ab:46:24:ae:67:2e:ef:0e:7a:fc:c7:2f:17:e7:
         84:9e:b0:54:18:9e:35:68:39:2d:2c:d9:61:73:81:6f:85:8f:
         ae:ed:f4:70:2e:d2:30:bb:d4:da:fc:d1:3f:ab:b5:08:a6:4d:
         33:85:fb:39:6c:a6:f5:cf:1f:84:81:de:9a:06:53:5d:7d:2d:
         50:07:fc:4f:36:d5:14:d5:29:bf:39:e6:1a:cf:2b:77:07:d0:
         62:51:7c:f0:1b:97:7d:86:69:01:eb:0e:e9:1c:47:9a:ee:22:
         ca:f6:a8:01:37:2e:08:a9:a1:e5:29:9c:6c:fc:68:06:3a:ef:
         a4:a9:dc:9f:63:06:92:ef:80:58:60:27:62:48:6a:4b:9b:8a:
         22:c9:e0:d5:15:ca:78:a5:c5:14:fc:79:c9:77:21:cd:9f:f1:
         b5:41:79:79:9e:d0:96:4c:01:2d:8c:68:19:7e:6d:3f:de:3e:
         2d:19:c9:e8:dc:13:69:40:61:86:8c:aa:06:97:fb:7b:5b:df:
         a7:b3:b0:bf:38:cd:4c:2d:e6:b2:40:00:88:45:b6:3f:03:5c:
         a1:85:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:24 2024 by rpki-client on console-ams.rpki-client.org