Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1096882e-5e49-33de-996c-39292de3d126.roa
File:                     1096882e-5e49-33de-996c-39292de3d126.roa (raw, json)
Hash identifier:          si5fbV1iMegaEdUxeleXHph7X/ZPAlY6xPqEaVWtxjo=
Subject key identifier:   C8:6D:DC:15:ED:02:D8:3D:F0:94:03:70:8C:F3:B6:2A:60:61:88:3D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F52F52358B0A096DEC1280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1096882e-5e49-33de-996c-39292de3d126.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.138.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:2f:52:35:8b:0a:09:6d:ec:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=f4d73621-1034-4caa-a853-e291a7e309d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:20:3b:82:da:a9:6c:d8:32:f5:ee:d5:f5:
                    b1:d8:49:cc:dc:ef:e4:b6:38:38:59:c2:2d:86:3a:
                    a3:0d:9e:21:35:af:c6:ac:03:c7:e0:b9:67:f8:70:
                    c2:66:98:24:07:d8:a2:15:97:f2:3c:ad:2f:d3:77:
                    fa:e6:3e:bc:52:2f:79:f0:0f:e3:b6:51:dc:d6:76:
                    fe:68:3d:a3:75:fe:e5:dd:01:ca:0a:11:f9:64:7a:
                    49:ff:0d:2f:11:bd:94:df:f0:3e:5d:97:31:eb:2f:
                    40:9c:7e:be:2c:4b:0f:62:54:d6:4a:89:5e:32:76:
                    12:ec:9a:ff:fa:6f:6b:45:4e:65:6f:cb:a7:b3:b6:
                    82:b9:56:d6:f6:47:d1:52:dd:b9:01:da:fd:59:1e:
                    63:45:98:f3:44:e8:c8:51:73:c9:0b:ae:fe:11:63:
                    7c:25:db:58:10:dc:67:25:56:d2:29:9b:fe:8d:ab:
                    d4:d5:60:72:a5:df:12:5d:69:4a:33:62:73:99:9a:
                    1f:31:16:fd:80:31:40:5a:b1:70:bb:12:98:b2:f1:
                    55:eb:00:c2:92:ce:e7:03:61:36:bd:78:16:90:69:
                    93:5a:1f:c8:e8:57:46:0f:61:b2:04:0d:7b:fd:e0:
                    6e:be:0c:f8:f6:ab:c2:d4:3f:e0:ef:70:a0:08:42:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:DC:15:ED:02:D8:3D:F0:94:03:70:8C:F3:B6:2A:60:61:88:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1096882e-5e49-33de-996c-39292de3d126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.138.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:38:3a:22:47:23:b6:54:09:7c:ee:e3:3f:be:04:7a:17:ac:
         3f:e6:bf:ac:81:81:ea:59:fb:ff:7b:10:77:2e:45:7b:1e:2c:
         36:19:f2:fe:34:40:50:ae:03:15:8f:d9:56:88:a7:0f:3c:71:
         5f:df:9e:2d:3a:5d:b2:ff:02:58:d0:b7:7b:04:94:06:47:cf:
         a8:05:f7:98:b2:cd:48:34:0c:21:be:e7:cb:fc:9c:50:50:60:
         0c:c3:1e:b1:a6:6f:dd:30:18:2d:2e:2a:15:6d:77:09:f5:26:
         d8:d7:92:91:ef:fc:02:91:67:69:e9:41:87:6d:2d:7b:a5:bf:
         10:a2:37:e0:05:5d:d7:79:fb:ee:b5:1b:94:b3:67:0c:42:c7:
         9b:80:bf:c7:c0:eb:56:d2:0b:9c:a4:0f:82:13:22:5b:70:28:
         f2:49:80:ec:d2:ad:2a:79:21:a7:02:8a:6c:e0:70:23:22:ad:
         9b:07:ce:3e:0a:fa:e0:7a:b7:f3:f1:42:0d:e6:c8:f6:6e:eb:
         8f:8b:3e:19:c7:fd:7a:04:92:8e:b0:d3:c3:4a:4b:14:6f:a3:
         55:dc:0f:a8:6f:47:6f:ed:82:af:ea:82:47:e6:55:a0:cd:57:
         56:ce:cd:19:88:fc:e7:d6:0d:c1:ac:af:f8:54:bf:35:90:41:
         de:55:81:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:26 2024 by rpki-client on console-ams.rpki-client.org