Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19ac9109-3937-385a-9845-7ca3a88c835c.roa
File:                     19ac9109-3937-385a-9845-7ca3a88c835c.roa (raw, json)
Hash identifier:          gWA6ggzro0iFotxRRjsp24vE7Z52C1fCKRcDY/5aqeg=
Subject key identifier:   CF:E5:1C:6F:EF:44:C9:0A:AD:55:E2:91:0E:CD:1F:08:25:21:6C:AF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F509F44AE71C72E532BAA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19ac9109-3937-385a-9845-7ca3a88c835c.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.98.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:09:f4:4a:e7:1c:72:e5:32:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=ba6ae03a-b7cb-4c2e-817a-0bfec29cf18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:39:a2:cf:f5:69:f4:c2:53:3b:00:ac:70:6f:
                    e4:24:d3:6e:d2:f4:7d:74:e6:82:02:c9:e2:72:c4:
                    99:31:10:bf:4c:43:fb:b2:52:54:d8:34:09:f6:26:
                    7f:56:da:39:9f:80:6b:05:86:1c:c6:89:33:15:76:
                    f9:2b:bd:19:22:d6:1d:36:b9:07:3e:82:e4:6f:e2:
                    a9:fe:a2:9c:d9:85:87:ee:09:05:11:c8:c0:36:5d:
                    6a:97:49:03:a0:6d:5e:7f:46:17:20:ad:ec:d7:f4:
                    1a:18:67:25:5d:b3:85:7e:31:d0:da:c0:fd:23:3a:
                    be:3f:56:31:9a:3e:e8:97:1e:68:a5:88:5f:b2:63:
                    65:72:6b:fd:77:f4:e9:a2:c4:d5:3d:2e:95:1f:9a:
                    35:00:5e:63:1f:a0:a8:85:3c:78:2e:da:de:52:ee:
                    39:3e:31:5c:cd:61:01:58:c0:ac:8b:a4:b3:07:1b:
                    b1:cf:0c:7b:0e:df:ae:62:7d:fc:a9:da:2c:66:6a:
                    e3:ed:52:c5:58:ca:88:b6:39:87:7b:e9:31:e2:20:
                    4b:a5:be:27:c9:7e:44:b1:f2:3e:38:b7:16:83:b3:
                    98:13:3d:9e:73:ec:39:07:c4:c7:3b:87:ea:4d:ea:
                    43:3f:c9:71:b9:59:3e:c6:50:c2:56:b0:21:e8:16:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E5:1C:6F:EF:44:C9:0A:AD:55:E2:91:0E:CD:1F:08:25:21:6C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19ac9109-3937-385a-9845-7ca3a88c835c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6a:a5:94:b2:c3:f9:fa:84:9d:4b:16:f2:ef:bb:73:8f:5d:
         9f:e8:c1:b8:83:d8:3b:c0:99:69:05:11:08:a8:61:d3:ec:cb:
         3d:43:71:cd:99:d8:30:86:10:ff:15:fd:db:4f:19:a4:92:99:
         cc:36:49:a8:ab:ba:3f:bd:15:c9:80:dc:36:dc:1e:8a:0b:b0:
         19:60:fa:26:00:d4:98:ab:a3:1f:62:9b:99:a5:0a:dd:ab:6c:
         51:ab:45:50:ec:aa:ab:5d:91:b6:81:d8:cd:f6:e0:9b:0d:b7:
         58:6c:14:06:b0:63:c0:a0:e8:30:82:c9:c3:b1:ae:ed:95:85:
         60:09:d6:db:e7:f3:c1:9f:da:56:14:0d:f5:9b:7c:47:5e:cf:
         0f:15:36:e8:d3:89:31:13:38:5c:0d:76:4f:ed:fd:bd:8c:f9:
         54:73:21:f9:62:ac:46:0e:f8:5d:df:19:51:47:78:45:32:dd:
         dd:05:21:70:1a:ea:1d:a4:f1:56:a0:65:9d:e4:2f:fa:03:ad:
         20:2e:80:02:ac:8f:09:7b:1a:9c:9b:83:20:55:1f:79:91:5a:
         b3:67:1d:2c:2a:6b:21:2d:78:73:e5:a7:d2:61:b8:7c:a0:d7:
         63:87:bc:84:33:da:b9:d4:6c:86:65:86:77:d5:7b:26:9f:99:
         f8:3f:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:32 2024 by rpki-client on console-ams.rpki-client.org