Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19eb74e6-9a49-31ec-8e8f-999cc9e9e814.roa
File:                     19eb74e6-9a49-31ec-8e8f-999cc9e9e814.roa (raw, json)
Hash identifier:          v9f5jwi3KGO46PJ9i6OAN/Qpnc4I2LWg5OGBBhoZSWQ=
Subject key identifier:   BC:D6:9E:40:9F:40:24:8E:7B:37:DB:E8:DD:B4:18:3D:F6:2C:E5:A0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F50F6A5F2C812C3B75A980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19eb74e6-9a49-31ec-8e8f-999cc9e9e814.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.71.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:0f:6a:5f:2c:81:2c:3b:75:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=574bb727-9d65-4ea7-8ebb-54047977e3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:0d:99:7b:46:76:47:ca:66:b5:52:2e:5e:
                    81:4b:ca:0f:b6:13:6c:b7:f7:e8:48:07:80:d5:33:
                    a9:58:7b:99:b0:82:32:78:27:56:b1:7b:b9:fc:4a:
                    b7:a9:c8:c6:16:85:0a:62:91:60:38:d9:62:d9:24:
                    e7:ca:3d:1a:6f:9c:4c:46:74:e0:f8:31:a5:92:4d:
                    b5:c1:39:44:67:1b:e2:3a:c0:d3:d6:21:43:37:43:
                    cb:5a:87:28:43:94:bb:aa:50:c9:61:62:7f:13:6b:
                    9f:df:70:f8:98:63:11:9c:0b:c6:21:cc:42:0f:80:
                    55:59:25:62:2a:61:2c:16:c6:7c:55:c1:ce:cd:1e:
                    8d:f3:9d:d2:74:bd:34:ec:5a:0b:10:9f:1b:ae:79:
                    7e:6a:45:84:af:b8:19:be:b2:8d:14:d0:33:ee:fe:
                    3b:bc:62:be:0f:09:81:0a:30:78:53:c3:7a:1c:81:
                    16:ed:d3:98:c7:70:f6:69:e4:e1:bd:04:eb:62:b6:
                    d4:c2:92:0a:46:4c:2a:0a:ff:77:27:90:f7:6f:2c:
                    6c:f5:1a:30:ba:5e:8b:ed:f4:60:20:25:29:d4:22:
                    3b:70:09:3d:d4:a7:87:3a:1a:ad:c1:cf:b4:7f:0e:
                    f5:4a:7d:67:33:60:30:c9:3c:4c:11:a2:aa:2b:28:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:9E:40:9F:40:24:8E:7B:37:DB:E8:DD:B4:18:3D:F6:2C:E5:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19eb74e6-9a49-31ec-8e8f-999cc9e9e814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.71.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a4:61:f0:41:ea:d1:91:f6:75:bc:f2:6e:79:3a:02:74:ae:
         63:a3:47:6e:59:ee:64:be:7a:d5:96:5e:69:55:32:c2:9d:fd:
         fd:bf:fa:15:1e:22:aa:c2:31:1f:35:c9:c6:0e:21:87:0b:96:
         62:71:26:a5:96:16:48:7e:98:3e:06:cb:b6:6f:28:3f:e0:3e:
         04:8a:13:b0:ab:f9:e2:94:c6:79:d9:28:69:2f:d4:8a:c2:76:
         f8:f3:b6:d8:92:46:f3:f1:23:16:57:31:05:11:3b:aa:7f:f3:
         e8:41:ff:01:52:4f:ff:28:5f:0f:bb:ae:4f:c0:87:16:8d:9e:
         5e:45:73:47:7b:ea:96:e3:5c:12:7b:17:25:07:f8:78:1d:cd:
         68:8c:3a:0c:41:41:48:5b:b5:7f:06:af:4c:41:e2:96:52:5c:
         13:64:42:2f:d0:7a:31:ef:55:f8:03:da:a0:35:dd:a9:0e:4c:
         22:a6:8a:dc:19:e7:16:e7:75:af:60:54:1c:59:3d:f3:ca:78:
         3c:56:9a:90:f2:7a:9a:81:bb:3e:4a:61:71:4b:0f:0a:75:c7:
         f1:65:55:9f:1f:27:2e:40:bf:48:67:f3:83:c4:25:8e:5b:60:
         6a:8b:ec:95:3c:b9:a6:16:c7:15:6f:fa:13:23:d4:11:86:7d:
         3f:cf:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:02 2024 by rpki-client on console-fra.rpki-client.org