Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c4426fb-b133-3c42-abec-3f036498486e.roa
File:                     1c4426fb-b133-3c42-abec-3f036498486e.roa (raw, json)
Hash identifier:          ZmkWxwK5WcaE2r3Wi9YuO5jzh22MOCyuf94Phd82JPw=
Subject key identifier:   67:A6:1D:69:0C:FD:00:58:24:D3:BD:80:47:C0:6C:3C:D3:09:45:F0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F52A18E1059671B2409A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c4426fb-b133-3c42-abec-3f036498486e.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.95.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:2a:18:e1:05:96:71:b2:40:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=8e75635f-3e38-4108-9968-e87e64f8afc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:b7:48:43:9f:c5:55:3c:31:f9:a7:ec:b4:
                    91:3d:85:a3:40:b6:83:ad:0c:0c:a1:99:cc:80:75:
                    17:9d:94:3a:d5:33:c8:a1:92:20:f6:80:95:37:d7:
                    cf:f7:c0:3a:69:9b:80:75:04:a3:60:9c:9c:22:51:
                    34:86:a0:99:61:87:4c:21:e3:6f:3f:a2:25:30:bc:
                    5f:e9:e3:ed:91:5a:99:58:08:13:d3:aa:9e:13:75:
                    de:c7:c3:4f:10:1e:b6:46:3e:38:e0:df:2a:ef:72:
                    48:aa:c7:3d:99:07:1a:80:d3:8c:a0:9e:3d:fb:8c:
                    82:86:06:75:4d:99:d3:e5:b9:bf:c8:f8:75:4f:38:
                    54:47:86:b4:bf:7d:57:c2:15:13:5c:fd:ed:5c:bc:
                    ce:fa:3b:f0:e3:8c:e6:08:d3:1b:bb:4b:2c:da:93:
                    bf:96:cd:a8:68:be:05:03:f8:d1:b1:f4:e4:c9:9c:
                    89:83:af:1a:ef:cf:a3:55:dc:24:26:23:a3:4e:03:
                    86:6d:e8:80:1a:8b:25:65:2c:0c:b3:df:de:8b:33:
                    56:5a:70:92:ef:08:20:14:23:4e:3e:a1:e2:a7:b1:
                    e7:b8:8d:fd:ff:9f:75:3d:ac:ef:fc:53:a1:b0:3d:
                    71:63:4c:26:d9:da:73:f3:6b:08:42:3d:89:af:86:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A6:1D:69:0C:FD:00:58:24:D3:BD:80:47:C0:6C:3C:D3:09:45:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c4426fb-b133-3c42-abec-3f036498486e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.95.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:47:62:f4:6e:cc:3a:4d:8a:9f:b7:31:fc:d0:84:ea:df:1b:
         2a:bb:cd:b5:aa:ae:65:4f:2a:73:1a:42:c1:cc:bb:e0:1f:34:
         ae:0f:4d:82:79:ed:fd:a8:0b:06:f2:a1:0b:a5:24:9a:20:5c:
         27:e7:ca:fe:b0:37:e2:aa:02:ca:e5:90:91:d4:6e:df:d5:bc:
         ed:14:73:26:7d:80:55:1e:18:52:ea:25:d5:8e:3a:9e:62:7b:
         22:b1:3a:cd:c1:04:23:e6:a6:4e:bd:44:f7:56:82:f7:64:e1:
         3c:62:1b:a7:f0:b8:85:35:3d:ae:bb:9b:6c:22:6d:84:aa:7e:
         76:34:c5:ef:fc:90:2c:ac:3e:ef:b3:ef:a4:83:a9:e4:26:51:
         fe:e8:9d:b6:24:0a:9b:f1:05:2e:2b:54:8d:af:a0:27:ac:01:
         60:d1:07:ce:79:ea:2f:15:e0:6e:b7:ac:81:e9:86:e6:71:9b:
         56:06:81:a6:cc:01:a8:ab:8c:34:63:bc:3d:4c:32:89:7e:b9:
         db:73:ba:ff:c9:ce:b8:9d:5d:82:4a:e6:b6:c1:ca:55:64:ca:
         8a:3e:85:64:7d:c5:81:02:b4:5d:a4:43:35:ef:89:9b:38:0b:
         aa:92:e2:3c:f6:aa:2b:75:b4:13:12:1f:83:73:ae:d6:2d:4b:
         a8:11:87:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:07 2024 by rpki-client on console-fra.rpki-client.org