Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/216dae8a-ecdf-31f4-896a-2a78606e4177.roa
File:                     216dae8a-ecdf-31f4-896a-2a78606e4177.roa (raw, json)
Hash identifier:          NbG4DuEx7Bl/9CbhGBeUdbN9HHJPhzrFmuK1txmD8jg=
Subject key identifier:   5B:30:64:06:E1:94:16:A2:7F:32:22:94:B6:A9:C8:36:71:BC:F5:80
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F52B14EC7B3331F3C5A7E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/216dae8a-ecdf-31f4-896a-2a78606e4177.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.67.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:2b:14:ec:7b:33:31:f3:c5:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=a2df478c-89d8-476d-bc1c-717943d0a3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:6d:3d:3f:b9:93:ba:4c:43:6d:b4:71:b1:
                    8f:73:a2:a9:3a:0e:61:d1:41:7d:7e:4a:e0:14:34:
                    ec:67:2f:c7:de:01:d4:ab:4e:4d:d7:ad:ad:cc:ab:
                    f9:a1:52:37:2b:96:7e:fd:32:69:eb:ea:06:cc:cf:
                    20:0c:da:35:57:72:6d:16:ae:b1:27:f0:0e:d8:06:
                    a0:d5:32:3c:85:3d:90:07:2f:9a:ba:fd:2e:ec:21:
                    7e:62:96:a0:5a:43:a7:2c:68:95:27:17:6a:c8:95:
                    7b:b7:e5:c1:e7:98:26:c2:89:f3:49:b1:87:21:df:
                    27:f7:9f:e6:d9:24:d0:53:59:02:98:2f:96:8c:b3:
                    70:37:a1:35:a9:c2:4a:4c:90:9c:6a:af:bf:58:78:
                    72:fd:6b:4d:54:29:4e:40:56:42:ef:12:67:95:72:
                    61:d6:5e:1e:68:97:74:60:ac:72:f8:5c:2e:61:62:
                    17:99:ca:20:98:e0:3a:ba:b5:ec:36:7f:01:61:c6:
                    a1:98:ed:c4:f9:c9:e1:69:54:bf:6d:01:33:78:ea:
                    0f:df:81:e7:b7:a2:28:0c:21:2e:8d:ce:36:49:56:
                    e2:20:d0:49:b3:43:e3:06:23:c3:49:5b:b4:9d:9a:
                    50:09:c5:a5:d6:0d:46:c8:b4:6f:9e:32:76:ca:c0:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:30:64:06:E1:94:16:A2:7F:32:22:94:B6:A9:C8:36:71:BC:F5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/216dae8a-ecdf-31f4-896a-2a78606e4177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.67.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0e:ef:cb:64:eb:ec:62:8f:0d:24:12:2a:c1:3f:1d:ca:e2:
         fd:d0:eb:3c:c4:17:f8:4f:91:af:a8:c3:e3:0d:36:00:9c:9a:
         17:d8:b7:8d:e6:0a:f1:4a:90:0d:36:a2:12:a0:cb:2b:06:f2:
         e7:da:57:4c:24:53:fc:47:35:10:6f:22:5b:bc:49:23:bd:8a:
         de:7b:6f:68:07:b9:60:67:d3:99:7c:93:2c:ab:06:bc:98:d5:
         73:4d:d2:9b:a1:ea:e9:b0:32:fa:fe:c7:4f:d0:f0:99:e7:47:
         05:27:6f:c0:b1:39:4c:70:24:f7:49:d2:45:e9:9f:bd:2c:00:
         55:a7:c9:47:af:d0:4f:44:89:8c:1a:e2:66:ce:d2:2f:35:f8:
         5a:05:54:f6:0e:7a:e9:be:f8:12:77:b0:0b:7a:7f:10:f3:bf:
         1c:a4:19:92:b1:32:ef:1d:a8:76:f0:e5:dd:06:4e:2c:2f:56:
         ce:a3:2c:94:f1:73:4a:41:6e:90:80:37:9b:a2:26:ca:e0:d1:
         f4:c5:41:34:7b:46:17:64:c1:e2:5f:fc:a7:12:62:f1:aa:50:
         f8:97:15:75:8f:fd:b8:63:dc:28:53:27:c4:e3:72:f5:b6:37:
         cf:d0:5d:4e:f0:6e:f8:ad:39:9f:0c:fa:a9:ba:38:0c:e4:51:
         d2:73:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:04 2024 by rpki-client on console-fra.rpki-client.org