Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23837533-1b0e-3263-b9b5-9ade03439d9a.roa
File:                     23837533-1b0e-3263-b9b5-9ade03439d9a.roa (raw, json)
Hash identifier:          OzwNiC7ZdQQUcMWkIs2Fw2Cm1LDu4HlgEK4/ZPwmDSI=
Subject key identifier:   FE:55:5B:5D:21:07:DD:1D:02:DD:A3:D1:17:3A:F3:44:DC:B3:80:61
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F067DC160E35E6430A14F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23837533-1b0e-3263-b9b5-9ade03439d9a.roa
Signing time:             Fri 29 Mar 2024 18:40:57 +0000
ROA not before:           Fri 29 Mar 2024 18:40:57 +0000
ROA not after:            Thu 27 Jun 2024 18:40:57 +0000
asID:                     15169
IP address blocks:        34.97.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:7d:c1:60:e3:5e:64:30:a1:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:40:57 2024 GMT
            Not After : Jun 27 18:40:57 2024 GMT
        Subject: CN=2e401ec0-588d-4463-a892-a922000bd255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:f7:79:b4:94:03:25:87:55:2f:9c:12:35:
                    2a:f4:2d:77:de:c2:0e:b6:f7:a0:d8:1f:41:79:8f:
                    14:50:b1:2d:90:ae:89:20:cb:7b:b6:26:ab:76:02:
                    3f:a4:a5:ef:b5:f9:b3:ec:33:8c:1f:2b:87:6f:3d:
                    6a:be:d8:fe:fa:91:3a:9b:51:6c:73:7f:ff:58:81:
                    a2:22:b6:57:04:be:d0:6d:51:03:6e:ac:95:7e:52:
                    12:ca:5a:54:2f:fe:d0:09:92:4c:c2:10:41:2c:5e:
                    89:c6:57:4f:e3:36:0b:fa:dc:63:8b:90:e5:77:8d:
                    8a:a1:91:ce:fb:ea:68:9b:ef:68:e7:2d:0b:07:2c:
                    c2:d7:fc:b9:5c:93:64:07:a6:d7:5a:33:e0:61:bd:
                    41:19:eb:c9:b5:45:6a:1c:e6:99:d6:88:d3:26:8a:
                    07:3a:6a:c6:21:f2:ea:ec:18:1e:b7:1f:56:9f:cc:
                    69:2c:16:8a:57:89:3e:ee:ef:8c:e6:61:67:af:ba:
                    67:54:61:54:49:c1:f2:f6:e1:20:26:ff:3e:55:6e:
                    b8:2d:ed:a4:e2:ef:19:82:fb:8e:f8:89:23:39:88:
                    3a:cd:dc:d0:0d:6e:83:69:f2:d2:94:5c:42:50:97:
                    97:4a:8c:31:04:8c:f6:7c:a5:25:e2:eb:8c:0b:b4:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:55:5B:5D:21:07:DD:1D:02:DD:A3:D1:17:3A:F3:44:DC:B3:80:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23837533-1b0e-3263-b9b5-9ade03439d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.97.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:d1:29:ba:5a:54:b9:49:ce:bd:ec:a8:d0:79:98:e1:1a:
         92:56:c5:32:c1:ad:13:a6:ee:34:42:a3:53:bb:a3:f2:45:d9:
         47:aa:85:b1:75:93:ad:ae:da:22:47:19:ee:b5:05:fe:23:2c:
         ea:77:c4:06:72:6c:04:ae:47:9d:70:a4:60:27:db:16:a6:bd:
         5b:8d:5f:c3:fe:c3:49:a8:b7:70:6c:b0:b8:4e:ef:24:9d:59:
         7d:c5:f5:1e:78:61:e9:1f:ce:4f:13:ca:d6:83:0e:e2:44:4e:
         bb:a3:c9:b5:24:8c:f6:b1:04:90:cc:57:43:16:2d:4a:9a:8e:
         ba:1a:a1:65:8e:64:c6:01:30:ff:65:d3:64:c7:00:0c:b7:7a:
         ee:d3:1f:fc:43:0b:e1:95:50:48:0c:9b:07:d1:a6:e6:4e:52:
         79:83:6d:ec:9c:d6:34:0d:e9:61:2d:ad:01:b6:02:5d:34:73:
         2c:e6:2e:65:8c:11:cb:f1:c3:12:49:3a:48:a2:97:84:b1:9c:
         c5:86:3e:dd:81:c1:b1:0a:69:16:a0:4f:39:ef:1c:eb:ef:9c:
         fd:43:0f:33:b8:91:35:6b:0e:70:11:6e:95:d2:e5:a9:b4:05:
         cd:aa:22:1c:9c:ec:f1:67:d3:8e:90:3d:b9:39:01:68:a6:ca:
         56:4b:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:44:36 2024 by rpki-client on console-fra.rpki-client.org