Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ae4f00e-51fb-3b0c-affd-5cf626d42772.roa
File:                     2ae4f00e-51fb-3b0c-affd-5cf626d42772.roa (raw, json)
Hash identifier:          7YGAmhEhcpnB6sPme+wDjZkn+LftXnEKL/hRYqwkVPE=
Subject key identifier:   25:82:60:8D:3D:53:E1:38:54:2D:41:89:24:33:FD:85:D9:8E:37:03
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845313004AE93F596BFFC14C630
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ae4f00e-51fb-3b0c-affd-5cf626d42772.roa
Signing time:             Wed 13 Mar 2024 08:37:26 +0000
ROA not before:           Wed 13 Mar 2024 08:37:26 +0000
ROA not after:            Tue 11 Jun 2024 08:37:26 +0000
asID:                     15169
IP address blocks:        34.1.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:30:04:ae:93:f5:96:bf:fc:14:c6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 08:37:26 2024 GMT
            Not After : Jun 11 08:37:26 2024 GMT
        Subject: CN=bd6c2477-ec44-4219-8886-e5ca35658b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:72:7d:fa:aa:5b:62:23:ad:f5:41:6a:f5:
                    53:65:3c:49:48:24:da:d5:05:57:91:70:c3:4f:35:
                    c0:38:b0:34:fe:d3:88:ce:94:ff:ad:fd:9c:07:14:
                    c5:ca:cc:f0:ab:33:80:24:e0:f5:ca:44:f9:fb:cd:
                    e8:d3:ba:83:60:45:4f:3e:4b:bb:7f:13:15:9e:36:
                    29:fe:df:4a:5c:df:a6:d2:27:74:59:dc:75:3c:b7:
                    51:1d:36:b0:70:1e:e9:e6:55:cb:83:46:44:68:79:
                    a2:e9:7c:fb:30:60:4c:18:85:50:33:33:2b:44:4a:
                    aa:44:6b:37:b1:e7:52:93:95:d6:01:d9:2c:04:4c:
                    13:bb:5a:01:17:c2:cb:d9:79:e0:b2:5f:c7:54:8b:
                    71:b1:6a:98:dd:af:83:16:0c:d1:34:81:a7:92:07:
                    2f:05:33:d8:52:bc:ac:a9:ff:b4:8c:a5:7d:dd:db:
                    5a:b5:57:25:da:89:29:2a:87:1b:d7:72:4c:19:a9:
                    65:f1:1c:ed:f8:bf:2e:7b:76:f2:a9:bb:c2:0e:20:
                    fc:12:04:9f:70:e9:42:82:6b:89:ad:8b:08:fc:ed:
                    47:f9:a7:f0:25:19:65:3e:f8:54:11:24:15:3f:3b:
                    5b:ae:1d:d2:f1:25:b8:31:bc:ac:e9:93:7c:ff:99:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:82:60:8D:3D:53:E1:38:54:2D:41:89:24:33:FD:85:D9:8E:37:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ae4f00e-51fb-3b0c-affd-5cf626d42772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:95:5d:51:b4:8f:32:da:bb:33:12:f7:2d:d0:4c:08:cd:00:
         87:12:84:b2:05:2a:1f:24:0a:2e:c4:e5:fa:88:3e:8d:d8:4e:
         f8:93:7f:8f:cc:b6:99:07:e2:fe:04:39:81:22:39:7a:8c:99:
         1b:8a:f6:09:39:cb:44:71:6a:cb:21:e1:62:c7:47:8b:ff:31:
         ac:03:cf:0d:c3:8c:ae:c0:a6:1b:e2:b8:67:39:20:01:c6:8d:
         39:93:eb:60:35:29:07:33:b5:b7:f1:f9:f5:cf:86:64:6e:44:
         6f:77:62:e6:ae:5f:c2:b0:4f:2e:3b:00:8f:7a:2a:b7:4a:87:
         6f:6c:bc:25:72:22:f5:b2:9e:ce:d0:e3:2d:91:a7:3e:3c:5f:
         d1:ee:4a:e0:0a:68:eb:8b:77:fb:b1:68:d0:a8:3c:b8:c8:2b:
         4c:6f:07:39:3b:85:38:f3:4d:85:17:d9:dd:a0:a3:42:a7:c6:
         a3:6b:53:fa:ea:b7:ab:d7:c4:af:57:53:f1:c5:6b:fa:c0:12:
         23:3b:b6:b2:1f:bb:2e:b9:26:1b:5e:98:d4:4b:76:6c:33:eb:
         f3:35:9c:ee:ea:50:a6:bc:36:0d:ef:c8:d6:12:d2:ba:29:71:
         f3:eb:19:3d:98:6b:02:12:10:31:02:4d:61:4c:c4:71:76:ac:
         3c:5d:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:32:41 2024 by rpki-client on console-fra.rpki-client.org