Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3067bbd8-bdbd-3fb1-b293-b476c0cb289d.roa
File:                     3067bbd8-bdbd-3fb1-b293-b476c0cb289d.roa (raw, json)
Hash identifier:          hKau5crOqfUXeEp9ekUiwVrkN3jQv4+iMjLbODwO00I=
Subject key identifier:   F8:A0:46:9B:32:F3:51:15:A0:91:9F:E4:0A:B0:4C:55:8D:80:D2:0E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F533CFFEF19B4E0FC9E718
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3067bbd8-bdbd-3fb1-b293-b476c0cb289d.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.134.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:33:cf:fe:f1:9b:4e:0f:c9:e7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=9c94a2a7-3bea-4830-b270-7399240a92ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:48:bb:ac:0f:99:da:1e:82:d7:d9:80:d1:1c:
                    10:7e:fb:57:b5:76:41:67:4d:99:bc:83:c5:f9:27:
                    57:87:fa:60:db:57:5b:05:d7:1c:3b:31:f1:2a:ba:
                    1e:dd:75:4b:e1:bc:be:0c:30:a5:31:a7:3f:2c:ca:
                    00:7c:de:c3:fe:89:01:29:c1:f9:15:dd:39:45:e7:
                    d9:ef:7a:6e:cd:a4:26:86:95:4a:d4:50:cc:64:cb:
                    74:89:b3:54:1a:0a:e4:e8:28:ec:f4:d3:18:44:08:
                    da:7e:87:a4:a6:04:71:bc:fc:a6:d2:de:f1:22:1e:
                    3d:55:82:54:46:c3:3c:56:13:0a:f6:2f:d7:6a:b7:
                    ab:b2:31:43:ee:d7:04:4b:aa:7a:68:a6:b0:bc:2b:
                    0e:84:4b:87:38:7a:d0:49:30:08:01:10:33:9f:f5:
                    3b:c9:15:99:67:51:58:f0:94:eb:22:1f:87:88:76:
                    ca:9a:5b:46:f3:a6:ac:10:70:ea:11:dd:fd:7f:5c:
                    01:55:c6:75:a7:53:52:f8:d4:ab:27:d8:fa:62:c4:
                    47:4b:7a:7c:31:da:9a:cf:f8:65:08:82:e2:e3:56:
                    e5:25:5b:ea:80:40:ca:33:dc:f9:86:ef:3d:3c:8f:
                    e6:d4:d9:60:64:92:bd:51:cc:5e:88:0c:37:79:98:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A0:46:9B:32:F3:51:15:A0:91:9F:E4:0A:B0:4C:55:8D:80:D2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3067bbd8-bdbd-3fb1-b293-b476c0cb289d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.134.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:45:7d:44:0a:5b:37:5c:61:5c:d9:86:91:06:d1:7c:fb:
         07:7b:46:c4:ee:a3:2f:b5:c0:ca:68:a6:ce:b1:60:88:fe:93:
         a0:49:28:ae:24:bd:e7:3c:01:20:66:66:27:1d:58:c2:c0:61:
         a5:f6:a7:6b:3c:26:37:f2:4d:3a:71:04:8a:88:af:9e:1a:12:
         24:7f:99:bb:c4:25:52:d2:93:8a:e6:1f:fc:a4:8a:ee:66:b0:
         7f:a8:db:aa:fd:36:da:d7:d2:63:a0:50:03:77:3c:7d:20:8a:
         4c:88:e6:73:9f:60:8b:ef:67:d9:88:10:f3:33:88:2f:d6:bf:
         e3:73:fe:1b:23:37:77:16:ad:5b:1a:a1:b6:5f:ba:b6:bf:64:
         fa:3d:a7:88:ed:09:8a:4f:27:ac:0b:d6:20:ab:6b:c2:54:4c:
         47:28:3f:c3:6e:b8:4f:68:9a:1a:3c:12:1d:6c:c7:f9:62:7f:
         41:02:af:0f:55:06:37:d2:38:f1:95:9b:a7:f4:f9:fb:1b:e7:
         4a:07:15:56:ba:6c:06:3e:6c:ae:50:f5:9a:b5:8c:24:98:cf:
         ab:bc:4e:5e:54:f4:78:4b:d4:22:6b:c7:4f:c8:3c:d4:6f:9c:
         f1:5e:ec:58:76:d8:c8:3e:1f:b2:16:21:3e:f1:80:d1:74:b2:
         00:80:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:39 2024 by rpki-client on console-ams.rpki-client.org