Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35423a86-7e00-3639-b817-f1f051dab8b1.roa
File:                     35423a86-7e00-3639-b817-f1f051dab8b1.roa (raw, json)
Hash identifier:          io3iYtgu17yqfyiKhcuhdH6MXsGg8V6HUJrrCYZlYeg=
Subject key identifier:   FD:05:E3:77:3B:34:2C:EF:53:6E:6A:DC:A2:6A:64:22:A2:18:B6:13
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462D6CAFF5056727293534C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35423a86-7e00-3639-b817-f1f051dab8b1.roa
Signing time:             Wed 20 Mar 2024 21:04:11 +0000
ROA not before:           Wed 20 Mar 2024 21:04:11 +0000
ROA not after:            Tue 18 Jun 2024 21:04:11 +0000
asID:                     15169
IP address blocks:        34.0.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:6c:af:f5:05:67:27:29:35:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:04:11 2024 GMT
            Not After : Jun 18 21:04:11 2024 GMT
        Subject: CN=4f5a813d-e851-476c-a5fc-ecc5a9631d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5c:4e:78:45:46:ef:6a:77:37:76:4d:db:20:
                    f3:f6:14:bb:05:54:eb:9d:49:86:2f:23:ae:7f:55:
                    6e:7d:31:20:5e:da:70:5c:05:49:8e:f4:39:2a:c8:
                    52:5c:96:12:66:ef:66:4c:cb:3c:74:4e:bd:5d:82:
                    6d:99:1c:9b:1e:17:a9:27:b0:2c:9f:97:58:a3:c8:
                    e9:6f:75:bc:21:3e:ba:0d:13:45:5b:a4:ba:4e:be:
                    8d:02:1c:c5:13:4e:c4:02:0b:df:c3:a4:5e:68:53:
                    8f:7f:51:23:50:2c:b6:97:d2:b8:c7:83:15:a6:d8:
                    a7:52:7a:7a:5f:4e:9b:5c:8b:39:d3:53:41:4b:31:
                    81:b1:89:1f:68:76:90:ac:84:f6:8b:fc:e2:99:b9:
                    cf:26:50:c1:ca:44:f1:15:cf:18:25:a5:c5:dd:44:
                    85:d7:35:c4:42:c6:fd:87:f1:1b:d3:c2:34:17:b7:
                    a5:04:d7:be:93:3c:93:11:7a:e8:ee:fe:90:f5:26:
                    f0:67:80:18:21:29:20:65:3a:37:93:e2:b3:61:50:
                    91:52:23:3d:eb:a1:cb:cd:95:df:26:9b:f9:f3:88:
                    95:48:63:fb:a6:e4:c0:73:21:0e:e5:b2:1c:cc:3f:
                    e1:59:4e:a8:52:9e:0a:a4:14:02:c6:c7:33:78:9b:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:05:E3:77:3B:34:2C:EF:53:6E:6A:DC:A2:6A:64:22:A2:18:B6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35423a86-7e00-3639-b817-f1f051dab8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:44:18:d5:0e:a9:f2:43:56:bd:8e:58:8e:40:6b:ee:9a:d1:
         95:15:50:b0:9d:f3:ce:26:b3:f2:fc:42:02:5d:13:2c:35:b0:
         b9:7d:45:ab:ae:e5:f8:4b:03:2d:8e:f7:d6:04:5b:bd:1e:b2:
         a1:ab:4d:d7:3c:da:bd:ab:6e:b4:fa:ee:4b:0c:fb:eb:61:16:
         f7:db:81:c0:0f:36:d9:00:71:15:2f:a2:7c:4e:51:85:ba:50:
         7b:8a:74:74:fd:c3:20:5a:05:83:fa:5a:27:a8:49:e4:d3:d1:
         18:29:6a:af:8e:7a:21:e6:c2:8e:7a:43:4b:10:35:b4:eb:77:
         23:c1:c7:7d:bf:06:4f:d0:5b:1c:62:4f:96:b0:0a:78:64:f6:
         60:cf:ac:8a:f3:ca:cb:94:4c:2a:d0:f9:3f:ad:d8:77:ad:08:
         b0:83:ca:18:cb:ad:17:1c:7e:64:0b:ef:eb:53:01:2f:7b:af:
         f9:46:48:9f:bb:b2:54:9c:0c:2b:74:69:c9:5e:64:e8:68:bd:
         5a:aa:f7:cc:54:d6:4d:49:e0:6d:e6:32:92:06:06:13:93:02:
         5c:e1:cf:c0:f4:e8:81:49:81:9b:c9:e3:b6:0c:fc:47:8e:f8:
         27:a6:ac:7c:80:2b:91:ee:f6:5a:15:8b:7d:10:75:df:67:10:
         c6:ab:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:44:43 2024 by rpki-client on console-fra.rpki-client.org