Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3584defe-0eca-31a6-bb0d-d0e97a272b50.roa
File:                     3584defe-0eca-31a6-bb0d-d0e97a272b50.roa (raw, json)
Hash identifier:          +rYsDB4+hpm+yRl4eg8TjubeM9Tw0sgiDzi6bsP0V6Y=
Subject key identifier:   5D:C1:07:D6:8A:C2:9D:FB:78:DD:C7:E5:90:4B:C3:5C:06:67:0C:9C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549063DBCEB3C06C4FD1F1200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3584defe-0eca-31a6-bb0d-d0e97a272b50.roa
Signing time:             Thu 21 Mar 2024 21:32:40 +0000
ROA not before:           Thu 21 Mar 2024 21:32:40 +0000
ROA not after:            Wed 19 Jun 2024 21:32:40 +0000
asID:                     15169
IP address blocks:        34.186.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:06:3d:bc:eb:3c:06:c4:fd:1f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:32:40 2024 GMT
            Not After : Jun 19 21:32:40 2024 GMT
        Subject: CN=eb3f8673-5ebd-4e53-9833-50e7361a7b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:39:c8:67:1c:ae:e8:32:c1:dc:b7:da:fb:
                    64:11:68:80:ba:2b:ae:4f:02:91:1d:e0:c3:98:ff:
                    12:a6:4c:36:64:e9:22:9b:96:10:65:9d:89:ef:47:
                    0e:69:42:1e:ac:7a:4d:76:1f:04:8f:e0:3a:42:f9:
                    86:68:90:b3:76:c6:03:07:a3:9a:5b:a9:71:c7:2e:
                    78:e4:12:87:81:8d:a0:25:5b:2f:1e:ed:19:4a:0f:
                    04:03:53:1a:22:f2:8d:88:b3:9f:c8:68:03:35:a0:
                    24:b3:08:cd:1c:e6:ca:d4:99:c1:20:fa:50:19:90:
                    f5:88:ed:3f:e5:9f:7c:25:43:a6:2d:c0:40:fc:e6:
                    b5:4d:77:da:7f:6b:b2:0e:4b:92:41:8e:fe:3a:92:
                    7a:6b:ee:97:72:e1:d2:7b:53:74:22:66:c4:8b:c2:
                    d9:ef:e7:bb:7c:6b:5c:cd:61:f1:12:ee:36:f8:f4:
                    eb:9d:e9:1b:75:ef:61:33:89:d4:93:45:ef:2f:43:
                    1a:d6:da:6a:07:c3:26:f1:eb:f5:44:19:f3:4c:a6:
                    06:60:a6:44:28:85:0a:bf:6e:28:f8:3c:ed:31:a9:
                    cc:b0:2d:b7:66:2d:ad:d1:d5:89:0f:0b:cd:73:79:
                    ec:e6:a7:1f:18:04:83:ba:12:af:26:b1:38:a0:e4:
                    35:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C1:07:D6:8A:C2:9D:FB:78:DD:C7:E5:90:4B:C3:5C:06:67:0C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3584defe-0eca-31a6-bb0d-d0e97a272b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:06:41:95:42:c9:b7:a1:61:18:c3:17:85:74:44:24:ed:96:
         45:b1:cc:f8:27:0d:b3:56:09:74:aa:83:10:05:0b:88:ec:46:
         1e:fc:79:28:68:46:0c:8e:8e:e7:10:76:aa:57:29:a1:47:93:
         80:c1:8e:4f:24:3e:40:58:ba:35:a9:56:d0:9d:9a:27:3c:f4:
         2c:b3:05:2a:6e:7c:80:9b:75:06:53:69:fc:99:08:51:2d:74:
         b3:52:b6:f8:0f:21:83:91:f8:86:24:48:d4:bc:46:50:ed:9f:
         c1:93:ef:98:01:24:fa:9c:8a:74:f8:64:33:e1:13:eb:29:e0:
         a8:66:22:0f:89:1d:bf:8f:52:dc:3a:6f:24:69:ff:3d:04:a4:
         a8:64:30:b4:a3:4a:7a:f8:fc:53:fd:9c:cc:1f:d4:d2:05:63:
         70:5d:ea:4c:26:6c:73:3f:8e:f2:2b:45:d4:d1:3a:f3:f6:37:
         23:f0:aa:2a:c4:71:d8:6f:30:6b:f9:f5:8c:d9:c2:c7:28:6d:
         d6:01:63:6b:f8:a1:f7:3e:fb:49:20:2b:2b:84:ae:7c:32:ad:
         e5:a7:f8:b2:e4:77:37:ee:33:ca:cb:e9:23:2e:c3:69:54:70:
         62:ac:15:20:70:8b:2f:5f:02:e2:ea:1f:44:11:dc:1a:78:e9:
         37:77:92:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:22:24 2024 by rpki-client on console-ams.rpki-client.org