Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa
File:                     3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa (raw, json)
Hash identifier:          xf/7T/sD9OoGJl7UUpFeeyu463eahtX59L4Ao1WtwK8=
Subject key identifier:   58:CF:6A:A2:6D:83:FB:28:14:7C:3E:FD:6A:A4:14:7A:36:17:5F:A4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4EAC9A6E739AF79F3CA40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.70.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:ea:c9:a6:e7:39:af:79:f3:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=c687abab-663e-46ef-b324-f36acaebacae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:ff:32:5c:a3:ab:0f:fa:9d:f3:0f:72:ab:
                    ab:ce:70:68:3d:42:ca:c8:b4:23:1d:84:ff:9a:58:
                    1d:a8:d0:3e:0d:4b:3a:67:66:9a:f6:83:a1:bd:e8:
                    03:cc:5b:9f:8c:f0:50:db:fe:b7:dd:af:dc:f4:85:
                    94:b5:83:27:51:76:0c:b3:8d:9c:84:71:af:50:4a:
                    8b:d6:2e:24:57:68:bc:06:99:e0:df:e9:81:7e:b2:
                    ea:4f:7a:bd:de:f3:10:c7:12:0d:f5:88:3f:82:8e:
                    82:e3:59:a0:14:99:02:73:87:69:ba:e3:75:72:7f:
                    52:5c:8c:59:1f:59:c0:47:a3:1d:3e:4b:13:3e:35:
                    59:f1:20:56:7c:de:a9:df:1c:45:98:dd:a9:d9:94:
                    7b:42:b2:ac:67:07:92:89:34:5c:03:3c:86:ad:30:
                    2d:c6:a1:cf:58:c5:84:5e:e9:cc:67:0e:6d:2c:a4:
                    5a:4f:a4:25:3d:c4:54:47:36:c6:40:eb:37:a9:88:
                    35:10:ac:05:76:fc:40:90:41:e4:2d:d5:8d:29:04:
                    55:73:8e:80:ed:99:09:97:36:ec:30:32:61:e2:16:
                    61:11:2b:62:06:e7:ef:1b:be:cb:2a:1a:ed:b4:b0:
                    2a:5f:a5:0a:de:96:b6:d3:da:51:f0:0d:78:39:c9:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CF:6A:A2:6D:83:FB:28:14:7C:3E:FD:6A:A4:14:7A:36:17:5F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.70.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:a9:2a:8b:24:24:4c:b3:14:1e:47:38:d5:cb:f1:33:88:
         a6:c2:62:16:3e:af:46:d2:5e:f1:12:20:cc:0b:2e:17:d5:cf:
         04:e6:ce:98:2d:81:42:cd:ec:1d:9b:27:f8:f8:d1:7d:a2:f5:
         d7:83:92:83:4c:7c:b5:94:fe:44:6e:35:c4:a0:01:f1:83:d8:
         93:d6:fe:1e:56:90:b4:af:f9:b2:ae:91:27:76:c8:5c:77:9d:
         e4:a3:a5:18:fd:e8:e6:02:b0:1d:6b:9c:ad:f1:1b:51:21:db:
         91:21:e9:ff:ed:57:f4:b3:07:3b:2a:62:30:6c:67:9d:89:b0:
         30:09:b1:fe:17:31:14:d4:ef:19:87:bb:75:5a:f2:8a:b8:91:
         6f:ea:b6:54:7d:3f:f9:b9:09:a5:fa:fd:c0:13:54:d5:94:4c:
         75:e8:e4:92:07:18:42:0b:a3:92:84:07:67:81:7a:86:c3:64:
         26:5f:c5:61:0c:85:c0:20:0c:b8:3d:22:9b:e9:06:57:01:3c:
         b3:6f:68:78:cc:16:77:f6:68:ad:a8:d4:b9:80:3c:86:b5:32:
         19:3c:c9:5f:cd:d2:c8:5f:b7:15:c7:40:25:97:c6:b5:46:01:
         2b:19:6f:ae:5d:b6:02:66:29:2a:31:84:3b:a3:62:60:a2:ba:
         41:a2:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:16 2024 by rpki-client on console-fra.rpki-client.org