Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d937925-126e-3d90-8ce9-6dcf10254593.roa
File:                     3d937925-126e-3d90-8ce9-6dcf10254593.roa (raw, json)
Hash identifier:          F7E00GuhT3hSToKOmVcO9AMbEBG/xZPBF2kLWYNywcU=
Subject key identifier:   76:33:5F:47:BC:20:2D:00:C0:E9:26:A5:D1:2C:B6:2C:D5:95:85:32
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F52D9DD0B53D7C6B2609E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d937925-126e-3d90-8ce9-6dcf10254593.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.124.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:2d:9d:d0:b5:3d:7c:6b:26:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=cc422c08-59c3-418e-93f0-e46a9a2ed833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:11:70:81:50:76:35:81:74:57:de:02:94:
                    eb:3f:bc:38:9e:a2:d1:a7:67:01:db:38:f2:fe:70:
                    aa:08:2f:5c:40:9c:d1:84:a7:50:0b:82:2d:19:62:
                    b3:e9:9b:14:2e:7b:b4:50:57:48:10:05:73:df:4d:
                    c4:72:a2:b6:96:e4:95:32:17:0d:ca:d2:e2:66:34:
                    c5:21:66:51:cc:c8:ee:7c:92:d7:b7:80:63:99:dc:
                    a8:84:34:ec:13:ef:2f:0c:e6:2a:7e:40:a7:1c:7d:
                    42:7c:b6:fd:0e:ab:37:44:66:40:0f:8f:ec:76:70:
                    c3:e6:e7:74:10:1d:cd:f2:34:c8:fa:5a:b3:df:a4:
                    9f:2d:f5:ee:28:af:61:8c:91:88:4e:dd:ca:68:31:
                    e9:87:a7:63:dc:02:fe:0c:f3:36:12:de:51:33:31:
                    bf:1b:97:b9:4e:42:81:8e:e7:16:09:5c:8a:ab:62:
                    de:99:ba:a7:ff:84:ed:ea:e2:ef:54:d2:11:bb:23:
                    eb:f8:7e:39:d1:23:e9:17:ed:c5:b9:94:3b:6f:47:
                    be:99:c6:40:2a:aa:2b:ef:f3:50:12:12:a0:2c:da:
                    96:31:9a:75:ad:b2:2b:7d:a3:b4:38:84:d3:7c:a9:
                    82:12:41:2c:30:4c:53:3c:7a:c0:51:3e:25:5c:e1:
                    b0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:5F:47:BC:20:2D:00:C0:E9:26:A5:D1:2C:B6:2C:D5:95:85:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d937925-126e-3d90-8ce9-6dcf10254593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.124.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:8c:88:12:ad:0c:20:77:c8:65:ab:59:9d:60:22:4b:77:
         cc:04:1c:39:95:a4:52:58:b2:b8:aa:99:98:db:ea:26:3e:bf:
         b3:8e:b4:40:18:ad:8a:68:7e:27:fa:75:0d:c0:e4:bc:41:62:
         c3:54:a1:f1:72:cf:af:2b:43:14:3e:40:35:38:59:16:17:d2:
         5e:02:d6:05:38:e6:91:df:c1:30:26:71:ed:e1:3c:82:46:d7:
         31:58:8d:69:7e:a4:c0:3e:b9:90:5e:9b:7c:bc:12:8a:04:30:
         da:bb:7a:7f:68:00:bf:1e:f2:01:ec:16:6c:b2:15:9d:22:5c:
         f6:33:ad:2a:ed:b9:4d:95:cc:5d:38:d5:9b:ef:d2:34:14:1b:
         de:ad:5e:67:f3:2d:dc:5a:e5:05:c7:c1:86:c4:7f:e3:3c:6c:
         79:f6:f2:18:0f:f5:6f:eb:d4:10:1e:a9:6d:0c:10:9d:6a:f8:
         97:d4:2e:65:90:a3:85:2b:29:57:ab:6b:1e:41:21:83:af:75:
         b6:33:70:cb:7b:b3:8a:2c:f2:c0:6d:db:cd:2c:c6:0c:ce:6a:
         ba:72:9b:8d:00:25:d3:62:5c:e2:74:9f:ea:10:97:aa:a8:2d:
         fd:b4:c4:1b:6e:5f:e7:2d:46:95:eb:f0:4b:d4:56:aa:8d:e8:
         3e:f2:03:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:43 2024 by rpki-client on console-ams.rpki-client.org