Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e9079d7-b157-3158-8c6b-6c64ef7049ff.roa
File:                     3e9079d7-b157-3158-8c6b-6c64ef7049ff.roa (raw, json)
Hash identifier:          Qjf/JDuwVhcWVQAaehdcprwEmn6K4GlBTvibGJ1zG6o=
Subject key identifier:   48:BB:00:62:5D:A8:63:1A:A7:4F:82:9D:0B:09:71:DB:08:45:EF:20
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E708A36BD8DA8B600E73100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e9079d7-b157-3158-8c6b-6c64ef7049ff.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        34.155.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:8a:36:bd:8d:a8:b6:00:e7:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=dfde7c27-7c01-4f18-8734-2e478872b1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:2f:c5:cd:72:7e:a8:7f:37:d4:dd:91:b8:
                    5b:bb:7f:cd:7d:33:10:81:1c:a5:10:0a:f2:3e:1e:
                    de:bf:51:e2:0c:a1:1f:7c:a4:70:6f:92:ad:77:58:
                    73:09:e4:60:97:19:c3:d6:ca:b4:64:12:2a:6d:06:
                    1c:57:7a:04:1b:00:09:49:45:49:b5:82:c6:10:dd:
                    85:a7:77:bb:57:48:ab:10:9f:1f:2c:d1:74:ed:03:
                    a0:71:27:6a:ef:b8:16:83:36:05:16:d7:23:bf:ee:
                    95:b0:92:b3:d7:ed:00:d4:4b:ee:44:56:08:13:6c:
                    a3:c8:dc:26:69:c6:c9:fa:05:dd:78:a0:58:c9:d1:
                    ca:78:bb:85:5e:ea:ff:b3:16:bc:0f:53:35:00:b3:
                    1d:de:b9:6b:fb:2c:c5:2b:bf:47:c3:7e:1c:4a:60:
                    12:d7:fd:c2:4b:e6:93:0f:bb:65:79:76:b3:59:c6:
                    14:42:62:36:be:3a:85:44:a1:e0:b0:02:9a:df:4d:
                    79:b3:ed:8b:62:05:b2:33:fe:f1:46:d9:f3:eb:89:
                    61:4e:86:a2:31:c4:0d:3f:cb:c7:df:01:6f:3e:77:
                    55:e3:65:b3:7b:4b:aa:9c:1a:df:65:73:68:5a:70:
                    ee:5f:b6:c4:5a:59:c8:6c:19:d4:01:28:7f:20:82:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:00:62:5D:A8:63:1A:A7:4F:82:9D:0B:09:71:DB:08:45:EF:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e9079d7-b157-3158-8c6b-6c64ef7049ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.155.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:f5:9f:a2:58:72:8f:a2:66:8f:47:c0:38:7d:fa:04:c2:
         72:f5:13:b8:86:77:5c:6b:0b:2a:eb:f4:28:23:09:ab:b8:40:
         91:0f:29:f9:a2:16:2b:e1:f5:d1:c0:17:ce:3a:b6:7a:1b:1c:
         bc:a8:2d:66:df:db:4b:d7:98:66:95:a7:d6:0f:95:f5:97:93:
         e3:54:68:e1:dd:c1:d9:ce:58:5e:67:60:5d:7a:34:f5:8b:2c:
         b2:80:09:b1:ea:55:a1:bb:71:8d:66:d7:8a:66:9f:d0:bf:10:
         6b:90:34:ff:18:bd:47:73:ce:4f:e7:d7:22:6d:ff:ba:48:ae:
         e2:39:4f:66:c4:ac:1f:05:f2:79:bc:47:cc:25:da:cc:74:d5:
         92:04:c7:36:20:76:f2:18:2e:6f:d9:a5:7c:9e:42:67:37:26:
         44:c4:ce:4c:c0:5c:cb:a5:bf:93:8c:76:49:5d:be:68:c9:9a:
         9d:44:d0:d2:38:2a:15:30:54:1a:92:62:01:42:46:92:e3:53:
         9a:89:90:5c:bf:c9:20:7e:93:12:7c:c5:fb:8c:21:ca:39:64:
         98:c0:39:38:83:71:ea:80:bb:94:e5:09:50:fd:b5:36:3d:fa:
         c5:b3:05:92:f6:24:29:fb:71:b9:c7:40:26:d0:f2:12:8e:f2:
         cb:9a:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:56 2024 by rpki-client on console-ams.rpki-client.org