Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4245d169-c2d6-372d-9cdd-69b76ef220a3.roa
File:                     4245d169-c2d6-372d-9cdd-69b76ef220a3.roa (raw, json)
Hash identifier:          CxSz5BXYomsbnILhztqNCt/irn0uhiagB1tQlc0R84o=
Subject key identifier:   3B:BE:76:B6:15:57:90:85:8A:6D:BB:3E:47:3A:B6:2A:55:80:A0:94
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E7080D41A71AC6813518DD0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4245d169-c2d6-372d-9cdd-69b76ef220a3.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        34.154.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:80:d4:1a:71:ac:68:13:51:8d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=709dd15d-c9a0-4060-bcc1-d10441f27587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:b8:2f:1b:18:2c:52:f5:a7:b0:82:0d:71:
                    82:ae:b1:b8:6f:bd:27:c4:79:66:27:8d:82:6a:a5:
                    ff:d7:31:e9:4f:9f:0d:a0:82:dc:5e:e8:ab:3d:f9:
                    5b:2b:86:17:19:b6:47:53:be:28:2e:cb:53:a3:fc:
                    6a:1c:ae:5d:ef:0d:dd:0e:e0:02:eb:04:94:01:70:
                    0a:4a:3c:32:5f:c5:81:75:a9:5b:6e:3d:6e:90:3a:
                    39:44:e1:d7:70:01:57:25:a6:e6:98:dc:a0:78:a1:
                    c5:b5:63:8e:9c:7f:be:a7:8c:5e:8d:3b:e7:ea:5e:
                    4d:d2:6e:09:d8:a0:55:7a:63:9f:1f:ec:d5:81:2c:
                    35:6c:29:c1:f7:04:34:57:e2:25:0d:f5:72:f9:52:
                    a5:f7:70:da:28:85:f5:56:3c:de:64:28:57:4a:ca:
                    61:8f:01:81:00:5c:b2:73:ae:13:41:4b:fb:72:de:
                    14:95:24:28:8c:f9:c7:87:9c:9a:10:d1:92:0f:98:
                    6a:57:de:9f:2e:7d:b9:d1:8f:4d:77:10:7a:a0:8a:
                    9d:9c:7f:5d:f5:12:b9:d0:e3:5d:68:2a:27:1d:13:
                    d6:c7:ca:f6:16:86:d4:cc:8d:47:29:23:f9:97:98:
                    c9:da:cb:2c:fc:f4:d4:06:35:e0:d7:e9:bc:f8:07:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BE:76:B6:15:57:90:85:8A:6D:BB:3E:47:3A:B6:2A:55:80:A0:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4245d169-c2d6-372d-9cdd-69b76ef220a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.154.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:a5:87:30:02:dc:8f:ae:e5:4a:e5:e3:00:ef:87:d6:bb:
         bc:56:c3:ca:68:bc:0e:36:f8:33:3b:eb:8f:9a:d5:5b:16:0a:
         f4:81:6b:22:d1:cc:30:9e:b1:24:5c:c5:fa:fc:b1:f3:a4:b0:
         b3:39:db:95:0b:33:9d:d4:fa:b5:2e:94:1d:6a:ef:29:c1:d1:
         12:5e:e8:f6:8f:93:d5:5a:22:d9:6e:32:e4:24:83:66:b2:d9:
         30:fb:26:65:c7:de:29:09:e7:4a:cd:4a:1b:b9:41:1c:7b:4e:
         64:5f:dc:23:f1:f2:43:62:ea:80:2f:68:41:be:fd:0a:49:4c:
         b0:51:2b:c0:8c:00:79:55:da:4c:bb:46:57:69:4a:6e:54:ac:
         bf:41:0c:30:37:f1:2e:37:e9:0d:db:8e:b2:b6:da:d0:9e:62:
         05:1b:b7:73:60:95:d9:93:73:88:96:d8:f5:e4:67:3a:5b:9c:
         06:84:62:13:da:f5:50:74:62:61:5a:74:2c:ed:ac:94:80:6c:
         48:9d:13:97:ae:2a:b2:cb:15:7b:75:20:8d:d8:03:4e:97:54:
         63:11:ce:1a:4a:88:55:27:c5:24:f6:be:c1:e7:84:af:81:28:
         e4:d3:d7:e5:e4:43:86:78:10:6a:fb:02:65:38:a3:c3:3c:4e:
         18:05:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:44 2024 by rpki-client on console-ams.rpki-client.org