Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/431acdca-41f4-31db-922a-97a94410f8f5.roa
File:                     431acdca-41f4-31db-922a-97a94410f8f5.roa (raw, json)
Hash identifier:          KlsLjM/4ht4n3lblWHfB5AQdGOLQrdJuf/iUp73fg8c=
Subject key identifier:   8E:EF:0A:33:E0:71:71:9C:95:07:58:75:82:95:7F:43:33:7D:48:92
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62AB0EBF0F031E2DF45D740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/431acdca-41f4-31db-922a-97a94410f8f5.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        34.0.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b0:eb:f0:f0:31:e2:df:45:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=1d6cb0d6-861c-4127-a45a-d0952518295c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:08:6b:06:e8:7a:40:9f:d3:93:77:a4:cf:01:
                    08:77:ec:16:9d:94:8b:c4:de:ab:2f:62:a7:6e:e2:
                    7d:89:a1:ef:95:ca:d4:96:7a:c6:6d:ea:57:9d:d7:
                    d5:9b:be:f1:2a:73:5d:74:2b:7a:57:26:ea:1a:5e:
                    5b:f0:ee:3d:b1:38:23:a8:d5:1e:04:8d:cf:eb:fd:
                    cb:90:dc:46:af:3d:74:1f:22:28:64:32:bf:47:2d:
                    47:d6:94:c2:ed:4e:51:30:81:6a:47:d8:8c:f0:6d:
                    47:98:24:25:0e:13:da:0a:e8:b5:cd:ae:2a:6e:06:
                    bf:c0:69:78:c1:10:56:ff:23:4a:ba:44:5b:7d:37:
                    05:3d:68:0e:1b:dc:25:76:f8:7d:4a:ad:17:81:89:
                    32:d6:2b:7e:b2:cc:78:e4:54:19:96:f8:7a:a9:d3:
                    65:d2:fa:13:6c:bf:35:ba:b8:2b:ac:87:1b:f7:9f:
                    c4:9e:c2:9e:4f:b1:48:bf:b0:92:cc:83:e4:ca:e7:
                    c8:c6:c7:98:a3:57:74:ba:8c:b0:f0:13:70:95:59:
                    60:c9:60:61:58:7a:9e:47:36:15:4b:fe:71:b7:81:
                    e9:39:56:98:d1:3e:21:fe:94:25:4d:ea:61:d1:75:
                    65:91:de:a0:bf:c8:81:f6:ed:b3:44:21:bf:29:bc:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EF:0A:33:E0:71:71:9C:95:07:58:75:82:95:7F:43:33:7D:48:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/431acdca-41f4-31db-922a-97a94410f8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:71:b1:ee:07:44:ad:70:6a:2c:1d:39:f8:2a:b4:61:de:8a:
         6d:b3:6c:bc:87:e6:30:d6:42:d7:2e:c3:99:21:9b:71:0a:c9:
         34:6b:71:48:1b:3b:fd:b2:5b:35:d7:d8:84:29:15:49:c5:56:
         d3:2c:82:3b:15:3c:cf:b4:7a:5c:3e:49:0e:d3:46:3a:2c:b4:
         48:d9:5f:83:3f:aa:f3:e8:66:80:c8:f1:11:7c:ec:5e:cd:2b:
         cc:5f:ca:59:a7:91:59:e2:b0:5c:bb:fd:95:42:d9:a4:40:30:
         13:e0:85:48:3c:78:35:c9:d9:ae:76:eb:5a:34:46:66:76:41:
         90:79:ae:88:98:40:3d:e0:2b:4a:39:47:6e:94:54:80:1a:1b:
         36:2b:bd:c1:d7:72:a9:8a:33:7f:a9:ba:bf:9a:1c:02:0c:d3:
         73:0f:1c:4d:2d:29:23:4d:c8:e7:52:8b:2a:fb:a8:f0:ca:5c:
         8a:de:26:b6:76:6f:5c:9d:9f:04:08:0f:3f:ff:a0:70:9f:ce:
         6a:ae:5e:fd:97:3c:92:5a:e8:0c:85:5a:19:43:6e:a8:5e:fc:
         36:b0:e4:c2:47:ee:08:88:36:2c:d9:29:a1:5e:e4:a2:7b:28:
         55:dc:0e:f0:2e:58:b4:df:da:fa:b2:14:16:e1:04:93:2f:cb:
         50:ad:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:44 2024 by rpki-client on console-ams.rpki-client.org