Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/484e6e2f-b8b9-3215-a822-9914b9f54eae.roa
File:                     484e6e2f-b8b9-3215-a822-9914b9f54eae.roa (raw, json)
Hash identifier:          6IpRwtZ5bw7R+3g8AOerzXecG22gdLOS0oX+4q81370=
Subject key identifier:   76:95:94:C7:58:B6:15:55:4D:D8:B4:05:2F:F3:AA:BA:10:49:EF:34
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4F75ECF38449E97299E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/484e6e2f-b8b9-3215-a822-9914b9f54eae.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.129.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:f7:5e:cf:38:44:9e:97:29:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=5f04ad40-0662-4e9f-86e2-fadc45548152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:65:bc:52:5d:38:ac:5d:d5:bf:28:ba:6a:11:
                    4b:99:70:ee:77:3a:b2:41:91:2f:54:cb:4d:11:f3:
                    ad:29:fe:d4:42:e3:90:2e:8e:c5:15:ae:ea:83:02:
                    ea:80:30:a8:d7:6a:64:02:7c:a3:aa:7b:a2:b6:66:
                    5e:bb:06:20:b6:02:75:03:b2:dd:a9:22:24:0d:8a:
                    10:cc:7e:1a:b6:ce:30:ac:07:35:57:1e:94:e3:b4:
                    33:1b:f3:a3:12:87:00:85:a1:e6:01:d5:d2:da:b7:
                    f9:5f:78:26:be:e6:76:f1:ea:45:ef:e6:ad:e6:d9:
                    d0:7e:9b:d0:4d:b8:50:90:7f:3d:94:f8:43:cd:28:
                    ff:e2:3c:66:5c:5c:02:c9:f2:43:f9:db:1a:f7:8e:
                    95:3a:e2:41:fb:e2:6b:b5:03:ec:9b:7e:92:ee:6b:
                    f6:ad:6e:a6:b1:eb:80:a2:c0:67:40:c3:64:cf:df:
                    21:4e:c2:57:db:9d:63:93:9b:42:25:61:f0:05:53:
                    68:15:96:09:2c:7a:59:b9:47:5f:5e:6e:28:04:46:
                    4e:58:68:5e:a5:ce:95:96:3a:8b:6c:3b:62:c3:bf:
                    10:55:da:36:ba:bf:f2:57:21:48:d2:af:80:08:8e:
                    c3:c5:31:03:0d:16:f8:42:76:c9:25:bf:a2:75:7c:
                    8f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:94:C7:58:B6:15:55:4D:D8:B4:05:2F:F3:AA:BA:10:49:EF:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/484e6e2f-b8b9-3215-a822-9914b9f54eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:75:4e:2a:5b:d4:a8:6c:45:d9:fa:36:94:97:e3:d4:e2:51:
         68:47:a3:72:fb:f4:51:38:fc:08:6c:53:c2:e6:7b:fb:02:c2:
         fe:da:e5:5e:d9:6a:a9:f0:54:58:84:4a:c6:65:b6:c9:1d:a4:
         84:71:6c:98:65:76:f8:07:0c:80:85:25:3e:53:8c:d8:ff:28:
         df:f3:99:e3:70:13:05:ee:dd:a0:fe:eb:a9:12:40:5e:97:3d:
         7b:67:82:54:7e:18:fe:62:02:de:c1:18:64:65:b8:ef:3e:bb:
         27:a3:42:54:d9:16:8f:e0:93:b2:0b:76:a1:6c:3e:1a:3f:00:
         76:c7:f2:15:41:89:b6:bf:f2:9d:08:84:98:62:34:d7:3e:47:
         af:23:9d:98:15:3c:48:c2:19:f5:ba:ef:f9:c7:42:25:9a:d7:
         e2:10:a8:30:63:41:73:b4:14:1a:a5:95:61:3e:16:dd:e6:26:
         c5:53:d1:05:0f:e1:7f:e6:84:32:8d:2b:54:1e:79:1c:e9:83:
         6f:0c:47:e7:0e:90:80:a7:78:b6:c7:e8:45:c8:da:64:27:2e:
         81:35:11:ac:26:61:e0:86:78:5d:72:17:42:7d:93:46:e9:17:
         5a:34:fa:65:07:35:a0:9a:37:07:27:39:e0:9a:f6:de:11:cd:
         39:de:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:49 2024 by rpki-client on console-ams.rpki-client.org