Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bb5542c-8a1c-32b1-8689-9ac6e8d5a3dc.roa
File:                     4bb5542c-8a1c-32b1-8689-9ac6e8d5a3dc.roa (raw, json)
Hash identifier:          p3z3/xkabIL8xjhN2iMB6hioGunQCNOwM8ndh/yQCa8=
Subject key identifier:   C3:02:DC:C0:FE:B7:84:4F:29:17:CF:93:61:EF:05:8E:32:4B:86:2F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454625C231442447BFF7E17A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bb5542c-8a1c-32b1-8689-9ac6e8d5a3dc.roa
Signing time:             Wed 20 Mar 2024 20:48:44 +0000
ROA not before:           Wed 20 Mar 2024 20:48:44 +0000
ROA not after:            Tue 18 Jun 2024 20:48:44 +0000
asID:                     15169
IP address blocks:        34.1.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:25:c2:31:44:24:47:bf:f7:e1:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:48:44 2024 GMT
            Not After : Jun 18 20:48:44 2024 GMT
        Subject: CN=7e17e531-0b76-4750-a2d8-f2be2ebeeb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:71:09:df:4f:9d:90:a7:95:f9:13:11:74:
                    66:e3:98:6d:33:91:99:fa:c0:19:36:5e:e3:a5:f3:
                    a9:7e:84:7d:83:36:3a:4b:72:d1:96:45:c2:64:44:
                    8e:b8:d7:11:4f:00:64:68:cf:df:8e:fe:c1:12:1d:
                    58:d8:a9:bc:78:8b:c5:5d:c6:2e:01:ac:8f:4d:48:
                    a7:2e:9d:31:de:23:ae:77:37:8b:ee:f0:aa:04:81:
                    10:59:81:ac:45:40:2a:92:28:f0:e7:64:c2:68:c1:
                    72:1a:43:bb:64:f2:d6:aa:7a:6c:e2:67:1e:72:61:
                    71:06:bd:a2:c7:4b:7a:25:02:b7:cf:93:c6:a4:1f:
                    ba:e6:71:51:77:c2:ee:21:4e:3e:3a:59:a1:b2:9c:
                    cf:ea:64:f2:33:0e:4e:9b:42:55:3f:48:af:aa:d6:
                    2d:c1:a1:33:dd:71:1f:1e:07:d1:7b:0b:d2:35:31:
                    7c:90:da:48:f4:f0:ad:e4:4a:46:98:2b:c4:46:f8:
                    c3:91:68:13:b8:8c:fe:a7:09:3e:bc:db:9e:a0:53:
                    f8:40:60:7d:e3:8d:33:c2:28:2b:ab:e7:95:6b:48:
                    81:9d:51:ee:af:13:fa:6d:e7:25:6f:b0:26:83:f9:
                    d2:3a:1e:d8:9b:0f:1a:a3:19:ee:a2:21:a2:e9:39:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:02:DC:C0:FE:B7:84:4F:29:17:CF:93:61:EF:05:8E:32:4B:86:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bb5542c-8a1c-32b1-8689-9ac6e8d5a3dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:21:10:0a:6d:6c:4c:1b:22:7d:b2:a9:ff:91:ca:f9:6f:
         b2:ac:a8:69:9d:d0:92:30:ea:21:5a:e1:7c:59:70:c5:1c:dd:
         4b:da:e9:83:4b:47:57:39:93:3e:44:63:99:eb:d6:00:ee:cf:
         c2:2a:23:c5:32:cb:ce:b4:c1:ee:69:50:0b:26:f0:e0:ea:cf:
         0b:10:0d:bc:a9:78:54:92:de:5c:0c:01:64:57:e3:6f:5c:53:
         5f:f7:69:1b:7f:6e:bd:0d:9c:d6:b9:bd:08:cd:d7:ca:0d:64:
         4e:50:62:c3:a8:ac:cc:d4:98:46:f6:b9:1d:0e:e2:b1:c8:df:
         7f:ec:eb:d7:75:24:5a:09:e5:e5:12:f9:3c:a7:1f:48:82:33:
         46:4e:9a:c0:dd:4b:ab:8b:8e:d5:fb:9b:8d:78:30:0f:e6:e9:
         fe:6a:7a:a6:f7:6c:60:fc:c2:85:df:01:20:ef:42:77:26:7e:
         74:26:7d:5c:d3:a2:19:f7:1d:8e:28:27:06:a2:08:8e:49:c1:
         22:3d:8c:68:ac:89:a3:f7:e4:10:48:f2:2c:bc:4c:8a:16:95:
         5a:5d:83:fc:08:af:3e:07:11:0b:82:ca:e0:22:8c:67:cc:32:
         b1:5a:74:c4:7b:e8:5d:39:74:17:07:25:d4:8e:7c:a4:5e:e0:
         6c:6e:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:32:54 2024 by rpki-client on console-fra.rpki-client.org