Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d636178-4b6f-3745-9d05-665a997bc967.roa
File:                     5d636178-4b6f-3745-9d05-665a997bc967.roa (raw, json)
Hash identifier:          IICXET44bq76N/ezQ4MbhchhJI5gHsW6zWguIpb/84k=
Subject key identifier:   A7:8A:90:41:BC:A5:06:A4:8E:2C:2F:69:CE:5A:A7:A7:FB:CA:61:5E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F035D56BE08D3D4818435C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d636178-4b6f-3745-9d05-665a997bc967.roa
Signing time:             Fri 29 Mar 2024 18:34:39 +0000
ROA not before:           Fri 29 Mar 2024 18:34:39 +0000
ROA not after:            Thu 27 Jun 2024 18:34:39 +0000
asID:                     15169
IP address blocks:        34.124.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:03:5d:56:be:08:d3:d4:81:84:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:34:39 2024 GMT
            Not After : Jun 27 18:34:39 2024 GMT
        Subject: CN=ba0f5cbc-f966-4540-9a84-7b0463ee127e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:e1:53:d2:9b:b8:ad:00:db:a5:41:5a:0c:
                    6b:2d:a1:9f:16:f3:4d:f8:6d:81:50:c5:81:f9:34:
                    a1:92:95:57:7b:17:2a:7a:26:5f:c1:f3:96:37:8c:
                    20:c1:95:89:ce:e7:c3:8b:45:83:68:d4:fd:23:cf:
                    e1:4d:34:b8:d1:68:ca:ed:0d:48:3c:05:b8:56:f3:
                    88:57:47:ce:41:a0:1e:d6:01:a7:7f:f3:3c:68:f7:
                    72:50:01:95:50:61:89:73:32:da:dd:47:3a:aa:7f:
                    d8:0b:bd:cf:e7:ca:93:ed:1d:43:b6:a9:0b:18:6a:
                    83:2d:ac:8a:13:34:7b:88:94:1f:6b:a6:ff:f9:ca:
                    bb:9b:34:8a:28:ce:38:4c:dd:e4:77:a8:f7:7f:6d:
                    50:47:82:c6:f2:8e:29:c2:25:9d:98:64:75:1f:e3:
                    c2:3b:4c:b0:b2:94:71:b6:ed:19:b8:bf:d7:0f:7b:
                    bc:cd:e2:db:13:59:64:da:b8:d0:8a:6d:94:21:29:
                    6b:cf:97:ea:d2:93:e8:1c:74:f7:e4:81:e4:3c:c2:
                    53:9d:f9:3d:b8:bd:56:a8:7c:9c:57:52:24:36:f1:
                    a1:8a:68:c1:57:97:44:06:5f:67:15:d1:f0:6e:80:
                    87:7d:69:1b:37:f7:3e:91:79:b6:85:d1:33:c2:1c:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:90:41:BC:A5:06:A4:8E:2C:2F:69:CE:5A:A7:A7:FB:CA:61:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d636178-4b6f-3745-9d05-665a997bc967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.124.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:20:00:7b:04:09:71:1d:f2:0c:6f:87:c4:c1:d7:47:0e:35:
         20:8a:b6:73:b4:81:20:31:23:94:cd:af:04:41:71:40:b8:44:
         ce:ea:83:97:c5:63:bd:49:5c:b4:2a:aa:53:bf:a6:e3:23:a0:
         b3:19:2e:da:19:62:88:b2:38:98:7f:5d:2b:f5:70:fc:6c:6d:
         89:13:82:ee:ed:06:b2:45:c4:fc:72:b9:cb:66:c1:ef:58:da:
         59:83:4d:2c:c3:19:13:37:cd:99:03:e8:56:35:2a:1c:b4:c1:
         99:e4:c5:b4:59:2e:8c:6e:3a:db:74:61:14:c4:4f:10:96:cb:
         f2:56:fe:6f:73:92:56:33:6b:3a:57:55:6b:fd:8f:59:93:3f:
         6d:a7:af:97:e3:0a:fc:b0:1b:87:83:1e:b7:7f:37:37:14:65:
         f6:1c:7f:a5:14:cb:f0:58:55:93:2d:9b:48:62:ca:4e:17:02:
         ef:68:e2:16:fd:64:d8:d6:43:79:89:79:fc:af:6c:89:47:02:
         87:9e:d7:50:45:6b:b9:60:b8:37:db:a1:3a:16:48:a8:74:99:
         14:f9:1a:9d:9b:a2:21:b4:f7:a3:c8:5d:2c:44:18:8b:f9:2f:
         83:50:3e:a6:95:3e:7c:85:41:c7:b6:da:67:72:e2:1b:1e:08:
         2a:16:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:30:31 2024 by rpki-client on console-fra.rpki-client.org