Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d73c39b-1a8a-3582-80d2-55a06abcafd5.roa
File:                     5d73c39b-1a8a-3582-80d2-55a06abcafd5.roa (raw, json)
Hash identifier:          Hm3uAAh5X8AKx2jNKDkFfmjwwKsVmlxUUjgYUoO+WSs=
Subject key identifier:   51:7E:2B:DF:B1:EB:A1:24:FA:1B:90:35:3F:B7:96:26:C8:12:32:77
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858475A76441F75155668682E0F76
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d73c39b-1a8a-3582-80d2-55a06abcafd5.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     396982
IP address blocks:        34.50.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:44:1f:75:15:56:68:68:2e:0f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=bfcca140-c2f5-462a-a0aa-ba6c8a8510df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:58:f5:36:8a:ea:b3:25:96:3e:49:1f:ec:
                    a2:71:11:94:00:44:ad:86:46:a8:c5:bf:6a:1c:90:
                    1f:1d:eb:f3:17:c4:b3:f5:b0:70:2e:de:78:2b:33:
                    2c:88:b5:72:23:80:4b:d8:3d:3d:85:0e:73:96:ba:
                    63:7a:9f:d8:34:7f:1f:dc:64:4a:5e:5c:e6:4f:96:
                    8d:11:9b:19:cb:2f:ed:16:23:a7:7d:b4:56:4b:56:
                    7a:bd:8b:51:2d:ab:3d:79:16:79:00:a6:fb:fc:03:
                    8d:41:82:92:00:3d:df:4a:8b:4b:e7:34:ec:5d:fd:
                    96:fb:6e:37:43:ca:ba:24:61:40:84:63:37:d4:de:
                    c1:c8:48:8b:d6:75:cd:0b:92:a8:a1:da:ee:d5:46:
                    9f:d9:30:83:2c:a2:a2:37:28:32:55:ae:3e:7c:6e:
                    02:57:e9:d4:0a:ec:29:bf:52:e1:e0:a7:d7:48:5c:
                    6b:f2:16:ff:15:e8:87:a5:01:13:61:f4:9c:0c:35:
                    06:86:db:97:db:da:3e:b5:d2:f3:f9:e6:4f:69:c2:
                    ab:d0:9b:44:57:4b:c2:18:75:73:03:88:f5:1f:d8:
                    63:f3:42:dd:65:8d:58:29:46:c2:e3:d9:f2:df:76:
                    82:bb:46:72:42:60:cd:70:2b:ef:12:1c:c1:55:d0:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7E:2B:DF:B1:EB:A1:24:FA:1B:90:35:3F:B7:96:26:C8:12:32:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d73c39b-1a8a-3582-80d2-55a06abcafd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.50.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:30:c5:5d:01:0f:27:bb:d4:6f:35:b4:d6:8c:0f:b0:4b:73:
         ec:ab:89:2c:ef:d7:63:a2:1a:b0:ae:ee:85:b0:d3:52:4c:36:
         c4:4a:87:3c:45:83:1c:43:88:00:f3:5f:f7:66:95:90:c9:69:
         2a:4f:ff:73:87:d5:9b:a9:1d:3c:94:2e:16:ee:09:8f:0e:b7:
         10:64:ac:4d:8b:41:0b:bc:e0:8b:ea:14:e7:c8:59:b1:ed:aa:
         39:77:82:7f:e5:cf:5e:93:59:c9:dc:1b:0e:e9:7d:2a:2f:6b:
         c1:12:63:81:f5:ab:dd:6b:5d:18:e9:53:fd:d0:04:73:65:f7:
         22:7e:6f:19:80:71:74:c5:da:44:fa:56:25:48:8f:85:7a:27:
         d3:83:96:67:d3:b8:5d:92:03:88:75:3f:55:28:09:f3:a7:86:
         d5:9d:3f:f4:b4:f1:c9:43:4e:c7:f8:00:c1:c8:fd:c7:d3:c0:
         26:32:04:b0:a1:50:47:ee:7a:c5:b3:1b:20:41:47:d3:e7:5f:
         6c:e6:3e:ca:78:22:a1:4a:ce:c1:57:65:1d:7e:18:0f:66:b3:
         f3:55:c1:9d:7b:db:9c:d0:e5:27:2a:a9:97:59:ce:7c:1c:aa:
         68:bc:08:b9:88:de:df:df:46:ff:bf:71:9e:8d:1a:d0:07:c0:
         a8:6e:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:07:10 2024 by rpki-client on console-ams.rpki-client.org