Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa
File:                     633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa (raw, json)
Hash identifier:          jbo54pU2wFc0xncxeOlb4rqvV6Ea6ri5wE/V8HwJY7U=
Subject key identifier:   87:4D:23:86:5A:3D:6C:BC:2A:B3:1E:78:82:38:68:AC:0C:91:9F:2B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62B36A02FABF931AFE13782
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        34.119.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:36:a0:2f:ab:f9:31:af:e1:37:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=cce33d3d-fea7-486d-9cdd-5996c5946cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:92:cd:9d:d4:db:76:a2:6e:83:32:03:6d:
                    a3:50:9a:a1:e1:f4:9f:67:a9:8d:3a:62:13:84:b1:
                    1e:70:44:8a:65:c5:85:3d:c1:c1:a5:e2:14:af:95:
                    18:7e:27:f7:50:56:b9:c8:a2:9d:23:52:e9:b6:0a:
                    19:be:48:3b:89:ca:d0:d7:31:23:3d:6b:71:b3:49:
                    97:87:35:47:c0:97:4e:42:7e:fb:97:42:7e:eb:f2:
                    0b:b0:9b:22:df:ed:81:0d:9e:bf:f0:53:83:c2:2a:
                    4a:26:14:72:e2:d9:fe:92:a8:e8:41:6c:50:9d:b5:
                    5d:62:99:e9:d7:fc:50:05:97:e0:49:49:7d:35:2b:
                    f6:75:ba:46:a3:bd:7b:95:0f:bd:a3:cf:04:98:0b:
                    85:b0:68:29:f8:e7:95:29:b2:3d:48:25:44:76:89:
                    3d:af:1f:e4:4b:12:f0:ed:08:1a:fe:d1:e6:be:50:
                    e8:75:0e:9a:99:2d:6c:ce:bc:99:0c:26:07:6c:0e:
                    0c:7a:23:c4:83:27:f3:32:2c:46:3f:87:1e:60:72:
                    e6:ff:f9:ae:f8:68:3d:3d:8d:3b:ac:33:b3:48:ec:
                    38:47:2c:7c:ce:e5:56:24:b4:ed:a0:a1:79:b5:f2:
                    25:f2:16:aa:a9:a0:61:ff:c0:c6:2e:25:e9:42:97:
                    86:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4D:23:86:5A:3D:6C:BC:2A:B3:1E:78:82:38:68:AC:0C:91:9F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.119.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:58:51:03:3d:54:e6:d5:e1:f1:c7:bc:bf:72:2d:8b:0c:
         38:fe:be:71:66:04:0e:b2:2a:b1:f3:d0:8e:8d:31:7a:53:40:
         18:e4:54:85:74:f1:dc:45:17:19:54:18:06:d3:2f:58:84:6d:
         60:37:26:73:ef:83:d1:55:cd:31:69:63:75:89:d9:ac:99:f8:
         ff:b3:d3:a2:ea:ed:4d:15:b7:8c:1e:98:54:c5:fc:77:17:e1:
         2d:87:93:09:10:ca:68:7d:49:d5:16:7f:0d:0c:ed:91:97:e6:
         b5:14:0f:93:9a:54:4a:2c:78:94:53:f4:99:3e:18:48:2b:06:
         4e:b2:a9:3b:ab:77:93:90:82:34:c1:e3:42:6d:99:03:39:25:
         27:54:cb:2a:94:24:33:96:5e:78:31:52:5e:69:15:89:d1:df:
         a4:1c:ef:d7:46:71:a5:7f:0c:8c:c4:1a:85:1e:3d:36:6a:b0:
         0c:cd:3d:1d:aa:e0:41:5c:26:85:36:93:e9:2d:1e:dc:6a:c4:
         97:88:73:85:f8:cd:44:e5:4e:61:02:bf:5c:bf:25:a4:8e:c6:
         b8:d4:c0:1e:db:78:ca:27:4e:20:07:d9:a0:60:80:ed:52:a6:
         04:17:fc:ad:43:b6:5e:8d:c5:2e:62:09:0f:58:ea:ed:e0:e5:
         55:42:1b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:58 2024 by rpki-client on console-ams.rpki-client.org