Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6901ad2e-eb32-3587-95ce-97a1802062fe.roa
File:                     6901ad2e-eb32-3587-95ce-97a1802062fe.roa (raw, json)
Hash identifier:          hUburscsoJWMhMa1KZPCwesBZ0yIZ0OCRakAo+l05pQ=
Subject key identifier:   2C:DF:82:4C:02:46:05:97:B0:DA:15:F5:FD:E0:C9:A0:D5:60:DA:24
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62AAC9CC8C68124FC1F6F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6901ad2e-eb32-3587-95ce-97a1802062fe.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        34.119.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ac:9c:c8:c6:81:24:fc:1f:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=84838180-c5bd-4e65-8bc7-8631c5da6730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:b2:bb:81:f9:c0:6e:4c:c4:8b:a9:c3:88:
                    9d:ed:7d:3d:eb:e4:af:39:5b:2f:2d:ba:5d:36:31:
                    68:34:81:ce:e5:dc:30:a7:71:b1:ad:b8:cb:5c:23:
                    b8:a6:65:cc:4c:b2:60:9a:7b:17:42:60:00:fe:04:
                    af:34:29:9b:77:7e:f1:da:cf:27:1d:4a:30:3a:fa:
                    83:c2:77:eb:36:c2:54:e9:27:21:87:79:5c:c3:b4:
                    49:5d:21:1d:9f:fc:07:54:51:ee:38:69:53:c4:22:
                    53:4a:67:0a:9f:87:cb:90:b8:23:af:d3:5f:db:a0:
                    87:74:40:66:af:3a:9c:c5:ba:2a:41:bd:32:26:ea:
                    66:6b:d7:6c:e8:8d:fe:a3:8f:10:22:77:c1:44:ce:
                    fd:6e:d5:c4:8f:68:b1:67:6a:f7:1b:ee:7e:f4:ee:
                    d5:47:e6:45:5e:3b:b8:3d:f8:48:fe:08:f1:69:3c:
                    dc:8b:3d:a3:a7:f4:85:a5:bf:58:27:36:c3:5a:4c:
                    dc:2e:eb:1b:e6:65:c7:91:f3:3d:3b:72:56:d1:16:
                    1c:e5:d9:87:42:78:05:16:3b:2b:a1:c4:e0:d7:07:
                    b0:79:fc:41:0e:a7:cd:53:a5:71:30:ed:cb:0c:dc:
                    85:06:cd:5e:68:29:99:6f:87:97:b3:f8:1e:1c:ca:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DF:82:4C:02:46:05:97:B0:DA:15:F5:FD:E0:C9:A0:D5:60:DA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6901ad2e-eb32-3587-95ce-97a1802062fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.119.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:c1:0f:80:e7:6f:62:aa:0f:e2:5d:cc:d7:ea:ad:ae:8a:
         67:64:2b:2b:f8:74:39:99:0e:56:8c:6b:19:e2:67:86:41:d4:
         05:b8:86:0e:78:4a:7f:0d:ea:ac:db:83:c2:e6:08:95:6b:df:
         f2:c2:d7:bd:49:d6:47:a2:f9:80:7e:7f:02:22:b4:21:b6:24:
         4c:98:8a:37:88:e3:ec:12:0e:d1:d5:23:1c:df:6c:ac:bc:ea:
         03:8d:73:8c:6d:61:61:65:db:91:ba:b4:f7:4b:64:a8:64:e0:
         db:10:76:e0:a5:6d:bb:cb:af:c7:e4:fc:40:b5:75:b5:8a:c1:
         58:b3:c2:b3:b4:a2:3b:b8:f4:ba:41:63:89:3b:54:6d:d5:8a:
         75:51:19:fd:4a:a3:50:6f:04:51:9d:45:91:63:e9:10:cf:b9:
         22:ba:51:62:bc:04:d4:63:75:6b:62:66:35:78:8b:36:94:f2:
         1e:e1:08:82:36:cc:f4:53:53:20:0f:e7:5f:0f:39:05:ec:bb:
         90:64:f5:d4:bc:75:08:37:e7:ef:82:8b:d4:8b:f8:07:aa:b2:
         cd:bb:60:50:da:fb:44:bd:38:d0:b4:ab:e6:2f:cd:52:7f:ae:
         83:34:fb:b0:fe:ea:0c:a9:8d:c7:ea:62:ab:28:3f:04:54:80:
         7d:a4:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:00 2024 by rpki-client on console-ams.rpki-client.org