Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ccdc921-a6c3-3a08-aef1-3cab10757a21.roa
File:                     6ccdc921-a6c3-3a08-aef1-3cab10757a21.roa (raw, json)
Hash identifier:          LFAFxuLl8an4j1XsBkD3iw8AktM8Qx0yXGynUWsNTXc=
Subject key identifier:   54:B4:2D:BB:50:23:A9:DD:6C:D5:7F:1A:C3:42:D1:5C:7F:39:FC:FF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62AA36EC5D7BBA76869CA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ccdc921-a6c3-3a08-aef1-3cab10757a21.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        34.107.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:a3:6e:c5:d7:bb:a7:68:69:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=dcb5dc8d-7aec-459c-9584-c792aec70948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:05:92:bb:80:33:df:ba:25:ae:ce:74:d5:b6:
                    74:dc:d2:99:40:63:e6:40:a5:e1:94:1e:b9:83:ec:
                    bc:82:26:d3:a1:a4:70:b8:88:30:9a:aa:88:e1:51:
                    1f:da:01:f2:f5:cb:86:df:78:81:eb:88:93:1a:1a:
                    ca:7e:cd:f0:23:77:34:a6:1a:c5:56:7a:79:3e:9c:
                    c6:01:37:f9:b1:8b:0e:c5:fd:36:1d:fc:ef:2d:19:
                    0f:72:ec:0a:47:9e:da:ad:a6:b6:ed:ff:af:1b:dc:
                    40:ad:79:6a:e8:d0:b5:ca:d9:7d:ca:87:02:9a:5d:
                    b5:6f:af:2e:6c:96:b3:cb:08:6a:36:5c:ce:f8:1f:
                    47:28:d2:4a:99:8d:d2:0d:bb:7f:9b:de:26:38:38:
                    0c:b1:3a:e4:df:69:55:42:6f:f1:44:50:87:db:3e:
                    d4:ca:f1:1d:a6:91:a7:35:db:c1:bc:12:1a:4c:74:
                    93:8d:cb:30:da:20:e1:05:6a:4d:1a:fe:8d:36:fe:
                    b7:46:24:e5:d7:0e:49:77:fc:3e:ad:f4:3e:e3:89:
                    da:ed:04:c3:37:d2:0d:8e:ba:35:64:55:3c:fd:bc:
                    c4:86:46:a9:a4:d2:cb:d2:02:a5:65:4e:8a:07:f5:
                    67:f1:e8:12:74:78:14:51:4c:cc:5e:d7:fd:8a:9b:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B4:2D:BB:50:23:A9:DD:6C:D5:7F:1A:C3:42:D1:5C:7F:39:FC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ccdc921-a6c3-3a08-aef1-3cab10757a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.107.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:33:30:94:4e:e4:7e:f8:96:51:e8:0b:f0:d9:9d:7a:1b:e8:
         79:60:f7:f7:b9:f8:4c:e1:01:78:84:4c:89:b0:c7:ad:7a:2a:
         72:44:f3:c0:ee:16:ec:0a:78:e0:1b:6e:14:52:a2:9e:00:0d:
         8a:bd:04:94:3e:15:52:b3:d1:1d:85:d6:0a:b7:c1:b4:82:78:
         09:46:c6:17:4d:28:dc:eb:c8:88:2d:0c:5d:0e:17:cf:12:15:
         4c:c9:12:f6:37:da:1a:39:ad:11:b5:ab:9e:13:bc:59:47:19:
         9d:39:05:25:53:00:7e:52:5c:b4:66:ae:ac:c5:89:c9:b9:2d:
         22:8e:41:80:e0:4b:09:3f:27:f1:f2:fb:b8:05:98:0f:21:5c:
         a8:e1:91:1f:5f:93:bc:7c:20:3a:15:ca:80:58:c8:8b:27:6b:
         1e:72:43:8a:1a:34:8c:3e:77:56:b8:4b:f3:4b:43:dc:3c:bc:
         25:f9:63:ad:4a:3f:2a:8b:03:58:32:08:8a:49:32:c0:15:4e:
         31:70:fd:2e:5f:cc:60:c3:84:47:d3:fd:00:a3:17:e7:ba:65:
         1d:14:24:59:22:83:58:e4:6c:1a:74:74:c3:4b:8d:a3:a5:25:
         52:d1:b3:b8:e6:ea:fb:ae:3d:f3:d1:bc:93:3d:e0:af:10:74:
         12:43:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:07:13 2024 by rpki-client on console-ams.rpki-client.org