Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78a16851-d999-3754-937b-aaa25bf9f0c2.roa
File:                     78a16851-d999-3754-937b-aaa25bf9f0c2.roa (raw, json)
Hash identifier:          PiEkxgB8enaWnns/iCZStERpEpQb2GSwKqCyaGirv6I=
Subject key identifier:   FF:90:11:30:A2:33:D0:33:DB:3D:C5:48:C9:F8:A1:7F:85:F8:55:4B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490775B794199EBFCB38F280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78a16851-d999-3754-937b-aaa25bf9f0c2.roa
Signing time:             Thu 21 Mar 2024 21:35:07 +0000
ROA not before:           Thu 21 Mar 2024 21:35:07 +0000
ROA not after:            Wed 19 Jun 2024 21:35:07 +0000
asID:                     15169
IP address blocks:        34.156.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:07:75:b7:94:19:9e:bf:cb:38:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:35:07 2024 GMT
            Not After : Jun 19 21:35:07 2024 GMT
        Subject: CN=444758f7-a3c5-4dfe-a1b9-318752d72518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:56:d1:a7:fe:c6:f8:11:56:2e:3c:ac:9b:df:
                    e9:43:98:1d:80:dc:1b:21:1a:7c:58:75:6e:bd:f8:
                    ae:3f:02:17:27:54:5d:80:ba:39:2f:74:35:32:d3:
                    8d:fa:95:25:4c:c3:ed:f7:7b:93:53:dd:27:eb:a0:
                    2a:0b:dc:22:86:2d:62:29:b3:4e:ce:38:2b:0b:2e:
                    ee:79:86:03:9e:fb:e4:ac:c4:d2:ec:0f:84:53:ad:
                    2f:15:3a:8a:6a:96:ac:f1:82:45:de:06:eb:29:e9:
                    2b:6c:29:77:7d:fc:fe:e0:2a:93:21:d6:61:23:11:
                    2f:0d:7b:6a:1c:c3:ef:23:61:bf:bf:5a:38:39:7a:
                    f7:8e:c4:7e:85:24:c9:67:cf:1b:de:7e:4b:92:bc:
                    92:72:3f:92:5b:03:b5:41:11:f2:09:b7:d7:ad:b1:
                    67:06:a4:51:c7:44:53:37:0a:1b:13:27:5a:8f:7b:
                    70:86:1c:aa:fb:02:81:44:0e:95:ab:a8:97:17:2b:
                    74:09:27:33:47:b3:be:e3:2c:0a:eb:1e:b9:32:05:
                    06:44:65:89:fe:67:f6:bf:54:1c:3d:ab:99:62:2c:
                    00:49:1e:31:6b:bc:4d:f9:cb:c6:8c:02:ce:57:19:
                    ee:dc:3d:22:ec:0c:c3:e0:0f:44:0f:bd:2e:48:7c:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:90:11:30:A2:33:D0:33:DB:3D:C5:48:C9:F8:A1:7F:85:F8:55:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78a16851-d999-3754-937b-aaa25bf9f0c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5e:12:32:eb:d1:a9:3f:ae:14:61:b2:b8:30:e6:f2:0c:4c:
         06:1d:cb:2b:81:17:60:67:6c:1a:20:f3:37:84:f7:0d:f3:69:
         98:5e:d7:78:1e:0e:cf:25:c1:c5:00:04:83:39:12:3b:f8:01:
         64:21:d1:60:de:56:7c:6c:1e:e1:9e:1b:97:36:2d:e7:9e:fe:
         2e:3a:c6:7f:e2:33:0c:39:a0:13:ad:47:a7:f3:3a:28:83:32:
         a5:a8:3c:e4:68:85:1a:ac:a4:a8:3e:a7:13:f1:31:f8:9c:bc:
         b2:8b:99:2c:5c:fb:3a:48:b3:fa:6d:99:ec:0d:07:18:f0:3f:
         94:2c:76:94:d8:e2:dc:a1:f4:00:2d:fd:4c:2a:10:ae:f2:60:
         35:b8:9d:06:7f:eb:e6:23:1e:5f:3c:6d:a5:d5:70:f9:33:a4:
         11:73:ba:74:91:02:40:7c:b9:62:88:7d:3e:c2:cd:9b:0f:25:
         44:36:f9:31:a2:6b:1f:eb:6f:3a:e9:4a:5e:7b:63:21:3c:e2:
         3e:0c:0c:a4:9c:92:c0:0b:da:3f:c7:ed:5d:d6:f4:05:88:c1:
         49:2c:eb:c7:40:48:72:fc:13:45:24:a9:32:d3:aa:f8:6e:8e:
         be:79:9c:c4:9d:ef:3d:61:f0:8c:7c:31:a9:c4:41:32:f1:bf:
         99:43:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:33:13 2024 by rpki-client on console-fra.rpki-client.org