Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7959a395-b6ca-317a-9454-2676139b1c6a.roa
File:                     7959a395-b6ca-317a-9454-2676139b1c6a.roa (raw, json)
Hash identifier:          wrTKjNNZFzKdJEbhORCEBRDkOslfzWbQtXe9SX0QIL4=
Subject key identifier:   67:96:04:C8:17:17:5A:49:BE:10:C4:C8:C8:2B:54:36:87:CA:39:A0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858476B363B1B8247B20466DA8600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7959a395-b6ca-317a-9454-2676139b1c6a.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        34.1.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:3b:1b:82:47:b2:04:66:da:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=fc5ba98f-d93c-4ae7-95ca-14ba568a1c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:12:4a:4c:a4:2d:9c:fa:24:22:fb:d8:c7:
                    5f:3a:f0:f7:87:16:c9:b0:53:9a:f2:fe:1a:13:c9:
                    d4:ae:8f:2d:ef:9b:b8:4c:41:c0:9a:4f:93:75:f0:
                    91:4c:22:89:c6:fa:98:84:73:46:26:fe:85:90:ca:
                    e9:df:aa:78:fd:5b:e9:23:eb:f5:b4:70:38:2b:e4:
                    49:a0:61:a7:8a:c2:f6:94:52:dd:67:ad:d8:29:ba:
                    31:24:5d:90:64:be:b8:63:12:d2:c6:1a:95:4f:21:
                    43:a0:f2:d0:c2:b1:2d:c5:6e:11:28:5b:c5:31:11:
                    55:63:ab:96:fa:9f:41:46:31:00:a9:52:51:5e:24:
                    d8:1d:f8:d5:2e:99:27:1b:37:79:a2:11:3f:35:09:
                    4f:9e:e7:5a:ca:e5:cf:b3:0f:e8:59:15:5a:44:23:
                    a1:0b:45:79:06:a9:64:70:0e:da:71:f9:88:91:93:
                    d4:ec:3c:01:85:93:ab:fa:bd:d3:d4:f3:bd:26:d9:
                    00:23:17:e9:26:59:22:af:4b:46:1c:61:e0:f2:59:
                    9e:fd:1d:41:d7:fb:72:bd:dc:db:cc:64:43:09:a4:
                    fb:dc:5c:22:9f:96:c8:ff:91:1f:79:5f:2f:f1:33:
                    d7:c5:5a:6d:af:6a:52:ff:49:0a:d0:17:32:5c:c7:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:96:04:C8:17:17:5A:49:BE:10:C4:C8:C8:2B:54:36:87:CA:39:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7959a395-b6ca-317a-9454-2676139b1c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:4f:21:3b:1e:cc:8a:09:9a:34:fa:d7:c6:7c:d6:b1:63:
         69:f2:40:87:fb:88:8c:45:21:49:d6:2e:94:b6:e3:c2:35:88:
         a2:d5:85:e8:cf:fd:4f:9b:48:71:d4:65:74:7f:e4:65:12:b7:
         f1:da:26:04:2c:30:c3:08:40:95:07:47:3a:0f:42:cc:a4:8c:
         2f:b1:2b:c9:ea:ca:dc:dd:97:b9:d6:62:73:42:f3:8e:3a:8d:
         b7:6a:a1:3f:d5:cc:88:07:59:91:43:4b:28:9d:58:cc:08:e5:
         58:5d:92:c6:ef:db:88:f3:9b:ad:24:e5:a6:9e:33:d8:d7:1e:
         10:49:8d:85:49:6a:03:52:62:1c:7c:21:52:63:25:d1:65:95:
         cb:4c:ad:97:9e:81:01:7a:71:9c:a3:cb:a9:0c:7a:d2:58:b4:
         16:c6:b8:ea:e4:01:72:d3:d5:1f:2c:1b:bc:ee:83:65:6d:98:
         c5:bc:7c:c3:9e:6f:0c:f5:84:5b:da:d8:16:d7:0c:b3:45:75:
         0d:fb:a6:59:a9:4f:3b:31:5c:3f:92:42:01:6d:cf:f0:26:d4:
         eb:8b:51:7a:23:1d:7d:55:00:d6:ad:56:53:1d:92:bd:22:81:
         d7:9b:c4:5f:c5:2b:e3:be:a2:32:a3:7b:0c:af:4b:1e:f5:8c:
         e0:2b:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:31 2024 by rpki-client on console-fra.rpki-client.org