Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d26c2b8-5978-3449-8227-ad78e0bf3fc5.roa
File:                     7d26c2b8-5978-3449-8227-ad78e0bf3fc5.roa (raw, json)
Hash identifier:          f9O/RexOvs3J8wyOItLBQirdNLR+Ruggno92PNhwHzk=
Subject key identifier:   3D:D7:DE:72:19:8C:55:73:96:B3:51:B9:7C:26:1B:35:DF:3E:FA:DC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E7089E194634D753E1F0BA2
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d26c2b8-5978-3449-8227-ad78e0bf3fc5.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        34.88.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:89:e1:94:63:4d:75:3e:1f:0b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=eaa047ed-eb16-4b40-9f5a-79ca7b39cc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:1c:4c:0e:45:ad:d1:53:30:80:59:d2:f0:
                    b1:f2:9f:30:73:c7:57:ad:fe:f3:18:de:92:dc:b4:
                    23:30:9e:fc:e1:fa:86:13:07:cd:88:0d:ca:44:75:
                    53:bc:a6:40:aa:15:6d:9d:9f:04:13:57:e4:d1:6b:
                    9f:b5:54:ac:7e:69:6a:4f:2f:ee:c0:1e:5a:ab:d9:
                    a6:64:85:29:a6:dc:63:18:ae:67:fa:63:c0:9b:c4:
                    6d:f2:df:60:bb:b4:14:ef:46:e6:45:9d:2a:92:bf:
                    e3:17:c5:13:38:53:5e:74:36:2c:8d:c3:9e:8a:e3:
                    0c:18:e7:c7:ca:37:00:24:36:46:fa:87:b7:57:03:
                    86:df:fe:e4:cb:be:b8:db:aa:00:f0:f0:90:1b:29:
                    7a:b7:b1:48:a8:e7:e9:2d:d0:f5:d4:65:52:10:26:
                    fc:05:eb:e3:6b:e1:5a:aa:25:be:1f:6e:20:4c:8c:
                    95:81:82:3d:62:7d:07:34:c7:cb:0e:b9:9a:60:99:
                    52:ad:cd:4a:2b:f3:f6:d9:f1:cb:21:a7:0c:da:78:
                    7d:31:ac:5f:d0:17:3c:17:8e:3c:14:1d:9c:24:e2:
                    86:60:95:c5:f3:a5:3b:18:82:5e:fa:d0:c4:4d:06:
                    b3:f2:56:50:8e:be:0f:ed:2c:ff:7d:d5:79:fe:de:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D7:DE:72:19:8C:55:73:96:B3:51:B9:7C:26:1B:35:DF:3E:FA:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d26c2b8-5978-3449-8227-ad78e0bf3fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1f:a0:ec:38:d9:6f:c3:c7:f4:a0:53:95:9f:6a:27:7a:d9:
         cb:9b:8e:5a:62:39:37:4f:d6:23:e2:19:f4:6b:58:3b:5b:11:
         09:d4:7c:57:3f:d9:5e:8c:9c:5f:75:90:c8:23:9a:20:a5:fc:
         b7:87:5e:75:76:23:ad:13:9f:7c:14:e5:1c:c3:19:55:08:b8:
         d6:e2:2e:61:44:1e:f3:37:b9:ff:27:d3:05:f4:20:8b:1f:8a:
         1d:a4:fb:88:b0:5d:0d:d3:24:08:ad:c3:60:d9:4a:9f:80:68:
         ef:91:b0:36:05:08:8e:7d:22:d2:5d:08:ed:32:18:aa:f1:41:
         8f:07:b9:74:6c:f1:a9:44:54:57:b7:31:fa:09:d4:d0:fe:a3:
         36:c7:b0:c0:c3:e9:53:fc:0d:ce:f9:53:51:61:5d:4b:35:cb:
         bc:87:54:30:08:cb:c6:43:4c:25:c3:72:ff:f1:f5:1c:0b:1c:
         e2:5d:17:c8:76:b8:78:f4:f4:40:5d:7d:70:57:3d:0e:ea:db:
         0c:fb:bc:17:a6:e1:64:d9:63:bf:ad:25:e4:c9:fa:6e:ad:ab:
         05:63:47:97:41:93:e4:37:8d:ea:81:ed:82:22:8e:ce:e5:2e:
         7c:4e:15:4c:81:d2:90:3d:2c:c9:e1:38:a0:54:39:5a:bb:d2:
         b9:82:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:31 2024 by rpki-client on console-fra.rpki-client.org