Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f9cd50e-9499-3c72-900d-be101e4479c2.roa
File:                     7f9cd50e-9499-3c72-900d-be101e4479c2.roa (raw, json)
Hash identifier:          nRlzwhTbW3lLBldoWDiku7IIBhZCCJo0AF2FgR8jV2Y=
Subject key identifier:   B6:6F:98:33:58:86:0B:F3:9B:8A:E2:86:94:5D:10:ED:4F:38:6C:38
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858468462CEFC356BBA3D5ED66780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f9cd50e-9499-3c72-900d-be101e4479c2.roa
Signing time:             Fri 12 Jul 2024 20:38:48 +0000
ROA not before:           Fri 12 Jul 2024 20:38:48 +0000
ROA not after:            Thu 10 Oct 2024 20:38:48 +0000
asID:                     15169
IP address blocks:        34.1.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:84:62:ce:fc:35:6b:ba:3d:5e:d6:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 12 20:38:48 2024 GMT
            Not After : Oct 10 20:38:48 2024 GMT
        Subject: CN=b6dfbea2-ee24-4486-89fc-e9dea9ee7113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:4a:d5:72:d4:66:e4:32:37:ee:73:b3:13:
                    7d:05:7c:cc:87:c4:49:a0:18:ef:fb:b0:5c:5b:94:
                    53:82:7e:f7:64:38:a6:2c:5b:ac:f7:0a:b5:98:4b:
                    f8:44:9a:b0:de:fd:b3:af:4b:6d:1c:7c:43:ab:0b:
                    d5:94:3d:33:96:e4:3d:69:a2:64:c5:08:b1:63:30:
                    eb:d2:b1:ce:ce:20:b3:e4:3b:df:01:b7:70:3d:1b:
                    52:3a:5f:d2:9a:b7:ca:50:6b:27:ee:02:36:cb:b3:
                    1d:3b:08:26:7a:aa:a5:96:82:48:74:98:7b:5c:9f:
                    ff:72:9f:ec:59:0a:9e:59:bc:1b:45:7f:a7:53:90:
                    22:db:1c:8f:22:34:74:b8:15:f9:15:20:ee:cb:9b:
                    32:06:bb:a7:b4:f0:d1:2d:bb:4b:be:90:0e:09:25:
                    8a:ab:c4:46:57:7a:ca:a4:b6:ca:14:37:28:7e:24:
                    5d:53:ea:46:ed:16:15:4c:25:d2:e7:75:53:44:97:
                    ea:64:88:2b:15:90:06:1b:c6:c6:dc:7e:bf:38:a8:
                    8f:a9:ba:84:33:9f:f3:2e:95:8f:1d:48:e0:0f:1d:
                    a8:dc:33:36:76:c2:48:0c:a3:da:d7:4e:8e:2a:91:
                    78:21:80:63:fb:6b:3b:db:fd:e0:6a:69:02:1b:62:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6F:98:33:58:86:0B:F3:9B:8A:E2:86:94:5D:10:ED:4F:38:6C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f9cd50e-9499-3c72-900d-be101e4479c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a7:35:0f:cc:0a:93:49:4d:d9:3d:6f:df:d5:d1:c2:2d:a3:
         9c:d0:7b:0e:1d:70:28:99:90:0d:9b:c4:9b:f2:3c:6c:b0:37:
         10:d6:1c:80:7c:6a:c5:56:dd:20:55:01:f2:3e:15:0f:c6:a2:
         fc:61:be:5b:69:02:31:4f:00:2c:7b:fc:26:97:e6:74:09:8b:
         58:88:26:25:5a:d7:68:38:e2:0a:ae:33:18:ff:fc:15:b3:1d:
         7b:09:13:0c:3b:51:1b:d7:79:61:65:11:5f:6e:64:97:69:7b:
         d1:38:47:ff:61:ef:4b:ce:fa:76:b0:bf:49:8e:a6:49:6a:c0:
         d5:1f:fb:81:f8:f6:6c:58:9a:69:b0:33:ae:3d:7e:fe:60:1e:
         03:77:41:4a:a5:75:c3:2a:64:19:9d:10:dc:8d:e1:e9:a8:ec:
         59:9b:58:87:d9:1f:9f:01:4a:9b:7e:67:63:83:44:9e:d3:bd:
         5a:ba:ed:75:28:1f:d8:66:00:7a:2d:65:80:f0:2f:fd:06:5a:
         8c:60:1d:b3:0a:f9:87:7f:48:3c:ec:7b:6e:8f:19:ed:23:89:
         e1:40:22:f9:85:95:89:46:f6:2b:a2:a1:da:3a:c0:f0:d0:cd:
         16:30:2e:ca:2e:97:97:b2:b1:d6:ca:50:eb:86:44:09:88:bb:
         8b:f7:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:14:41 2024 by rpki-client on console-ams.rpki-client.org