Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f9cd50e-9499-3c72-900d-be101e4479c2.roa
File:                     7f9cd50e-9499-3c72-900d-be101e4479c2.roa (raw, json)
Hash identifier:          hJMXG/hKjF9oXlBH4HDRFh6T95Jo15OvSsncsoZHPMA=
Subject key identifier:   FF:6F:28:B6:AD:A7:11:19:5A:AD:18:1D:2F:D6:DC:68:4B:E6:DE:7C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847643B7408C65D1D5DBE7A0DFC
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f9cd50e-9499-3c72-900d-be101e4479c2.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        34.1.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:74:08:c6:5d:1d:5d:be:7a:0d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=cb0487cd-2561-4cd6-96ad-0316fd4f0746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:ce:ec:fb:8e:f0:54:0e:ed:d9:80:11:14:
                    9a:85:39:ad:64:dc:fe:06:f3:c5:e5:6d:31:5e:c5:
                    0c:0a:9b:a1:af:2d:c1:cd:fd:6c:f9:0f:ee:ec:18:
                    0d:aa:83:3f:e2:90:f9:86:c6:38:02:05:03:87:fa:
                    ef:a5:88:4b:87:1e:13:13:72:36:ed:4a:e9:09:b6:
                    11:eb:77:3d:5e:62:b6:09:d3:fb:6a:a9:ec:7b:ad:
                    ff:9f:7c:11:40:b8:26:6f:4b:12:95:5e:08:c9:6c:
                    72:4a:c9:96:f4:a8:5e:3f:06:fe:98:89:da:55:d0:
                    a6:c7:b3:8f:89:3f:40:0a:54:c6:41:e2:d6:7d:fe:
                    a1:c9:b9:28:95:6c:45:9d:1f:2b:bb:a3:72:6c:c3:
                    a0:c5:9d:5a:25:5a:05:da:b3:a2:fc:08:00:3b:30:
                    45:35:d4:27:43:57:42:c2:c8:8d:05:ed:16:0e:19:
                    7c:d9:93:33:e8:3b:a2:23:95:9a:81:ed:6d:6f:74:
                    47:c0:2c:80:8f:6a:0e:b7:81:a9:d3:7b:07:7e:9b:
                    db:15:ea:d7:52:24:8f:a0:ce:48:e9:15:68:c5:72:
                    f8:68:8f:2c:a4:e7:ce:8f:79:af:7d:9f:46:59:5e:
                    c1:4a:5d:8a:5c:18:15:ff:a6:ab:ab:cb:e1:c1:27:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6F:28:B6:AD:A7:11:19:5A:AD:18:1D:2F:D6:DC:68:4B:E6:DE:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f9cd50e-9499-3c72-900d-be101e4479c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:30:e0:74:0d:11:ce:23:1c:e9:1a:6c:b0:c1:85:76:59:
         45:bb:13:bb:2f:35:c1:23:00:f3:10:ca:ac:14:5a:06:73:37:
         5a:aa:30:63:7d:e9:75:cc:ea:f7:a9:e9:61:a0:c7:01:db:4d:
         87:6c:73:74:6c:b3:ed:54:ca:a2:6a:28:f3:e6:6c:a4:68:ef:
         15:d1:92:55:bf:67:b1:70:cd:35:7a:f8:8f:55:a2:ea:ee:f6:
         f5:f3:db:1b:cb:b7:87:6b:41:a4:a3:bb:a7:c5:7f:6c:98:03:
         ab:6c:80:16:37:51:7d:40:ca:00:ac:f0:fd:c7:07:97:1a:3a:
         01:2a:4f:f9:99:aa:ca:39:7e:c1:7c:be:ae:5b:ff:b6:d1:b1:
         dc:fd:3d:84:07:98:82:48:d3:60:de:6f:40:9e:e4:f1:46:ec:
         9e:64:f7:19:e2:fd:17:92:6b:81:8d:e2:d2:45:22:0a:02:d9:
         38:91:ce:d1:26:73:b3:a1:42:e9:69:c5:e4:70:82:e1:bf:08:
         1a:3d:9e:09:dd:34:05:c8:f3:92:9a:0e:82:ec:29:8c:03:1c:
         9a:75:3e:16:81:10:e7:73:a0:81:77:6e:d4:96:d6:20:0b:c8:
         6b:df:b9:34:55:f0:79:8e:2f:b4:04:31:fb:0e:8d:8f:d8:62:
         2a:3b:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:32 2024 by rpki-client on console-fra.rpki-client.org