Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d755419-b1c7-38fd-8c5a-b68bfc2a81ac.roa
File:                     8d755419-b1c7-38fd-8c5a-b68bfc2a81ac.roa (raw, json)
Hash identifier:          LkKOFtk8AAoNrTjYBNa6Y4XE5M+V9sqEQiCttoonWz4=
Subject key identifier:   7E:9D:06:94:DA:0A:C8:1A:A5:35:D9:47:34:86:71:C4:EA:50:A1:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4FB681059953F49EF1B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d755419-b1c7-38fd-8c5a-b68bfc2a81ac.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.76.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:fb:68:10:59:95:3f:49:ef:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=9bca5918-491e-4566-8508-d6b1ebc6c2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:89:97:a9:30:d0:7f:25:29:67:6e:ba:01:
                    0a:97:c5:3c:6d:27:60:7a:59:c7:49:58:a5:7d:b1:
                    68:0b:49:a6:77:71:c7:36:82:1d:59:56:49:35:31:
                    69:0b:51:98:ce:df:a6:ea:82:3a:eb:e3:13:fa:fb:
                    46:90:4e:a9:f0:f1:cf:4c:f0:9f:6b:4f:d7:32:01:
                    54:2f:71:01:8f:a3:1c:1a:5d:fc:2a:2d:af:ab:54:
                    46:7f:43:45:f6:c9:66:60:60:ad:b6:31:f5:3b:f0:
                    1b:7c:ab:80:c9:a7:c3:ca:03:ba:3b:5c:7b:ce:e6:
                    ce:f3:b9:56:fe:d9:42:02:c1:7a:a2:f1:9e:a9:ba:
                    65:13:45:ea:7f:91:75:e5:d1:c4:9c:28:51:30:36:
                    a7:48:6a:0b:43:2e:20:d4:ec:bf:92:c6:34:d4:0e:
                    d7:70:0d:98:d8:b4:70:69:6e:b3:d3:ad:7c:7b:54:
                    74:53:e5:e4:de:99:3b:fc:c1:dc:38:35:6e:7e:9f:
                    c0:2f:c0:09:65:2a:ca:cd:5a:77:a6:2d:8e:99:c7:
                    ec:ea:50:ba:0b:81:bf:86:07:1b:e1:cf:b2:5a:1b:
                    e4:0f:14:af:0a:92:22:74:f1:d1:ec:f0:08:f2:f4:
                    21:8b:7c:d1:15:e5:8f:20:ed:e0:3c:1b:30:e9:35:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9D:06:94:DA:0A:C8:1A:A5:35:D9:47:34:86:71:C4:EA:50:A1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d755419-b1c7-38fd-8c5a-b68bfc2a81ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.76.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:64:90:9a:d7:fd:25:f0:95:ed:66:46:36:c8:fa:65:8a:b9:
         d8:bc:52:21:78:93:d6:80:d0:69:2f:be:3c:05:73:12:9e:cc:
         50:32:6e:a2:63:0e:e9:15:1b:c8:df:5c:1d:a7:62:c6:c9:81:
         52:7c:f0:c3:45:e7:05:b8:c4:5a:29:72:9b:84:9e:bf:83:4c:
         ff:97:fa:0c:8c:9f:9c:c2:a2:cf:3f:60:22:e7:43:ef:ea:61:
         27:46:a5:cc:ee:ef:77:f0:f4:57:39:5f:b7:76:51:1c:af:dd:
         29:8a:e0:9e:4b:20:04:42:4b:3c:94:21:e0:34:eb:3f:9b:38:
         e8:17:f4:72:b4:f1:52:c0:23:69:5a:39:17:ce:5b:1f:1c:7d:
         a3:8e:43:bf:9d:9e:54:3f:a2:6a:0b:5b:00:64:63:09:ce:97:
         12:f1:77:35:97:f5:f2:64:7c:9e:b2:bc:3c:f4:61:53:82:7b:
         7d:06:74:f3:c9:11:cb:f0:88:58:e7:d6:08:4f:1e:f2:36:4e:
         f2:35:f7:30:2d:34:95:6e:52:b4:e2:9f:d9:86:c2:07:f6:85:
         21:66:19:03:95:85:c9:dd:16:3f:b3:5c:c0:e8:48:a1:8d:f3:
         7e:e4:35:dd:c4:ea:2f:90:c9:51:80:66:50:79:95:ee:eb:09:
         0d:25:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:17 2024 by rpki-client on console-ams.rpki-client.org