Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90f26e55-8c08-37a9-b3fc-9f61dd830528.roa
File:                     90f26e55-8c08-37a9-b3fc-9f61dd830528.roa (raw, json)
Hash identifier:          Hypiu2Gn8Kw2HFxv8wU4hStpZx/7evXvEijXujDLRsI=
Subject key identifier:   4D:46:9B:95:12:04:31:85:99:C4:B7:B9:95:65:02:B2:24:90:EF:5A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F524B309A6D1ACB7BA7F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90f26e55-8c08-37a9-b3fc-9f61dd830528.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     19527
IP address blocks:        34.3.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:24:b3:09:a6:d1:ac:b7:ba:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=95dd8a76-bc99-44ab-8ebb-5efb80311459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2f:bf:05:6f:90:d5:2d:f7:36:22:65:f4:ea:
                    86:c8:16:f6:85:d4:e1:d2:aa:16:b6:b1:ea:45:84:
                    31:02:8f:12:94:b0:66:8b:32:d9:8b:50:c8:69:7c:
                    2d:d7:a8:7e:3b:23:32:01:39:96:f7:0a:a4:ab:33:
                    c4:b2:d2:c8:c4:af:77:ca:d3:e4:49:8e:9a:5c:a8:
                    7d:e6:42:ad:bc:b6:36:01:88:e3:b5:be:8f:43:52:
                    43:c4:34:c3:2a:72:4d:a4:f0:b0:09:86:da:a8:d1:
                    26:81:7d:15:c1:c7:55:14:74:ad:0d:2f:05:92:92:
                    cf:05:1f:b2:7d:c1:c9:4f:8d:22:30:4e:19:3a:d2:
                    93:f4:94:c0:ca:a8:a3:0b:5c:7c:77:0d:a5:52:8e:
                    27:80:15:44:10:14:53:d6:bc:b7:a8:22:a3:34:6b:
                    3b:48:8c:3f:8b:63:1b:a3:2c:91:b0:6b:5a:19:80:
                    b9:a5:0b:e9:b5:ea:a9:22:aa:4a:ef:38:51:db:b7:
                    62:9e:07:29:c2:43:8e:d4:a5:fe:88:fe:09:4f:da:
                    19:e0:8e:b1:53:33:39:ac:4d:6e:21:4f:c9:26:69:
                    51:68:ff:27:39:cb:a5:88:df:b5:f7:36:b9:0c:e1:
                    22:ca:23:a0:c5:8e:bb:42:a8:c4:f1:19:5e:76:5f:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:46:9B:95:12:04:31:85:99:C4:B7:B9:95:65:02:B2:24:90:EF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90f26e55-8c08-37a9-b3fc-9f61dd830528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:70:96:89:9b:ac:51:51:5c:6c:7a:da:3b:4c:14:a7:c1:79:
         a1:c6:87:f8:3d:fe:85:02:75:a6:2a:0c:ef:65:db:71:b6:a0:
         20:67:28:c5:34:10:ac:0b:64:11:87:dd:95:e4:d0:5b:ae:f7:
         d7:9a:d8:41:c0:f8:b3:87:12:cb:b7:85:69:0f:21:85:ce:70:
         5a:31:f4:95:0f:32:85:8a:1c:d4:0a:53:6c:f0:8b:a5:d0:2b:
         9b:04:a6:8f:ff:03:23:22:7b:c5:46:bb:19:30:50:fb:01:b7:
         00:22:a5:43:1c:9e:32:73:35:59:51:d2:b6:96:80:37:0f:2c:
         51:d3:fe:1e:8f:9d:b6:93:62:80:23:97:77:93:e8:34:4e:d4:
         25:05:87:31:e3:6e:86:f4:df:c5:96:ac:37:e4:31:09:c7:96:
         7b:2e:6f:cd:9f:39:8e:50:f7:d5:b9:41:ac:18:3c:37:86:ad:
         1b:df:0d:f6:c1:01:ac:d2:22:62:73:53:80:ab:41:61:67:9f:
         99:48:a0:c0:af:13:e2:16:21:a2:f4:c0:86:88:68:eb:68:97:
         e4:36:24:55:0c:4b:b8:d5:1f:fd:eb:80:e6:29:9e:68:58:e6:
         18:5e:b1:92:c3:65:c2:f9:d3:3c:50:9d:48:6c:bf:8b:09:18:
         33:fd:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:05 2024 by rpki-client on console-fra.rpki-client.org