Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa
File:                     975f556a-44d8-3bc2-8767-535d89bbaf8d.roa (raw, json)
Hash identifier:          h5UsEHpxu2f+o6JPeeRifrqLc/t+dHQ87DxtDdz61HA=
Subject key identifier:   8C:19:5F:35:9E:8F:4A:D9:27:F2:AA:42:04:95:C5:4C:DB:CF:53:17
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584508D294C80B99D68DAC502300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa
Signing time:             Tue 27 Feb 2024 21:36:50 +0000
ROA not before:           Tue 27 Feb 2024 21:36:50 +0000
ROA not after:            Mon 27 May 2024 20:36:50 +0000
asID:                     19527
IP address blocks:        34.1.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:08:d2:94:c8:0b:99:d6:8d:ac:50:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 27 21:36:50 2024 GMT
            Not After : May 27 20:36:50 2024 GMT
        Subject: CN=c8955443-10c7-4226-9e83-c4f14a9fd2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:2f:5f:39:9d:99:8a:11:01:b5:ff:70:44:
                    50:6a:6e:e4:8e:c0:04:8f:da:76:07:d8:b4:ba:6b:
                    28:c1:b8:bf:37:f2:b5:b2:71:82:60:46:2e:70:51:
                    09:7d:7e:61:24:a3:df:7a:4f:1b:9c:69:30:21:7c:
                    74:a4:f7:d1:b4:dd:d2:b0:28:0d:47:9f:9f:47:e7:
                    c5:27:de:b0:7a:2f:5f:51:3d:9d:9c:f4:b7:b0:8e:
                    28:d0:9f:03:40:ad:85:03:f0:a2:9b:d3:5f:85:b9:
                    8f:b2:a8:e6:be:d0:c7:98:fb:a7:15:80:e9:1c:a7:
                    d3:20:a3:6d:eb:1a:24:8e:b8:d1:b2:25:b3:c3:f5:
                    36:2e:70:97:b0:1e:08:e8:51:2b:c9:39:9b:6e:81:
                    a9:d2:7d:8a:d8:4d:09:ba:4d:28:d3:9c:88:ff:40:
                    80:3d:69:3b:67:c2:dc:e2:27:a0:b5:11:d3:9a:85:
                    61:80:54:a7:26:1c:de:70:5b:b0:c2:22:69:b4:17:
                    00:06:60:ef:11:94:75:ca:17:31:b9:9b:46:1e:b3:
                    2a:f9:92:52:c0:72:6c:55:88:f5:1d:ef:29:85:77:
                    42:00:97:70:0e:f5:26:d5:a6:da:c5:ff:95:92:9c:
                    c3:be:6e:34:60:f1:51:61:17:b5:b7:8f:12:aa:53:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:19:5F:35:9E:8F:4A:D9:27:F2:AA:42:04:95:C5:4C:DB:CF:53:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:49:bf:96:67:73:9e:70:c1:7a:49:e6:64:30:34:bb:44:c6:
         e1:04:95:bd:26:79:6f:2a:d3:3f:3c:e8:ae:b9:7f:c9:bf:a4:
         1a:1a:4a:59:54:e2:24:41:fb:ab:4b:74:f5:d5:d8:bc:96:85:
         ed:34:89:de:88:9c:d1:9d:e6:73:6d:68:6b:75:7a:cb:78:50:
         6b:13:95:5e:c1:3b:19:82:bb:48:f4:d4:82:30:3f:93:73:0b:
         30:34:56:7a:52:62:32:89:22:6f:e9:8a:15:8f:54:a8:59:6e:
         93:5c:51:45:bc:b6:35:d2:00:70:5d:63:98:67:61:05:59:e1:
         81:c4:00:2b:6c:d0:0a:e1:2e:23:64:32:d5:92:e1:c2:ca:27:
         28:ab:2b:8f:5f:4d:d4:73:67:b8:9c:a5:fa:41:dd:2c:5d:a9:
         81:ac:6d:65:f9:fc:46:1d:2d:1f:e8:f3:61:99:30:5f:6f:61:
         58:6f:5f:3c:7a:39:cd:62:19:41:73:5c:3a:c5:00:84:a8:f5:
         67:bd:89:7c:4d:c5:72:a8:97:4c:ac:9b:86:2a:a5:c2:3c:90:
         8d:72:1f:3c:48:93:6f:fc:9f:1c:1a:3a:e1:e4:96:1a:35:02:
         96:d3:9b:37:6d:37:e3:77:c9:12:46:19:73:e0:b2:b6:1e:50:
         fc:57:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:45:10 2024 by rpki-client on console-ams.rpki-client.org