Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
File:                     aa7a7287-b1dc-3e23-925f-c1a9de542259.roa (raw, json)
Hash identifier:          eKrawGAdYg4eGuFrdVIikY052c9QrSL+JmWW1raWV2Q=
Subject key identifier:   57:F6:51:76:98:FB:6D:7B:BA:6D:38:99:52:7C:4A:FC:BA:C9:9F:37
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462D70FC719A65A7CAA8D380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
Signing time:             Wed 20 Mar 2024 21:04:13 +0000
ROA not before:           Wed 20 Mar 2024 21:04:13 +0000
ROA not after:            Tue 18 Jun 2024 21:04:13 +0000
asID:                     11344
IP address blocks:        34.104.39.208/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:70:fc:71:9a:65:a7:ca:a8:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:04:13 2024 GMT
            Not After : Jun 18 21:04:13 2024 GMT
        Subject: CN=6bd21d78-6ce7-4796-8a43-9ff84228d22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ba:9a:7e:74:5f:5a:d3:d4:db:dc:15:4b:31:
                    a3:92:5b:de:99:b1:34:df:7d:fe:35:64:6b:4a:86:
                    ad:9d:3b:fc:3f:e5:f0:2c:bb:f8:70:7f:61:33:35:
                    5b:b0:07:fa:03:cf:f0:41:e0:d4:e2:6e:51:20:c2:
                    83:1e:4d:9d:15:4f:41:bf:48:69:d2:8a:f0:b1:a6:
                    5a:8e:b8:2a:9e:34:aa:3f:6d:ae:cf:eb:87:61:e8:
                    80:ed:ae:34:52:38:a4:16:24:56:d6:45:84:71:4e:
                    95:dd:09:38:9a:dc:45:1b:23:d6:06:20:9a:57:21:
                    db:5f:3a:45:32:99:72:1d:d4:4e:03:d2:ee:3a:d5:
                    a3:9a:00:36:81:7e:90:52:4e:1b:95:2d:45:c4:00:
                    04:0a:c2:8d:ec:ef:40:5a:dd:80:65:f8:27:35:32:
                    59:d1:8a:35:df:39:b6:03:bf:2c:99:42:c6:bf:2c:
                    0a:7d:11:c4:10:c2:1d:5e:88:f7:13:33:95:2b:44:
                    b9:30:97:37:dc:fb:ad:6f:96:23:c4:8d:00:de:9d:
                    15:2f:90:00:85:9c:c0:4d:a9:2d:16:3c:d5:e0:cb:
                    20:60:a6:c1:04:77:06:72:cd:fe:99:fc:d8:44:e9:
                    8b:28:c5:a0:a6:44:a5:f8:1a:bf:ef:ea:dc:a8:be:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F6:51:76:98:FB:6D:7B:BA:6D:38:99:52:7C:4A:FC:BA:C9:9F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.39.208/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:4a:4c:a6:33:01:f8:76:5f:af:cd:0a:c9:ec:d8:d5:c5:
         15:e5:c7:e6:bb:43:02:20:2a:ce:31:2f:16:cc:4c:e0:e6:63:
         1b:15:22:40:b3:f5:66:40:d8:77:0d:ba:73:94:64:b0:55:d4:
         93:b6:9c:8e:cd:00:8c:53:e2:00:14:04:54:f0:19:1b:40:9f:
         7d:03:7d:df:08:66:d8:15:b7:23:20:07:09:de:97:45:02:b5:
         62:a0:60:fa:60:c0:22:df:b2:85:27:7d:9c:8c:d8:9b:3a:6f:
         8e:60:0d:d0:16:e3:0f:b1:89:7d:e8:19:ba:c7:df:30:6c:df:
         25:99:9f:d9:c1:d4:4c:9e:9e:bc:58:04:4b:36:3c:19:d6:54:
         e9:06:a3:cd:86:81:6a:a8:47:be:95:7d:81:33:72:71:db:f8:
         32:38:c1:0d:61:3e:25:dc:e2:37:b8:24:38:d7:72:5c:ac:11:
         78:a9:29:dc:08:97:91:b3:5a:8d:e0:57:f0:4d:d0:54:22:3b:
         4d:0f:01:c6:e2:f3:a4:18:b6:6f:3a:c7:c2:9f:ec:d1:f9:67:
         ea:0d:12:92:a1:b6:13:18:be:e3:ae:72:a1:2e:aa:e1:88:89:
         80:73:5a:14:c8:73:4c:58:9c:09:5b:ff:3d:e0:6c:35:9c:14:
         56:93:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:01 2024 by rpki-client on console-ams.rpki-client.org