Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b139651f-eec6-3cf0-94f5-e52e3297f054.roa
File:                     b139651f-eec6-3cf0-94f5-e52e3297f054.roa (raw, json)
Hash identifier:          x8wgX1o8a7FlLy57WKEn7O/lmgLR8UECi1WNlLudN7Y=
Subject key identifier:   1A:39:28:9D:05:46:28:6F:C3:84:D9:99:EE:10:28:91:11:0F:25:9A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E7075758F09B087DD9CD3C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b139651f-eec6-3cf0-94f5-e52e3297f054.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        34.68.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:75:75:8f:09:b0:87:dd:9c:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=1f20179c-67e3-4140-87ac-93f468948b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:dc:bd:1f:b4:11:9c:5d:86:19:02:2d:e1:
                    4e:e5:34:f8:e1:f5:9b:3a:60:a1:6b:6b:22:7b:fb:
                    9c:ba:a8:87:fc:b4:b7:a7:87:b4:bf:13:7c:5d:3e:
                    e9:05:84:1a:8e:de:55:04:93:f7:e1:b8:4d:0c:f2:
                    a6:91:48:e6:63:59:ab:86:29:2f:71:4b:75:3a:15:
                    fb:70:31:69:84:92:0b:0e:c6:c4:2b:d1:29:db:7e:
                    32:fa:33:2f:20:a0:9d:3f:4c:a0:fb:20:16:84:d4:
                    33:45:75:9a:1e:fd:5c:8a:f4:51:52:4e:41:ef:45:
                    cb:7a:61:4a:3e:c2:48:b2:4b:26:7c:90:86:66:f6:
                    e6:f6:a1:9f:4c:91:e8:78:72:e8:fb:35:7d:4c:19:
                    a2:6d:98:9c:45:2b:d4:f9:0b:a8:01:7c:f2:08:a8:
                    5f:7d:f8:59:be:be:95:98:fe:6b:f2:6b:e6:d3:0d:
                    ce:43:3b:da:3f:44:75:f9:00:20:2b:d3:c0:72:14:
                    cf:51:50:80:1c:ad:ab:2b:ea:0d:19:04:d7:18:20:
                    a3:f7:11:28:67:c7:de:ce:ff:78:97:94:22:8e:a4:
                    04:7e:0e:2c:39:3a:43:c9:80:7d:7f:3c:c2:c9:42:
                    1e:fb:0e:97:17:64:69:e3:10:86:89:c0:07:d4:67:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:39:28:9D:05:46:28:6F:C3:84:D9:99:EE:10:28:91:11:0F:25:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b139651f-eec6-3cf0-94f5-e52e3297f054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:64:94:22:de:9c:94:24:c9:f7:f1:69:ea:eb:d3:42:b1:ad:
         e8:00:26:ee:9f:dd:d2:06:9a:b7:d7:37:5f:75:e3:0b:9f:a5:
         a2:98:89:4f:96:b6:01:fb:dd:f5:f5:e9:2b:42:79:0c:f7:1c:
         cb:3c:ec:b6:e2:cd:4b:81:e2:7d:2b:18:7d:0d:0f:16:91:bb:
         ea:7a:f9:9f:75:e6:eb:69:ac:a9:45:f2:76:c7:08:9e:2b:b8:
         13:fb:43:3c:00:0d:ee:65:16:13:16:79:66:d5:98:02:d1:60:
         e3:65:06:01:22:e7:2d:00:6d:1e:d5:43:57:81:18:d0:f6:06:
         29:fc:0d:ff:87:d7:46:7a:55:5c:e6:6b:3c:5b:3a:3f:a1:74:
         b4:9f:fc:1e:2a:5f:4c:5b:6e:e3:e4:e2:a1:2c:44:2f:d1:af:
         1c:ce:a6:d1:a5:60:0d:ea:14:eb:19:90:87:02:89:c0:ec:d9:
         a5:e2:68:58:62:ec:d8:0c:cd:56:69:28:20:f9:c0:d3:94:30:
         d0:35:0d:c6:1b:4c:d3:ab:64:32:21:13:cc:2b:b5:e5:21:ba:
         66:d1:24:eb:85:4d:11:d5:98:11:e8:aa:b4:b0:70:be:2c:a9:
         b5:0b:7c:31:f1:a0:42:c1:38:ca:94:52:29:2d:cb:a7:96:d5:
         1f:bd:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:34 2024 by rpki-client on console-ams.rpki-client.org