Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa
File:                     ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa (raw, json)
Hash identifier:          VC1KjhZ2Sb+8EPL/emmiPsh6FWekfkga8AoeRgWPhDY=
Subject key identifier:   D7:1D:BB:BB:6A:7B:0D:56:86:CF:F1:E8:F3:C7:62:57:11:32:AD:ED
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549000C7E981C8A9BC1BE5420
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa
Signing time:             Thu 21 Mar 2024 21:20:11 +0000
ROA not before:           Thu 21 Mar 2024 21:20:11 +0000
ROA not after:            Wed 19 Jun 2024 21:20:11 +0000
asID:                     19527
IP address blocks:        34.3.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:00:0c:7e:98:1c:8a:9b:c1:be:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:20:11 2024 GMT
            Not After : Jun 19 21:20:11 2024 GMT
        Subject: CN=69716532-e2e7-44da-831b-345c66418270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:28:cc:fe:5e:08:28:55:53:03:25:57:d5:
                    04:e4:91:ad:a7:64:ce:53:83:ac:38:2f:86:18:5f:
                    c4:ff:84:04:85:23:fc:ea:f0:bf:aa:75:f7:f8:67:
                    42:bb:23:ca:6c:7d:13:b1:83:2b:c3:ce:63:00:04:
                    5a:2f:9e:49:50:8d:1f:81:19:ad:37:42:21:30:7e:
                    15:13:99:23:52:37:c8:a3:53:31:85:c8:4b:07:b2:
                    9c:8d:f4:17:37:f9:62:24:2d:01:3d:05:7d:3f:3a:
                    b4:15:db:34:c4:39:69:3b:58:c4:df:cd:bc:fb:42:
                    f4:3e:41:74:2e:b9:72:65:c5:56:8e:0b:41:85:8a:
                    f2:c7:28:b3:2f:32:20:07:75:e6:5f:2e:54:75:be:
                    74:90:d2:84:9b:8e:f3:b2:2e:af:e4:af:0b:e7:11:
                    9f:a6:58:24:b3:73:60:29:74:e2:97:62:d3:1b:3b:
                    30:e1:e5:84:7a:f1:8d:50:c1:e2:24:f4:36:16:3e:
                    b8:c5:f5:5a:50:52:e7:2f:b5:62:03:9c:a1:0c:36:
                    a4:6b:da:7c:aa:a9:e3:3c:93:35:74:d9:46:6b:81:
                    c8:11:ba:0f:f6:52:e3:93:bd:b7:b6:1a:79:ce:ae:
                    88:2c:a7:89:28:6b:12:94:70:e0:37:35:72:72:95:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1D:BB:BB:6A:7B:0D:56:86:CF:F1:E8:F3:C7:62:57:11:32:AD:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:dc:8a:e0:99:e2:9d:8b:18:b7:be:58:51:a8:a7:84:81:0f:
         f7:e6:90:39:9c:21:d3:cc:5a:ee:9d:91:f9:06:61:3e:54:47:
         b3:aa:55:ad:47:98:fa:32:b8:ae:d7:d9:7e:1e:63:5e:c3:d5:
         75:b9:85:73:e2:d6:ed:68:64:d2:44:59:40:95:b7:d6:c3:b1:
         b6:50:5b:75:0d:5b:65:e3:26:f9:23:d6:02:ff:30:4e:e2:33:
         f4:c6:ab:a7:1b:07:54:9a:dd:02:e9:aa:ef:cc:5a:9f:25:30:
         19:00:d1:8e:58:bb:84:45:ca:98:71:f2:9a:ba:16:45:18:6e:
         1c:c0:bb:26:46:67:c0:b5:c8:37:40:e9:9a:da:b3:3a:ba:24:
         dd:f2:58:d3:b9:42:92:3e:89:6e:e3:93:c2:2d:7e:52:a3:2c:
         bf:98:26:97:5d:bd:2e:02:4f:b3:93:ba:b0:70:78:55:52:24:
         4b:40:cb:be:f4:5a:04:c5:bf:30:44:eb:42:09:ff:df:fe:d4:
         95:39:95:83:02:a7:7c:93:80:54:af:99:26:fe:e2:b3:7a:79:
         ad:d3:ca:ae:f7:0b:ab:93:c6:36:d0:28:6b:98:37:1f:5b:27:
         7b:ef:e5:0b:9c:85:c9:05:ff:cc:94:18:66:25:75:9f:bb:ca:
         3a:d7:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:45:35 2024 by rpki-client on console-fra.rpki-client.org