Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb281e69-4165-36f1-be91-0268b6195a4f.roa
File:                     bb281e69-4165-36f1-be91-0268b6195a4f.roa (raw, json)
Hash identifier:          nsHmL+PzS6PgSHiJ8LnrYfIYiJfDJCmbBt7+k9hXoF0=
Subject key identifier:   46:CA:02:32:A4:33:E4:B5:F8:A7:A2:4D:0F:CF:7E:E7:4B:FE:D8:1B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454628504A598499A43554AA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb281e69-4165-36f1-be91-0268b6195a4f.roa
Signing time:             Wed 20 Mar 2024 20:53:53 +0000
ROA not before:           Wed 20 Mar 2024 20:53:53 +0000
ROA not after:            Tue 18 Jun 2024 20:53:53 +0000
asID:                     19527
IP address blocks:        34.0.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:50:4a:59:84:99:a4:35:54:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:53:53 2024 GMT
            Not After : Jun 18 20:53:53 2024 GMT
        Subject: CN=b1840db2-7c53-4f72-be83-b5ffe4f43721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:56:dc:bb:b4:7e:3c:2c:d8:cc:b1:ae:1a:
                    d9:63:b0:49:94:b3:62:b8:6e:9c:14:c5:5a:ad:71:
                    8b:29:87:d6:88:2f:2f:6d:54:f2:43:3a:1e:34:24:
                    83:4f:50:d8:e8:b4:d8:c6:2e:12:6d:03:89:9e:78:
                    ef:cc:86:16:22:2d:1d:a1:4a:2a:2c:36:bb:d3:5e:
                    a2:d7:3b:20:cf:9e:36:25:2c:82:1a:d4:72:e6:53:
                    17:d2:62:a6:57:0c:b7:fc:03:1b:2f:b4:b9:d7:c0:
                    db:9c:3f:59:6f:a1:72:bb:3e:d3:94:25:da:ae:81:
                    1d:9f:f8:59:64:0f:db:a2:b3:e8:65:45:c1:4a:32:
                    d6:d1:fb:a9:98:b5:86:2a:7a:76:ab:ae:dc:4c:a9:
                    32:c0:57:27:f7:b4:38:f6:a0:b8:35:95:13:61:41:
                    da:be:c4:c2:69:ac:9f:29:91:27:81:65:e0:b4:57:
                    e3:71:8d:0c:f5:0a:63:32:05:20:bc:a7:50:64:c1:
                    19:72:eb:bc:cd:49:99:d3:e8:89:cc:98:10:7f:12:
                    35:e3:9f:15:fb:96:1a:89:b6:e9:ae:20:25:8c:e6:
                    1b:b0:07:e6:66:a5:7b:a1:76:09:c3:c7:fc:4e:f0:
                    d4:83:8f:64:80:88:8f:cc:c2:1e:12:f2:2d:db:89:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CA:02:32:A4:33:E4:B5:F8:A7:A2:4D:0F:CF:7E:E7:4B:FE:D8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb281e69-4165-36f1-be91-0268b6195a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:79:53:e4:be:c7:d2:b1:d4:c9:ea:ff:2c:16:b9:d7:ac:
         3a:2a:03:cf:14:9c:e1:bc:66:84:ef:4e:4f:bf:9d:a3:62:a4:
         fa:7c:80:60:02:f3:4a:62:03:ef:db:92:53:5d:33:0d:cd:f3:
         5d:15:f4:ef:7d:a5:b5:53:a0:d4:62:06:60:e8:36:a5:d3:75:
         4b:74:cf:9e:65:13:b8:1d:ba:2a:3b:5b:76:7c:c2:84:57:56:
         4b:51:5c:cb:9b:9a:b1:f0:bc:43:f3:c8:0d:6c:eb:cb:eb:ce:
         13:07:f8:fc:9b:17:6e:92:f0:5b:59:57:a1:c7:3a:cf:25:6d:
         b8:00:fd:45:e6:9a:a8:c4:79:58:aa:bb:81:69:08:c6:aa:ab:
         24:ef:30:8b:aa:47:bf:27:7d:f9:cc:31:36:3b:2d:a5:73:95:
         04:68:31:f7:8e:a1:d3:8a:a0:81:b7:af:61:9c:b4:85:8a:19:
         51:48:e9:04:fb:83:9e:6b:0c:36:d7:6a:47:35:2f:96:47:a0:
         c6:99:91:5a:1b:39:d2:4b:ad:b4:f0:14:1c:ed:86:ee:00:89:
         99:ac:73:14:cc:7a:ab:75:13:c5:28:18:7a:62:45:41:86:a3:
         0a:c4:7f:5b:16:b2:5a:8e:1e:e8:e0:4d:f5:96:61:20:8f:53:
         90:c7:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:31:05 2024 by rpki-client on console-fra.rpki-client.org