Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfc5f4e7-fd21-3d19-8676-9640b17680b6.roa
File:                     bfc5f4e7-fd21-3d19-8676-9640b17680b6.roa (raw, json)
Hash identifier:          nRRofQ+fSAqqDV+WkYyu46+mSfkcTsdU6IvHshdbcvI=
Subject key identifier:   82:0A:91:53:83:40:5B:EA:52:7F:07:82:A0:57:64:8A:8D:A3:36:D4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549014AC012F78E2DFF97DE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfc5f4e7-fd21-3d19-8676-9640b17680b6.roa
Signing time:             Thu 21 Mar 2024 21:22:41 +0000
ROA not before:           Thu 21 Mar 2024 21:22:41 +0000
ROA not after:            Wed 19 Jun 2024 21:22:41 +0000
asID:                     15169
IP address blocks:        34.155.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:01:4a:c0:12:f7:8e:2d:ff:97:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:22:41 2024 GMT
            Not After : Jun 19 21:22:41 2024 GMT
        Subject: CN=d78924fe-e051-47b0-b95d-4907ae8cb324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:b0:f5:de:8f:3f:fb:1c:94:f3:ba:d9:17:
                    2e:c7:80:19:f7:de:0d:b1:b7:61:d8:9b:3f:2b:88:
                    14:60:09:dd:c0:35:b9:29:b3:e7:62:1e:73:3c:7c:
                    da:97:b3:ea:2e:a6:3b:6b:cf:ca:d0:a4:14:be:91:
                    8a:16:f3:11:c1:01:82:41:9e:5c:e9:4c:6a:7e:f2:
                    2f:a3:b5:3a:2b:65:7f:2d:39:84:b4:0d:e9:c1:49:
                    17:7c:5c:a3:3c:38:da:70:e0:a8:30:0d:b4:2d:ae:
                    11:74:d4:ad:ec:9a:a0:15:8f:70:0f:af:f8:56:5e:
                    10:f9:0e:d9:14:3a:55:27:5e:25:b8:91:0d:4f:e3:
                    64:f2:32:10:88:bd:7a:c9:43:a9:69:54:0d:e9:d2:
                    74:8a:42:d8:71:8c:b1:b5:95:48:b8:ed:24:cb:b4:
                    c7:43:98:93:e3:90:af:79:f2:7d:63:ed:a3:b5:74:
                    89:61:b3:e3:e3:71:c4:b3:7e:20:a5:6a:6e:78:96:
                    33:a6:8a:e6:3b:f7:20:4c:d9:fd:77:d0:2e:63:32:
                    95:b1:f3:02:60:c1:bc:d2:31:80:cd:8c:80:22:eb:
                    26:3b:ac:5d:10:3d:81:ad:fc:af:49:5f:f1:19:ac:
                    5f:7c:60:47:c2:3e:08:d9:90:09:cc:5c:c0:af:f9:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0A:91:53:83:40:5B:EA:52:7F:07:82:A0:57:64:8A:8D:A3:36:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfc5f4e7-fd21-3d19-8676-9640b17680b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.155.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:8c:30:1a:e3:f9:0d:ff:a2:65:91:80:a5:2f:aa:01:10:
         2f:6f:c6:80:00:a3:12:4c:51:75:ed:e9:22:60:17:73:30:c9:
         61:05:51:b5:c5:cf:b9:b1:44:f9:5a:37:b2:ed:3b:be:e2:25:
         90:0e:21:0a:eb:8d:d3:92:d1:ba:aa:9a:5b:59:60:97:f8:b7:
         17:c0:5c:03:d2:4e:95:c9:d4:6b:80:92:6d:a8:81:af:01:68:
         49:00:f9:1f:b9:5d:ec:45:f9:cb:ec:b3:2e:f1:18:2e:e8:a2:
         d5:f2:a7:fd:5a:09:3e:f5:04:6c:c8:b0:08:bf:6b:f8:11:c9:
         bb:88:df:49:38:83:9d:69:7c:be:a6:0e:bc:7c:5b:ff:a6:01:
         a4:b9:06:ac:ca:96:bb:c8:77:9f:7d:b3:fb:b4:4f:4a:07:e2:
         dc:47:da:19:05:21:7f:e7:81:38:de:4a:3e:fc:16:e5:4d:3e:
         c5:91:72:4a:87:30:f9:d6:02:df:8e:18:bf:1e:eb:75:d8:f9:
         0f:15:fb:75:82:71:ed:58:fd:8f:53:ec:60:41:ff:32:72:ad:
         7e:ca:89:af:7d:9f:ce:98:a2:7f:9b:1c:d4:3b:8b:7d:81:84:
         55:19:b4:68:f0:01:95:d4:f4:8a:e2:9e:65:e9:54:67:2a:64:
         68:03:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:29:56 2024 by rpki-client on console-ams.rpki-client.org