Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1567467-01d2-3dd2-a2b4-77d580db6239.roa
File:                     c1567467-01d2-3dd2-a2b4-77d580db6239.roa (raw, json)
Hash identifier:          Nyx77L5pY/mVmjSB/Q8hz047oqz2uwujMmmLXCMGqxk=
Subject key identifier:   4A:C6:40:C1:41:3A:52:80:F3:79:61:E7:5A:F6:76:8A:13:B5:F9:98
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E70997D73F50FEB2FD16880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1567467-01d2-3dd2-a2b4-77d580db6239.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        34.109.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:99:7d:73:f5:0f:eb:2f:d1:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=87b371f6-4e35-4af2-8e37-c1f226950d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:32:88:8e:d3:a8:4b:79:3d:0e:70:9b:b2:
                    a0:91:a7:7d:36:3b:c2:dd:a4:8c:d1:14:66:3f:ca:
                    f4:35:fd:d1:be:ca:bf:d0:cd:df:62:89:5c:53:6b:
                    4a:4a:e1:16:7f:71:64:83:85:29:ad:e7:ca:57:fa:
                    ca:e4:c7:dc:c3:29:a7:36:f0:ca:e1:5c:8e:54:2c:
                    65:df:01:dc:2e:09:e2:34:b5:7e:b1:fc:c4:2d:86:
                    a4:c2:b8:24:74:96:f7:53:36:19:3d:d4:48:ee:be:
                    0e:34:c5:49:ad:2c:ab:93:d5:d2:05:40:61:a1:de:
                    d0:5e:d0:1b:c8:49:37:8e:15:8d:81:4f:12:16:bf:
                    27:32:62:80:3a:b4:da:f5:5c:e5:b8:a6:7b:38:7f:
                    23:35:ae:25:f6:3b:90:29:5c:7c:5b:a7:bc:16:c6:
                    38:89:f4:e5:8c:af:9a:70:0b:09:15:9f:87:11:a9:
                    87:c9:41:41:30:4e:2c:4b:aa:c3:9c:d6:65:fc:a0:
                    c1:f5:56:53:1f:76:4a:af:50:90:31:e6:a6:81:90:
                    65:d4:83:98:66:1e:6e:1c:a2:be:3c:e2:f3:25:83:
                    08:46:b6:7a:29:a6:04:b0:6c:78:f8:3d:bf:a1:ab:
                    ee:b3:b6:f1:ae:22:55:a1:49:ef:07:f5:12:19:43:
                    aa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C6:40:C1:41:3A:52:80:F3:79:61:E7:5A:F6:76:8A:13:B5:F9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1567467-01d2-3dd2-a2b4-77d580db6239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.109.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ba:0e:b4:6f:11:c3:11:e6:76:de:86:2e:61:11:0a:47:68:
         46:d8:c8:03:e2:e4:82:37:92:1c:38:2c:b5:f7:f1:b8:1f:06:
         bd:c2:41:49:45:69:74:df:9e:b9:48:0e:16:f9:3e:ff:61:1b:
         d2:f3:58:95:e9:b1:1f:de:42:a2:b0:eb:d5:56:c9:7c:35:b1:
         3c:59:fb:26:13:45:45:56:01:00:f5:db:68:b6:00:70:e6:f7:
         71:dc:b8:cd:b8:f6:ab:11:42:e6:92:7d:29:60:e6:7e:fa:94:
         ad:ca:e5:6c:dc:89:d5:76:53:c3:01:75:d6:e4:9f:37:09:8e:
         12:e8:7c:34:e2:18:d3:b4:1b:cf:2e:74:d3:31:bb:a3:8a:38:
         91:39:6f:dd:a9:d4:f3:bb:e7:02:93:c5:b3:46:93:e2:50:5a:
         9f:24:3e:67:57:20:55:1b:57:b7:34:3c:2c:54:cf:f5:28:3c:
         24:00:29:04:17:bf:33:6a:27:e9:59:65:83:b3:0d:b8:86:7f:
         fe:93:61:c7:71:20:de:2f:5f:63:c9:8a:9e:00:f3:0a:e1:86:
         6e:9e:47:e3:be:0e:91:c1:b2:37:24:e2:dc:0a:07:46:ee:b2:
         46:2c:90:71:24:2c:6b:b6:bf:23:c0:40:5d:c0:2e:db:86:6e:
         32:8d:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:41 2024 by rpki-client on console-ams.rpki-client.org