Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c42815f4-e776-3144-9532-3d03ce222eb9.roa
File:                     c42815f4-e776-3144-9532-3d03ce222eb9.roa (raw, json)
Hash identifier:          i7xv1WVb8FxH2nPLDW3E+gtA0nuBWmjeyBQhXTS7qUg=
Subject key identifier:   D1:2E:6F:F1:06:F6:A9:55:79:BA:B0:1A:4F:ED:1F:76:58:EE:2A:42
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F501874444FCA3BE0E6900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c42815f4-e776-3144-9532-3d03ce222eb9.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.145.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:01:87:44:44:fc:a3:be:0e:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=6773c04e-9044-4389-9786-9bf87ced94aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:e6:d1:81:51:49:93:45:68:c2:c2:ca:a0:
                    f9:c2:8f:bf:66:21:9c:a8:9d:f6:1f:45:13:64:6e:
                    46:eb:ad:5e:b8:7e:5b:e8:11:2f:d5:8e:21:b8:3e:
                    55:49:27:46:1d:d9:05:19:0c:cb:cc:a9:77:c3:9a:
                    60:0b:ed:79:e0:d9:80:f5:32:4b:0a:c8:cf:ff:ad:
                    a1:22:31:70:96:0f:50:e3:45:7a:c9:80:dc:8c:aa:
                    2c:45:57:e4:32:f3:2e:1e:c8:e0:c9:bd:3e:9b:90:
                    36:48:68:33:7a:20:60:37:9b:8e:a1:30:f2:da:b2:
                    5b:34:1d:5c:31:ad:64:b6:52:da:5c:e6:fd:9c:2a:
                    cf:f2:7c:0f:1b:31:b1:b7:a1:a1:a9:69:3c:84:64:
                    55:36:35:71:34:a2:ac:6f:21:f9:26:f9:b0:03:58:
                    de:21:bd:e9:88:6e:bd:b2:af:69:ed:81:37:d5:17:
                    e4:bd:ff:c7:f8:97:33:21:36:56:86:e5:73:4c:72:
                    92:6a:76:9b:6d:ca:74:d6:04:2c:62:98:f1:5d:55:
                    1d:f6:7c:16:53:7a:4d:21:af:04:6c:8a:ba:bf:c1:
                    55:2f:92:06:98:a2:80:f5:60:ae:fa:a8:db:59:51:
                    81:54:e1:54:86:3f:2c:c7:50:22:16:96:d3:b1:da:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:6F:F1:06:F6:A9:55:79:BA:B0:1A:4F:ED:1F:76:58:EE:2A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c42815f4-e776-3144-9532-3d03ce222eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.145.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c2:33:8c:ae:11:17:4e:51:8b:7d:0b:bc:f3:52:d1:85:1c:
         3c:8a:7a:36:d0:81:54:fc:4b:a6:18:9a:54:fb:3a:e4:47:04:
         eb:d8:5a:01:ee:dc:b1:93:21:18:da:62:8f:0c:72:88:74:0a:
         5d:ef:56:bf:85:e7:c4:08:51:a1:ff:96:35:0a:80:26:08:90:
         8b:c0:62:6b:4e:88:4a:6f:58:61:d9:e6:c8:3f:7c:d6:93:c2:
         2a:e4:49:a8:3a:7c:69:53:69:25:9a:c8:ac:6e:29:cb:10:7c:
         a3:a3:c2:cf:a0:44:a3:ba:e7:43:74:2d:34:cc:05:db:34:48:
         58:0d:75:fc:01:4e:6b:64:49:30:b6:26:4d:ae:e7:bd:c4:03:
         d8:e3:44:99:2b:02:aa:ca:4c:94:7e:84:64:a0:55:19:d4:7a:
         c4:4f:d9:4f:a8:f8:6a:09:e5:48:04:2b:69:38:48:5f:0b:1c:
         f3:7f:68:6b:16:b0:70:ac:e2:d3:b4:1c:73:5b:ba:11:7c:d1:
         bb:4e:73:c2:6c:f6:1f:70:bb:11:f5:e3:e7:3c:79:15:78:ad:
         83:4e:12:36:6e:9c:ed:ef:ed:71:72:f2:c2:99:3a:bc:6a:67:
         44:0f:44:42:4e:1f:44:8b:35:8a:98:e4:fb:87:b1:cc:07:7c:
         ed:39:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:56 2024 by rpki-client on console-fra.rpki-client.org