Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c85da69b-a1c7-30f3-a98b-f5d20092dabf.roa
File:                     c85da69b-a1c7-30f3-a98b-f5d20092dabf.roa (raw, json)
Hash identifier:          tQSZxwVv5I7f0dNrs8OjsM6A8iR976XSaHestlaaJ8E=
Subject key identifier:   71:A6:6B:FE:2D:34:FF:14:1B:5B:D2:F3:C4:C3:46:25:EE:14:E6:2C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4DFF6F6F626BD07C713C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c85da69b-a1c7-30f3-a98b-f5d20092dabf.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.129.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:df:f6:f6:f6:26:bd:07:c7:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=8a7f3c0f-a4d5-46cd-baac-e6729c2b935f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:66:75:e1:d1:f4:4d:e1:cb:78:f0:18:1e:
                    91:66:7d:07:c1:e8:d7:a0:e3:0a:1e:42:23:48:d3:
                    9c:3f:b6:78:19:c1:dd:1d:9c:57:a1:65:e0:bf:ab:
                    48:db:e7:46:a7:53:c8:a7:c6:de:ed:67:5e:29:53:
                    2b:5b:1e:31:96:ad:35:bc:2d:11:8e:55:3a:f6:7d:
                    23:f4:7f:bf:95:dd:ab:d0:32:c8:0a:a7:4a:13:b5:
                    fb:4d:c2:11:30:b1:0a:30:e3:d7:27:62:cb:f8:d5:
                    57:ea:26:61:9b:8e:e6:43:e9:cd:eb:58:8b:d8:23:
                    fc:0f:99:73:9c:31:d3:89:a1:a7:6a:15:75:70:eb:
                    44:47:41:15:61:9e:43:f2:f2:02:40:25:c3:47:07:
                    4b:3e:97:d1:87:bc:b4:79:04:1d:2d:1e:8f:e6:be:
                    ec:8c:50:17:e3:07:9d:e7:89:9f:f3:a4:55:0d:c2:
                    1c:2a:4e:c8:8b:bd:04:57:12:3a:87:d9:57:90:6e:
                    e7:a6:5d:50:87:27:ad:22:08:67:48:55:ed:61:01:
                    3d:a9:7c:e2:15:76:f4:56:9c:29:c9:b8:22:a8:7a:
                    3d:fe:7e:a9:ee:62:cd:8b:2b:c4:5a:d9:5c:12:75:
                    93:54:31:a8:78:2f:16:f6:4d:02:aa:02:52:92:84:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A6:6B:FE:2D:34:FF:14:1B:5B:D2:F3:C4:C3:46:25:EE:14:E6:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c85da69b-a1c7-30f3-a98b-f5d20092dabf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.129.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:1e:e0:5f:a9:fe:5b:ec:8a:2a:b4:5e:f4:f2:4c:16:d5:
         54:99:57:ce:de:8f:00:fa:a4:32:cc:ba:c8:27:2d:44:99:23:
         79:72:03:9d:75:6a:97:1a:e8:bf:de:97:71:34:d7:de:82:4d:
         6f:14:5f:cf:95:1f:1c:39:fe:1a:12:66:da:7f:6e:36:3d:df:
         61:31:17:26:f8:c5:0e:23:b8:ab:43:6d:e0:10:29:c4:97:4d:
         3a:cd:2f:86:a1:21:f5:86:d7:29:f4:3e:fe:87:55:50:5d:1a:
         9e:fa:f9:51:ca:14:ae:74:fb:42:d0:9e:36:7e:35:28:42:14:
         01:e1:f7:d9:67:5a:96:6f:a8:29:6d:46:49:23:2a:3c:d1:2d:
         f5:fb:f2:8e:ff:21:c3:fc:60:6f:cd:a7:07:a2:18:41:c1:70:
         86:49:ab:e7:cf:d8:d5:19:19:ed:4f:c1:c9:62:ea:b4:9a:83:
         dd:50:32:54:e4:2a:2c:0a:e6:9b:b0:52:c2:c5:e8:9d:10:48:
         94:fa:16:0c:21:78:e2:47:b3:35:ef:2a:ea:35:66:b6:e8:81:
         72:ae:20:0b:98:5c:78:d4:cc:27:19:58:ce:33:92:f9:9a:fa:
         60:04:9c:32:21:59:a0:72:f3:97:22:0c:7d:1f:60:fd:83:23:
         a5:16:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:57 2024 by rpki-client on console-fra.rpki-client.org