Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8e79724-ddfe-3524-8815-1c5663210392.roa
File:                     c8e79724-ddfe-3524-8815-1c5663210392.roa (raw, json)
Hash identifier:          utB5vn3wHYow10hFIxieGNKsYaWIhlMdJMC0UUW41C0=
Subject key identifier:   02:7B:A2:B4:69:87:A7:90:E5:23:63:47:2A:4D:FC:98:74:D7:5B:3A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F52838052652A972F423C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8e79724-ddfe-3524-8815-1c5663210392.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.95.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:28:38:05:26:52:a9:72:f4:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=d09dcab1-8eff-44e8-84da-826d032af3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:06:37:09:0c:49:2a:eb:c3:45:39:42:45:
                    7c:6e:59:d6:ff:c1:c5:91:ff:c7:cd:b2:02:83:4a:
                    d7:e3:ee:30:62:95:ee:2d:9d:51:b1:cd:7c:fc:d2:
                    b8:58:c7:8c:9c:bc:7d:54:b7:28:68:ac:ed:04:3a:
                    0c:f0:10:ad:64:6c:e6:45:10:50:17:2a:6c:d9:d4:
                    03:61:a7:31:fa:2e:36:21:94:7a:16:bd:9d:03:dd:
                    26:70:55:7c:4b:52:23:fb:ef:49:3a:53:05:56:82:
                    43:11:3e:f2:13:3f:56:7a:ab:03:aa:2c:4d:0f:19:
                    cb:89:b3:3a:b0:8c:15:05:55:50:ad:65:46:e9:58:
                    54:ee:0d:c6:43:27:7b:7a:0c:13:79:a6:da:06:39:
                    64:2f:04:aa:55:f2:81:5b:44:6e:f9:71:6c:0b:d8:
                    63:8b:a0:57:18:81:5f:7f:06:8d:9e:d2:b4:bb:cc:
                    fd:83:24:dd:5c:bd:b6:4e:26:dd:fb:48:e9:49:d9:
                    5e:0a:e6:dc:d1:43:67:46:81:f4:30:53:db:5c:bb:
                    6d:3f:33:b4:c9:0a:e1:9a:11:47:68:a6:48:e5:f2:
                    95:70:af:5a:12:c8:56:24:0d:27:0a:45:c6:b4:30:
                    0c:2c:ef:b5:62:92:b3:aa:1b:2e:1a:cf:3b:e7:19:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7B:A2:B4:69:87:A7:90:E5:23:63:47:2A:4D:FC:98:74:D7:5B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8e79724-ddfe-3524-8815-1c5663210392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.95.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:c3:cc:d1:cd:b9:e5:b2:84:f6:41:1d:7c:60:5d:9e:c2:
         cb:9e:1e:37:57:d9:85:12:3c:ef:c2:5b:76:94:38:48:9a:0c:
         0f:20:86:70:79:d7:00:4d:9c:35:9d:42:2b:c8:df:bd:86:f5:
         bb:0d:36:01:9a:ba:dc:3a:99:9b:2d:83:11:08:33:07:97:63:
         64:b3:f8:02:00:8e:71:b5:fd:0f:af:49:56:8f:f1:48:5b:15:
         79:32:1f:1a:7b:e9:49:83:45:2c:5f:db:1b:d7:79:a2:a2:b3:
         9e:b5:74:79:a3:79:ba:43:da:87:62:97:25:b4:54:b7:d1:63:
         2e:2c:70:fd:6d:c4:cf:15:e7:6c:de:b0:11:8a:5e:8e:45:c5:
         fa:a9:a0:84:33:5a:23:47:8b:db:6f:5f:76:b4:2d:2a:9d:4e:
         36:28:82:ac:48:6c:65:6a:31:e0:50:d0:b8:f3:1b:de:84:ef:
         02:ef:70:cb:86:c8:52:60:f3:98:cc:0b:d2:1b:75:30:0e:ff:
         6e:cc:10:48:29:93:a4:85:cd:48:f9:e2:2c:bb:07:94:3f:bd:
         c8:96:2c:05:c1:ca:52:61:6f:94:24:cb:36:85:ca:d1:ad:d1:
         66:71:a9:57:9c:92:d2:2a:52:71:fa:ad:41:5d:ca:71:bc:2e:
         b9:9d:5e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:44 2024 by rpki-client on console-ams.rpki-client.org