Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc5e2b50-828f-32ba-a5f6-e371b2ce1f34.roa
File:                     cc5e2b50-828f-32ba-a5f6-e371b2ce1f34.roa (raw, json)
Hash identifier:          LCkOW/h+HATR7KnFy0hKzzATHTBgtnmXdST6kTCPPBk=
Subject key identifier:   8B:D7:E9:0D:5B:43:33:0F:1F:CD:D5:2E:ED:5E:C9:53:EB:27:E1:4A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454904AF076208296F345141A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc5e2b50-828f-32ba-a5f6-e371b2ce1f34.roa
Signing time:             Thu 21 Mar 2024 21:29:31 +0000
ROA not before:           Thu 21 Mar 2024 21:29:31 +0000
ROA not after:            Wed 19 Jun 2024 21:29:31 +0000
asID:                     15169
IP address blocks:        34.140.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:04:af:07:62:08:29:6f:34:51:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:29:31 2024 GMT
            Not After : Jun 19 21:29:31 2024 GMT
        Subject: CN=ed5247f6-bf5d-4ee4-a56d-e32589a30790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:95:b7:5f:f6:06:53:11:f2:50:92:1c:d1:
                    57:b5:c4:27:43:4a:73:57:88:e6:1e:62:a4:0d:5f:
                    51:18:35:0c:d3:69:b5:28:25:0e:42:3c:e4:61:ed:
                    db:b8:0b:8d:06:5b:b0:af:e8:2b:cf:5b:c8:22:24:
                    b9:84:2e:74:a2:19:94:56:7b:b4:e4:7e:ff:84:5d:
                    07:d0:a3:73:21:fb:4f:3e:09:6a:8a:d0:8e:06:fb:
                    9e:c7:d2:fa:59:f6:69:85:be:53:84:46:de:8d:39:
                    0b:89:97:af:f3:68:1f:7c:5c:08:b9:63:9f:5e:2e:
                    0e:09:e6:96:9a:c2:ff:d3:06:ec:eb:98:ce:58:c0:
                    68:5b:07:e4:27:72:f2:54:74:a0:da:36:cf:a5:8b:
                    08:85:fa:af:6d:6d:c8:b9:12:6c:d3:91:82:a6:1b:
                    c9:7a:f8:b8:95:9c:a2:e5:3c:5f:f4:ec:10:02:e0:
                    50:3a:e6:4c:6d:fa:78:19:69:58:f3:47:a8:a1:5a:
                    c7:f4:ce:f4:96:65:75:3b:af:69:dc:9f:4c:c1:80:
                    39:59:b1:f2:96:ce:cd:d6:9c:af:f2:51:f6:72:6b:
                    0f:68:45:c1:f3:84:af:c9:a8:f8:07:28:50:ba:2e:
                    24:11:d5:7f:93:52:4e:ba:24:fe:fa:08:03:b5:e6:
                    89:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D7:E9:0D:5B:43:33:0F:1F:CD:D5:2E:ED:5E:C9:53:EB:27:E1:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc5e2b50-828f-32ba-a5f6-e371b2ce1f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b4:7d:3b:27:d4:23:6a:c4:1a:29:54:cb:da:3e:d8:e8:ab:
         58:7c:d1:23:66:88:f4:0d:a5:02:28:76:fb:df:d7:a9:ff:a8:
         af:c5:03:c3:a7:d3:11:3f:30:b9:a1:52:34:18:67:a7:14:39:
         e0:20:00:cb:f2:1c:1f:f6:b5:8b:67:82:6c:16:2c:33:4f:4f:
         7b:53:d1:56:6f:b0:89:d3:37:23:99:75:f7:f1:7f:8c:dd:34:
         1d:10:ee:e6:57:10:03:64:66:bc:f8:f5:e7:71:fe:e9:a6:ff:
         43:ae:cd:c0:26:6c:31:a8:30:87:c1:4c:53:7e:46:e4:4b:9e:
         40:dd:fa:31:3d:ec:27:27:15:82:10:e5:bb:2b:d3:72:0a:cf:
         48:93:03:6d:5b:cf:44:d0:0a:cb:e9:b7:14:25:8e:10:50:db:
         c2:14:da:9a:05:24:3e:ce:1e:c8:72:21:0c:d6:7c:aa:70:82:
         eb:06:6b:b6:5a:3d:a3:c3:3f:9f:af:11:f0:00:11:c8:00:4a:
         0f:75:8e:75:04:e8:25:35:f4:4a:fa:12:51:a9:07:b7:e2:8c:
         ba:1a:4d:20:4d:f0:9b:0a:ff:c6:19:54:7c:f6:a7:bb:b2:d7:
         25:1a:0b:2b:8f:12:36:7f:e1:1c:ad:d3:b5:09:d0:dc:b7:d2:
         ed:c2:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:12 2024 by rpki-client on console-ams.rpki-client.org