Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce33ef82-62cb-3cc0-85cd-36b9a6a5a8e5.roa
File:                     ce33ef82-62cb-3cc0-85cd-36b9a6a5a8e5.roa (raw, json)
Hash identifier:          EZIRl3EKWr6uAmGK7DG4GN2bf4V4mO0lVPV+jmivthU=
Subject key identifier:   16:9F:82:FF:08:E8:39:32:B6:2E:23:58:4F:F5:5C:D1:D7:23:24:4F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490821E067F97303583F3380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce33ef82-62cb-3cc0-85cd-36b9a6a5a8e5.roa
Signing time:             Thu 21 Mar 2024 21:36:28 +0000
ROA not before:           Thu 21 Mar 2024 21:36:28 +0000
ROA not after:            Wed 19 Jun 2024 21:36:28 +0000
asID:                     15169
IP address blocks:        34.168.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:08:21:e0:67:f9:73:03:58:3f:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:36:28 2024 GMT
            Not After : Jun 19 21:36:28 2024 GMT
        Subject: CN=c0e42011-cae8-4706-a056-2cb3235efde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:9d:34:3e:37:55:34:b6:c7:53:18:16:50:
                    f2:a2:77:bd:cf:7d:71:0d:0b:df:07:8a:c2:2f:0b:
                    ef:e4:43:a4:3b:a7:e5:63:78:e0:5e:75:41:73:10:
                    2f:ec:08:f2:dd:07:a7:d4:dd:24:60:6e:ca:ea:39:
                    bd:06:d5:56:87:a1:3d:c8:0e:40:46:19:56:cc:67:
                    20:4d:bb:a5:fe:ff:68:0c:21:5a:52:b5:ed:0f:4e:
                    4c:30:26:d9:45:31:b7:62:3d:64:e3:07:ec:8f:0d:
                    eb:16:ed:1e:2d:60:2c:d6:e9:34:48:19:91:49:bd:
                    bb:e2:42:34:c4:96:2f:e5:3e:34:a2:d5:50:b2:fb:
                    56:31:8b:f2:ac:ef:46:f5:b3:04:09:3e:fb:33:94:
                    54:39:a1:0a:43:ec:ea:a7:9e:50:aa:b0:fa:15:8f:
                    5f:13:45:bb:e0:29:09:ab:7a:f0:cc:66:28:3d:39:
                    bb:05:36:25:ab:01:2c:e0:ee:39:1a:14:13:5a:b7:
                    de:93:fc:51:9b:85:78:b5:45:0a:c2:82:49:95:de:
                    c9:09:a8:8c:5c:c7:7d:34:0f:cd:a9:80:bb:33:2b:
                    47:6d:7f:fc:d0:cf:87:88:30:90:fe:fc:cd:4b:6c:
                    85:37:83:bb:54:a7:d5:2c:b1:7d:86:26:37:39:c2:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9F:82:FF:08:E8:39:32:B6:2E:23:58:4F:F5:5C:D1:D7:23:24:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce33ef82-62cb-3cc0-85cd-36b9a6a5a8e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.168.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cd:24:05:2a:df:8a:e3:7b:79:52:2d:80:5e:c2:68:c7:f1:
         7d:3a:de:87:36:6c:5a:2f:d6:d8:80:42:65:30:70:ac:69:fb:
         dc:37:37:f2:cb:b0:da:24:d5:47:33:25:32:d0:6f:ff:b0:5f:
         0f:2e:b3:33:ba:0f:ec:84:9a:7c:7e:04:9e:bc:02:c2:93:a0:
         48:44:42:38:ec:2c:3b:75:e6:cb:f4:74:a3:cd:c5:0b:94:82:
         f4:0f:c2:24:e3:58:2a:ff:02:92:66:33:db:d9:b4:a5:fd:c9:
         52:37:eb:d9:37:71:20:a7:e0:b5:44:be:7c:af:e8:8b:71:ad:
         a9:28:1a:0b:02:9d:89:51:72:d7:5e:68:bd:b3:14:80:52:a2:
         81:76:64:b9:42:fe:5a:14:f2:70:f7:d5:e5:95:36:39:75:db:
         9a:f0:2f:15:c1:52:d5:58:64:9c:7d:bc:a2:35:e5:45:cc:4e:
         95:b8:9a:e8:19:bd:97:d2:c9:51:e5:58:97:b3:30:50:ef:67:
         be:39:12:13:ac:6e:0b:d5:f1:e7:bc:23:c8:ed:51:f9:f1:47:
         9a:da:6b:cd:ac:d1:f3:97:61:13:f8:a3:b2:e7:50:5c:d3:d3:
         15:e7:84:bd:32:f1:6f:d9:b5:a6:ac:51:a3:c9:a0:48:28:27:
         0e:68:8f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:12 2024 by rpki-client on console-ams.rpki-client.org