Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf7a6722-c795-3b59-a299-e24c3c2e9875.roa
File:                     cf7a6722-c795-3b59-a299-e24c3c2e9875.roa (raw, json)
Hash identifier:          iGjwmxry4rjKw3o0edvLOUgILvXKrbC0HmP1aXOdq/8=
Subject key identifier:   78:AF:2C:CF:98:CD:64:82:DA:77:20:EB:20:12:46:40:BF:1D:F1:5F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462ADA54BD3291C57A471600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf7a6722-c795-3b59-a299-e24c3c2e9875.roa
Signing time:             Wed 20 Mar 2024 20:59:00 +0000
ROA not before:           Wed 20 Mar 2024 20:59:00 +0000
ROA not after:            Tue 18 Jun 2024 20:59:00 +0000
asID:                     15169
IP address blocks:        34.0.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2a:da:54:bd:32:91:c5:7a:47:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:59:00 2024 GMT
            Not After : Jun 18 20:59:00 2024 GMT
        Subject: CN=8b3fe5c3-753f-4542-81f1-6c34ec5604f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0f:38:03:f9:71:3d:cb:38:fd:7a:16:53:4b:
                    bc:46:dc:e2:2a:8c:29:2c:a1:a3:82:91:30:1c:80:
                    2e:6d:ad:64:77:69:e7:81:c4:e0:8c:39:41:73:9e:
                    00:0b:a8:0b:fe:0b:e2:0a:42:20:2c:59:bb:b2:46:
                    70:87:49:46:f2:70:bb:0d:36:6c:82:7b:91:86:25:
                    d3:f8:92:8f:54:f0:58:f4:dc:a2:5c:0c:e5:40:a6:
                    cd:41:2f:31:86:b3:ee:48:d7:17:ba:72:ff:49:37:
                    80:32:a5:5a:07:11:92:32:f5:4b:85:30:a4:54:37:
                    13:68:39:3e:27:82:7e:77:dc:62:4c:ad:f5:b0:b3:
                    55:68:1b:b1:ff:dc:45:f6:6e:7c:6d:88:e3:a3:41:
                    6f:ee:a8:e5:45:6a:ca:c4:49:86:a2:75:62:e0:fd:
                    da:0c:04:e9:1d:7b:8f:8b:63:16:68:88:47:81:fa:
                    5c:eb:3e:f1:f0:b1:3b:ad:e9:ad:d4:0c:2d:37:3e:
                    57:58:0d:df:29:17:b0:3e:4b:11:d4:9f:20:14:3d:
                    66:9f:44:5d:19:bf:50:b3:1a:1d:2f:8d:17:5a:a1:
                    b6:ab:c0:f3:3e:d5:80:ea:c0:92:ad:bf:c7:63:52:
                    09:fb:d6:4e:07:fe:e2:63:4b:11:d6:06:5d:17:e5:
                    c4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AF:2C:CF:98:CD:64:82:DA:77:20:EB:20:12:46:40:BF:1D:F1:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf7a6722-c795-3b59-a299-e24c3c2e9875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bf:79:f2:fb:97:ca:69:16:37:1e:e7:a4:e2:b0:79:5f:c4:
         06:89:62:34:b4:de:fe:20:e9:d1:6e:18:72:4d:72:7b:ad:ed:
         e1:58:82:0c:e8:4e:25:52:66:3e:6d:25:6a:b4:2a:75:36:c0:
         b8:41:4f:37:c5:66:8f:dd:94:66:59:45:ad:0e:c1:31:5e:ba:
         78:2b:46:f8:29:35:97:57:02:33:c8:10:13:56:17:61:6e:90:
         ad:ba:1e:52:ac:0e:d6:5e:84:53:fb:05:64:04:40:67:f8:53:
         82:78:d1:b2:b1:d9:d1:bb:a4:60:11:8e:28:92:8c:f7:c0:5b:
         a1:c6:88:29:4a:b1:c8:1b:aa:d5:63:62:8f:23:35:b9:a5:52:
         97:35:65:e7:d5:ec:7d:44:34:b7:27:a1:4a:f3:af:05:99:b9:
         9f:77:c6:d5:d8:d5:30:2e:90:ee:b4:29:8f:b0:34:b7:8f:0a:
         94:32:03:81:d2:a3:78:64:48:14:4c:4c:e0:42:e0:8f:e1:e1:
         74:49:03:90:4a:3f:21:5d:85:4e:db:fe:e3:6f:60:94:d5:9e:
         4b:cf:38:68:92:d5:79:65:b6:82:f9:10:73:48:ad:df:97:1d:
         33:51:1d:e3:bf:a7:75:e1:f8:78:11:c2:fe:b9:85:5f:9e:52:
         12:f8:c6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:45:25 2024 by rpki-client on console-ams.rpki-client.org