Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa
File:                     d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa (raw, json)
Hash identifier:          KEcHVBPeaozaVTwpC2WI392RoftLWQ0pd8y+KY/Iub4=
Subject key identifier:   41:E7:52:B8:18:FF:97:6C:9F:B7:77:8F:EB:18:8D:1A:2F:3D:6E:F9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F51035A6A73C48140A7020
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.134.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:10:35:a6:a7:3c:48:14:0a:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=1813ef1b-dcef-4e85-b6ac-e88922f0857b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:f9:e1:2e:3a:96:10:40:54:88:f5:46:96:
                    ab:8a:83:51:53:48:d7:38:7b:1c:3a:fd:74:68:b3:
                    e9:38:d1:70:19:c0:51:4e:05:81:25:8f:bd:2f:c9:
                    45:66:48:be:7b:f5:46:8f:68:e3:ed:d1:de:43:0c:
                    ad:65:7d:cb:df:57:23:41:0b:e8:71:81:f0:00:c3:
                    47:43:31:69:08:ca:4b:04:da:98:ea:74:9a:65:e5:
                    89:56:99:f1:00:9d:a4:44:fa:1f:01:27:8a:b8:5c:
                    d4:70:92:5b:31:dc:85:1e:d2:be:39:bd:62:cf:9a:
                    ef:5c:90:53:4e:e2:63:37:fb:0d:60:09:e7:40:39:
                    3c:75:e4:3d:f3:ee:c2:e5:9e:9c:44:95:75:01:15:
                    78:e4:33:d7:67:7f:ee:ce:7a:e1:e4:e9:f4:c1:1b:
                    43:f8:69:19:5c:af:0a:a3:63:f2:32:de:e7:a7:e2:
                    c6:9c:44:cb:13:94:49:8f:9b:19:2a:35:a4:78:23:
                    9e:28:dc:48:5e:53:db:6c:b2:c6:ca:61:8b:eb:1c:
                    5b:2c:39:eb:90:33:f6:66:28:4c:ea:c8:70:50:66:
                    31:75:fe:7e:1f:93:8e:ab:3e:0f:2b:eb:09:03:78:
                    86:75:20:0f:41:4f:87:4f:c5:c8:70:b0:0b:4f:5f:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E7:52:B8:18:FF:97:6C:9F:B7:77:8F:EB:18:8D:1A:2F:3D:6E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.134.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2e:5e:94:b0:70:28:db:8e:c8:30:eb:8a:27:72:57:21:4e:
         bc:13:84:19:9d:56:1f:53:e3:64:0a:b2:c1:f7:f3:56:ff:86:
         f8:49:5c:a3:bf:ab:98:db:3b:dc:0a:0d:70:3e:f8:0d:a6:7d:
         20:93:10:0b:3b:23:58:32:5f:56:dd:f8:75:01:e7:51:51:98:
         a2:8e:c6:1e:99:f0:ef:1e:a4:30:fb:b2:3a:95:1d:6e:ca:b0:
         67:91:ba:5c:5d:b9:c8:14:d5:05:60:02:a4:e0:49:a1:02:ad:
         2f:97:44:b2:0f:b0:28:06:af:06:07:83:12:78:0e:a8:c1:ef:
         78:59:5c:7e:d7:0b:21:ba:04:fe:96:f8:88:d1:00:ac:3a:37:
         9b:ca:65:83:5c:c5:e9:68:6b:bd:c8:af:e1:87:87:c8:82:ae:
         8f:15:d7:61:11:77:70:e2:ef:7f:a1:21:b3:7e:f9:ca:d2:67:
         8e:e1:64:3b:2e:6e:57:f0:45:8f:cf:8b:b4:ea:be:34:09:ff:
         a0:88:ba:86:03:10:ad:8f:dd:74:c8:9e:79:54:18:a8:65:44:
         d4:7e:76:77:2b:66:a1:94:7c:9a:a8:fe:9a:bf:fc:86:dc:3d:
         7a:b3:47:61:b3:26:65:f9:53:61:90:77:f5:4c:53:05:a0:69:
         df:e3:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:01 2024 by rpki-client on console-fra.rpki-client.org