Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df5708b4-661c-32f5-9694-adfc50bc2bc0.roa
File:                     df5708b4-661c-32f5-9694-adfc50bc2bc0.roa (raw, json)
Hash identifier:          Wabx9dHpb8RQFp/qgQBKuMp33QgMtBaMhvUBcMPh0OA=
Subject key identifier:   08:8C:7E:17:46:3E:E9:23:D3:76:F2:45:36:1B:9F:74:53:EC:F4:5F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584546284E3C7EBA821F15130A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df5708b4-661c-32f5-9694-adfc50bc2bc0.roa
Signing time:             Wed 20 Mar 2024 20:53:52 +0000
ROA not before:           Wed 20 Mar 2024 20:53:52 +0000
ROA not after:            Tue 18 Jun 2024 20:53:52 +0000
asID:                     15169
IP address blocks:        34.0.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:4e:3c:7e:ba:82:1f:15:13:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:53:52 2024 GMT
            Not After : Jun 18 20:53:52 2024 GMT
        Subject: CN=6b2fd8ef-3c6b-4922-a806-491fe02abc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:18:6c:e3:bb:f0:3a:0f:f2:54:9b:9a:16:
                    7e:69:30:b9:de:62:14:20:b4:5c:78:34:8a:c9:9a:
                    a5:a1:f6:03:4c:4e:86:6e:f0:03:a8:8a:2f:d4:e9:
                    c7:74:fd:1d:f2:c9:52:92:cf:7d:fb:a8:79:ff:a6:
                    77:8d:73:14:c2:62:1f:69:12:02:59:c0:7e:89:79:
                    b6:6f:a3:30:71:a1:4a:86:95:10:d4:eb:d9:dd:e6:
                    fa:17:5d:a5:81:3b:0c:64:05:47:eb:e3:9d:5f:97:
                    d1:c6:70:c8:0f:ee:73:c8:bc:1a:38:ce:54:49:98:
                    e8:da:2f:d8:0e:5f:f9:94:71:a3:04:21:8f:92:85:
                    36:10:7f:cd:48:b4:8d:01:c6:95:1e:a5:d3:63:e9:
                    f1:c2:ef:f5:52:12:18:47:27:2a:a1:ec:d8:56:76:
                    aa:85:f8:39:ae:98:e4:89:6c:b1:f5:07:20:47:99:
                    d2:cf:1b:58:13:9a:b0:6e:7c:bf:e5:69:53:15:38:
                    89:53:5b:a8:3c:15:09:19:4e:44:83:29:81:7b:9f:
                    63:b2:05:34:e9:a0:74:c7:cc:f7:6e:a4:1b:98:01:
                    a9:e6:65:b5:5a:d2:33:ed:8a:19:75:63:e7:3b:72:
                    4f:36:a0:cb:f6:23:a7:39:73:f0:54:50:0b:80:77:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:7E:17:46:3E:E9:23:D3:76:F2:45:36:1B:9F:74:53:EC:F4:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df5708b4-661c-32f5-9694-adfc50bc2bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:2b:9f:e6:a0:5f:0b:42:cb:9d:1d:0d:00:96:94:9d:1d:fc:
         1d:03:60:21:0d:9b:39:36:ad:24:2f:25:37:67:f8:9e:c5:8f:
         98:df:f8:0a:da:de:5f:b5:d8:64:b3:38:90:71:6b:92:82:6b:
         34:ca:76:f9:aa:ef:4d:6c:45:05:8f:ac:78:f2:9b:f1:4c:da:
         7d:59:a5:d4:f6:d3:27:07:87:96:17:33:d8:47:49:d0:b6:2f:
         90:6a:62:c6:48:3f:a7:d3:6b:c6:5f:29:38:7d:ab:bc:2b:ac:
         92:18:67:28:d3:97:2b:51:31:ab:8c:04:0a:7a:d1:ff:32:a7:
         b8:aa:a8:62:10:3e:a6:be:97:25:88:34:21:b2:0a:6f:f6:46:
         aa:43:81:45:3d:d9:71:4e:de:76:6c:e7:08:6a:2c:c9:cb:6f:
         05:cf:f5:fd:55:1e:41:d8:0d:47:85:e2:de:aa:d1:ed:0a:2f:
         70:d1:48:62:d9:a8:d3:88:83:00:ef:90:7e:e4:81:d6:8c:57:
         af:91:7a:b1:4f:a1:fc:e6:ec:e2:9f:f7:79:7c:a3:c5:b1:12:
         04:ce:03:83:37:56:fe:30:8f:ea:0d:27:1c:e8:48:52:c3:8a:
         b0:42:0c:38:4a:a2:cd:ce:53:7e:26:8b:5a:d6:84:42:4b:ae:
         7b:a5:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:45:34 2024 by rpki-client on console-ams.rpki-client.org