Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e443cb0e-2c2e-3692-a6d2-b538882183fe.roa
File:                     e443cb0e-2c2e-3692-a6d2-b538882183fe.roa (raw, json)
Hash identifier:          A5iIscnEyPMDLdNQljww9Nzs3DApNjlONExkrFG6dxE=
Subject key identifier:   67:66:A7:1C:02:07:7C:47:93:C7:3C:F8:5E:29:15:A8:66:0F:95:3B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490AF4EF87285337A4B90080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e443cb0e-2c2e-3692-a6d2-b538882183fe.roa
Signing time:             Thu 21 Mar 2024 21:42:10 +0000
ROA not before:           Thu 21 Mar 2024 21:42:10 +0000
ROA not after:            Wed 19 Jun 2024 21:42:10 +0000
asID:                     396982
IP address blocks:        34.89.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0a:f4:ef:87:28:53:37:a4:b9:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:42:10 2024 GMT
            Not After : Jun 19 21:42:10 2024 GMT
        Subject: CN=80e91d83-2a0d-42a9-871e-07292b294567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5c:f6:66:5c:89:ef:88:a6:39:e4:21:b3:0e:
                    1c:db:e9:ab:99:10:32:7a:2f:e4:3a:ce:20:d6:1b:
                    2d:4d:ea:b5:b5:63:54:07:e5:ca:08:56:f6:89:0f:
                    12:88:cd:0f:d5:6f:c1:fb:33:47:fe:c5:51:ea:ab:
                    73:53:84:01:ea:9a:10:b1:a0:2e:54:95:f8:10:b9:
                    93:4c:17:ad:04:7c:5c:82:87:2b:18:36:95:11:32:
                    6b:75:4c:b0:22:77:69:97:38:eb:4b:b5:20:60:2d:
                    ba:76:15:6d:4f:5f:e0:a4:ea:6c:d9:a7:36:8a:1f:
                    dd:71:87:74:65:32:b7:d0:07:5a:8b:e8:3d:6b:ea:
                    e0:a2:04:e5:b0:ce:75:fc:ad:55:3e:61:b5:b1:45:
                    18:72:17:0e:70:cf:00:09:e6:4b:e8:8d:8c:73:83:
                    82:b6:a8:77:58:a4:8f:54:f5:ca:71:fd:06:a2:79:
                    f1:b5:b3:46:8a:5b:bd:8b:4f:f5:62:ef:c9:0a:0e:
                    1f:cb:33:b1:ec:3c:48:92:13:83:6f:c5:64:f1:9b:
                    d7:f3:1f:6f:91:ce:e8:43:4a:08:2d:5b:17:7b:63:
                    c1:b2:64:98:47:c0:7f:20:4b:8c:c5:a2:1f:43:cb:
                    d7:c1:34:42:4b:8b:cd:55:24:63:87:8a:a0:5e:d5:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:A7:1C:02:07:7C:47:93:C7:3C:F8:5E:29:15:A8:66:0F:95:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e443cb0e-2c2e-3692-a6d2-b538882183fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.89.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:35:fc:04:7c:73:47:21:b2:a4:83:36:74:74:d5:98:a9:26:
         85:0a:7f:e4:61:1f:92:da:c6:cf:42:0b:19:7f:65:d0:ff:07:
         31:e0:02:f7:63:7a:87:af:cb:6c:e6:fb:2b:a5:0d:ca:63:6c:
         2b:4d:46:43:45:b3:87:60:d6:f9:5f:b2:ea:34:6e:82:2d:54:
         bd:f5:98:ad:ec:7c:c2:2f:7c:1b:51:86:5c:c1:28:13:bf:7c:
         0d:a6:32:9a:c7:de:4b:21:81:e3:f9:f2:48:ce:e2:dd:a3:86:
         12:d5:0d:c5:9d:58:ee:df:95:90:ae:93:57:0c:18:da:d1:4a:
         7d:af:ad:38:ae:7b:ef:78:a0:c9:2f:e7:b3:44:72:d5:76:66:
         79:35:86:13:a1:65:55:cb:bb:bf:4a:28:db:2c:0e:af:5e:83:
         76:24:ae:58:6a:d4:a4:79:cb:a7:3f:0b:e1:76:4c:01:18:06:
         5c:a2:0e:e7:bb:11:6b:55:14:ae:40:38:7d:47:80:1d:f8:44:
         dc:e7:60:dc:09:fd:3a:32:c5:e5:7c:16:01:d3:3e:a7:05:e5:
         a4:06:6f:9a:da:23:8a:c6:16:c7:1f:92:a0:6f:46:dd:35:6a:
         24:e7:1f:8b:d7:03:4e:e3:28:d9:73:b8:d6:96:fa:4d:ba:03:
         d3:38:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:45:52 2024 by rpki-client on console-fra.rpki-client.org