Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8d46ae9-f986-3efa-9c61-bc6c96fee09c.roa
File:                     e8d46ae9-f986-3efa-9c61-bc6c96fee09c.roa (raw, json)
Hash identifier:          I7jQ/uDNa9dv6CRvdnXROUjX/Qe+bhBFfaUg8W10N48=
Subject key identifier:   E1:B3:BF:DC:3E:CC:42:FF:F9:7D:39:15:D8:E9:71:A2:DC:16:08:AD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62B3293B2D237B3DCBBC3E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8d46ae9-f986-3efa-9c61-bc6c96fee09c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        34.102.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:32:93:b2:d2:37:b3:dc:bb:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6ec4ab37-4d6a-4e44-bb76-fc59e55f6e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:bc:ba:d8:53:36:cf:fc:80:fc:8c:ed:f1:
                    aa:d2:ae:49:81:50:84:4b:28:b6:6a:9a:3b:a0:43:
                    e9:64:4e:68:eb:05:d3:dd:d8:9e:ea:23:a5:34:db:
                    ec:9f:9b:bd:c7:bd:99:c8:7c:b8:c2:0d:1e:c2:3c:
                    e7:2e:12:d4:f6:f2:0c:bd:70:9b:1b:c4:31:58:2b:
                    77:a9:68:ec:1c:03:02:a7:2f:ea:7d:3c:bc:34:5f:
                    8a:a9:4a:cb:3d:72:06:6f:4c:1c:54:20:bb:01:75:
                    15:fc:96:d1:77:2d:20:06:98:11:7b:60:61:17:28:
                    b7:56:62:7a:93:bc:5a:a1:26:aa:5e:63:f0:d8:ed:
                    44:13:b2:c2:15:7f:3c:50:14:f3:dc:80:17:78:1e:
                    07:db:bb:fb:82:a4:11:6a:37:53:d0:2e:64:8c:1a:
                    22:26:f8:21:ce:96:89:9e:4b:61:b1:7a:69:00:d8:
                    7c:a1:a0:74:48:ca:a6:4d:68:b3:7f:ca:95:d8:9b:
                    cc:03:34:27:c9:b0:ed:1a:c0:23:ec:79:69:5a:91:
                    d3:9e:df:e1:ce:44:c1:d8:a5:f9:b0:a8:85:56:cd:
                    6a:e1:e8:b6:48:ae:33:f8:ce:a6:11:83:49:62:16:
                    b1:17:2d:f2:b0:62:e2:67:99:e0:ad:83:88:24:aa:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B3:BF:DC:3E:CC:42:FF:F9:7D:39:15:D8:E9:71:A2:DC:16:08:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8d46ae9-f986-3efa-9c61-bc6c96fee09c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.102.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:df:0e:af:cc:9b:56:c2:1b:8c:df:8b:37:f0:f7:14:7c:2a:
         9a:a7:c7:91:55:ea:16:82:ea:c9:a8:59:19:20:1b:c6:a0:bd:
         ac:2d:1c:1d:0f:fb:a7:b1:50:5f:6c:8c:57:10:2f:94:48:22:
         d1:a5:42:f3:b4:5f:82:c6:03:15:ad:59:ab:58:c6:fb:1a:bd:
         8e:78:13:ec:92:a2:8c:2e:9f:de:4e:66:b4:0c:d8:3f:08:4d:
         02:9d:71:96:2f:cd:d6:34:22:0e:8f:4d:77:5f:78:75:2d:15:
         78:23:d6:cf:ab:82:89:91:da:d4:29:71:23:0e:39:8c:7e:ed:
         78:f0:86:cf:9a:e0:f1:cf:6a:a1:79:88:ef:a5:d1:2c:eb:2b:
         88:09:41:ea:1c:f9:09:a3:33:09:21:59:c1:51:97:96:eb:b5:
         f9:1d:6c:de:fb:d0:ee:97:c1:ef:1e:f2:da:a6:6c:3c:1b:7e:
         44:14:9c:2c:39:cd:0e:e7:7d:13:1a:89:e6:db:30:b2:13:51:
         c6:3c:9a:6d:a9:59:92:01:35:72:b6:2c:04:8c:10:48:35:f0:
         f8:95:6d:59:c6:4d:c5:48:ae:30:b6:25:ad:f9:ab:be:2e:0a:
         ce:24:93:fe:b1:19:54:22:1c:4f:3f:99:9a:5f:89:eb:09:32:
         d3:df:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:08 2024 by rpki-client on console-fra.rpki-client.org