Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eab0afb2-c160-36d0-add4-48cdc404624b.roa
File:                     eab0afb2-c160-36d0-add4-48cdc404624b.roa (raw, json)
Hash identifier:          gpnxKv6nkLN6Nj0rJRUlxP0k7YGUO+H5BZhRUBWw54c=
Subject key identifier:   45:D2:99:C1:1B:17:66:1D:19:27:76:FB:D5:48:1F:F8:0E:22:A7:39
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462DB085A04DF497DD907AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eab0afb2-c160-36d0-add4-48cdc404624b.roa
Signing time:             Wed 20 Mar 2024 21:04:43 +0000
ROA not before:           Wed 20 Mar 2024 21:04:43 +0000
ROA not after:            Tue 18 Jun 2024 21:04:43 +0000
asID:                     19527
IP address blocks:        34.0.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:b0:85:a0:4d:f4:97:dd:90:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:04:43 2024 GMT
            Not After : Jun 18 21:04:43 2024 GMT
        Subject: CN=5744b5b3-26d7-4d69-a315-3d1d5f6f5bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:e2:5b:04:6e:a6:d4:f9:4b:17:f2:bf:c5:
                    27:e0:30:c0:0f:19:05:0b:99:d0:4b:34:c4:87:40:
                    43:38:f1:71:38:45:2f:9a:cf:45:56:64:11:c3:86:
                    46:62:3f:c2:19:c1:ad:c5:80:d3:16:9e:4d:ac:87:
                    25:4f:1e:6b:2e:2e:28:fb:d5:8e:4a:85:7a:20:e7:
                    b3:ad:05:44:15:6e:45:0e:23:78:2e:e2:93:cc:de:
                    08:dd:38:d4:a0:74:b5:d3:86:05:8f:4e:8e:0b:64:
                    f6:58:1e:28:66:f5:60:18:cd:6d:6a:bd:04:ea:52:
                    7f:b1:89:21:07:ed:1e:8e:b1:d0:72:21:ec:77:c4:
                    ea:e1:6a:95:f3:35:92:db:72:99:4e:ca:10:40:bf:
                    7f:10:1d:0d:77:72:76:85:e6:db:e6:16:14:4f:22:
                    64:23:96:c1:6d:dc:c4:2d:9a:24:cc:c3:58:b7:41:
                    ab:0e:79:85:47:5a:e7:9a:4a:bf:62:ce:a2:01:d4:
                    b3:71:f2:09:2b:ce:16:85:1a:f0:15:0d:2f:61:5c:
                    e4:31:50:d5:31:d6:db:d7:1c:92:89:e5:39:d4:a4:
                    63:85:9c:e6:35:cf:20:95:67:f2:e1:7b:1b:a1:96:
                    01:d3:7e:cd:e5:f2:0a:0f:7b:91:8e:56:92:7a:ff:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D2:99:C1:1B:17:66:1D:19:27:76:FB:D5:48:1F:F8:0E:22:A7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eab0afb2-c160-36d0-add4-48cdc404624b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:87:1b:bf:0f:11:c5:ae:e5:71:11:c0:f4:66:c2:db:0c:
         1d:3d:a1:c2:8c:af:4c:c7:a0:cc:df:49:b9:5f:15:2f:53:e8:
         2e:68:1f:3e:cf:07:cf:d6:85:32:04:80:6d:e3:b8:b5:87:93:
         e1:3a:17:a0:88:64:2b:3e:80:42:ec:b5:dd:3f:0c:30:6b:fc:
         89:e1:59:45:08:c2:c6:4f:a0:d3:24:5b:c6:d2:43:40:36:e5:
         4e:b7:fb:c5:2d:cd:6a:f3:1b:25:3d:c4:26:fc:3f:0c:99:84:
         1a:52:f1:a5:34:0c:bf:36:73:22:9c:f9:a1:46:1d:38:57:68:
         4c:70:50:a5:36:64:0c:90:7d:2a:e3:f8:51:1e:66:e8:12:59:
         d2:da:55:f2:04:a0:f2:26:40:5b:b2:25:88:f5:1d:7e:0f:20:
         f7:64:d6:83:e8:1d:d0:a4:31:3c:50:e1:06:da:a1:22:67:62:
         7e:a7:e1:7a:37:c1:8b:eb:fb:da:c3:11:b7:c4:e1:09:eb:dd:
         33:2a:8c:03:b7:88:b5:79:c1:a1:25:46:22:35:07:35:ed:48:
         fe:d1:9f:21:1a:68:df:63:df:4c:3b:f8:33:d6:36:80:85:eb:
         5c:90:93:7a:de:ad:41:05:05:37:e3:83:a4:67:41:de:db:36:
         ef:61:d9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:45:40 2024 by rpki-client on console-ams.rpki-client.org