Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0249ee6-29d4-3c15-904b-fcabf5e7ca71.roa
File:                     f0249ee6-29d4-3c15-904b-fcabf5e7ca71.roa (raw, json)
Hash identifier:          mIOy1nj0Sjz6raTt4SzMw/RyZ/ke4pqJR3bCVx9PSU4=
Subject key identifier:   71:CC:0F:7F:C2:11:DC:C4:4B:C6:EA:2D:79:72:24:90:9F:3E:48:7C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490102BDEACF2CEAF7BAC180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0249ee6-29d4-3c15-904b-fcabf5e7ca71.roa
Signing time:             Thu 21 Mar 2024 21:22:07 +0000
ROA not before:           Thu 21 Mar 2024 21:22:07 +0000
ROA not after:            Wed 19 Jun 2024 21:22:07 +0000
asID:                     139070
IP address blocks:        34.64.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:01:02:bd:ea:cf:2c:ea:f7:ba:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:22:07 2024 GMT
            Not After : Jun 19 21:22:07 2024 GMT
        Subject: CN=ad71f93e-4a5b-4266-a0bd-48661cdde6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:87:07:dc:16:97:68:ae:49:dc:d7:a5:93:
                    c5:b5:b4:dd:8b:54:ec:8f:da:9c:58:d7:a5:1b:2a:
                    f4:c5:43:e8:04:06:b0:68:35:d8:20:40:5a:44:84:
                    25:2c:a1:cb:3f:20:0e:14:cb:83:cd:4b:b4:4d:b3:
                    ea:b8:77:71:fd:6d:17:72:23:d0:77:18:6f:80:de:
                    cb:7e:03:fa:1a:e3:ce:fa:77:b0:2d:f3:52:98:54:
                    74:a8:92:1a:12:03:06:97:6e:d6:05:78:db:fe:ce:
                    60:fa:f0:6b:a3:08:2c:c0:97:0c:38:95:34:e1:ee:
                    be:c4:69:ed:1f:77:59:9e:71:22:11:03:44:30:57:
                    81:f2:e1:09:1a:98:19:bc:54:75:9d:78:b8:9d:60:
                    ff:b2:62:be:55:a8:e8:83:48:aa:83:10:3c:0c:80:
                    83:a3:5a:5c:11:1e:b8:51:78:3e:a0:17:7b:7f:7e:
                    73:7e:b1:cd:99:06:f0:d5:34:a7:6c:48:bb:14:91:
                    84:c1:3a:73:16:ce:d4:ea:e1:48:e2:5d:05:26:46:
                    2c:c3:c8:42:fd:50:38:eb:37:5e:9d:b7:93:44:42:
                    20:d1:9a:c0:af:b9:48:c8:64:73:5b:6c:23:4c:2f:
                    37:71:b4:60:6a:36:9e:fe:16:39:6b:84:de:dd:df:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CC:0F:7F:C2:11:DC:C4:4B:C6:EA:2D:79:72:24:90:9F:3E:48:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0249ee6-29d4-3c15-904b-fcabf5e7ca71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:a5:02:6d:f4:56:2b:67:bf:25:a7:ff:ad:e2:44:d7:30:
         22:f2:e3:b9:02:d3:38:33:c1:42:0d:8f:42:5f:67:1b:29:d5:
         62:36:2a:ab:da:09:0d:53:63:5f:61:d0:78:46:f2:09:b8:16:
         b4:d7:e1:8c:eb:ed:05:f0:93:12:3d:f4:c9:6b:f7:b1:65:72:
         4f:bd:d9:5c:ed:80:8c:79:fc:01:9d:c3:97:1a:00:82:3d:75:
         a2:26:84:52:42:8b:b7:d4:0a:79:4f:44:93:6a:69:e3:db:45:
         3c:d5:3d:4e:2b:c1:83:e7:ed:0f:51:49:ab:7b:a9:f5:2d:cb:
         ee:3a:45:84:8a:27:d9:28:55:be:2a:e5:68:f9:12:18:73:e7:
         67:6f:a1:6f:a9:ab:14:73:d2:3f:71:bb:78:d0:5b:8e:5e:56:
         8e:16:fb:7d:2a:6b:d8:88:5b:32:b0:9e:60:b2:9b:bf:c7:2d:
         d8:5c:84:34:ce:42:17:fa:2f:0a:60:61:b1:c7:28:b0:12:1b:
         0b:52:b3:7a:4c:4c:55:aa:ef:94:32:17:b7:c9:84:5b:18:fd:
         03:67:ec:63:01:db:12:59:17:ac:89:11:75:07:96:0d:4a:ae:
         89:7a:67:89:87:e3:51:00:74:66:e2:74:d0:1c:da:3b:01:37:
         b7:f5:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:23 2024 by rpki-client on console-ams.rpki-client.org