Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbafee96-80c1-3c1e-96ff-79ab0110df8c.roa
File:                     fbafee96-80c1-3c1e-96ff-79ab0110df8c.roa (raw, json)
Hash identifier:          7oHklRY7r0b6z61C1VYctkboIC9t3tAGdX3XTkYHU/A=
Subject key identifier:   F2:7A:3F:D4:4F:C4:63:B2:EC:8B:5D:50:02:1E:0C:AE:08:96:00:74
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584789EC02BDAE3D429FAE775480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbafee96-80c1-3c1e-96ff-79ab0110df8c.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     19527
IP address blocks:        34.1.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:ec:02:bd:ae:3d:42:9f:ae:77:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=4b72648e-6f7b-4f55-9ec0-471790034a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:23:af:4c:b7:8f:1a:a0:92:42:30:59:37:
                    ae:94:06:1a:d8:33:7c:93:f7:74:0e:91:e0:6e:95:
                    91:f4:e5:4a:75:6c:1b:3f:c5:fa:e3:e8:f5:c4:e6:
                    5f:7d:d3:6f:14:83:4c:5f:9f:08:8a:0e:c1:75:b5:
                    e4:27:90:3d:03:a5:40:7b:58:68:a2:bd:a6:14:73:
                    62:76:26:74:8c:2a:55:1c:22:50:35:5b:59:99:7b:
                    3d:2a:07:9d:5a:c9:48:e2:af:46:3a:b3:2b:e2:4d:
                    7d:c9:fb:9e:8b:a1:07:31:36:fe:4d:ec:62:9a:74:
                    93:7f:7a:6e:ac:0e:1b:78:d0:3d:ae:f6:b7:93:38:
                    ba:e8:6d:0c:c0:ce:f3:fa:fa:4d:45:9e:60:9b:46:
                    69:71:64:a0:6d:34:c9:cf:f2:42:7a:40:7d:9b:66:
                    31:ab:5b:75:9c:6c:5d:12:70:7b:e5:bb:f3:c1:d4:
                    01:5e:a2:5a:dd:a5:21:eb:ca:12:0b:5d:44:fd:d0:
                    53:1a:2f:49:53:d1:42:a2:75:9c:e3:ba:f3:a0:5f:
                    e9:54:e2:5c:fc:42:64:68:b9:15:fe:48:84:c2:e5:
                    c6:72:78:34:68:db:82:92:de:4c:83:ce:d9:17:a6:
                    82:18:2f:c7:30:59:d5:52:64:cd:e0:b8:96:5c:df:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7A:3F:D4:4F:C4:63:B2:EC:8B:5D:50:02:1E:0C:AE:08:96:00:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbafee96-80c1-3c1e-96ff-79ab0110df8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b4:ae:82:fe:22:fc:45:5a:13:b1:de:b2:cf:04:9d:3d:6b:
         c0:37:15:22:7f:de:e7:10:4a:00:5b:89:90:d1:c2:92:e8:be:
         cf:8e:bf:ff:5e:d7:f2:d0:eb:d8:ff:85:df:a8:15:1c:85:a6:
         cf:47:81:d7:b3:42:42:2d:c7:0d:c3:ed:f3:b4:ed:b7:f9:09:
         e6:91:5d:26:23:ec:d8:6d:eb:48:08:8e:2f:09:f3:18:2f:72:
         ea:30:43:69:3f:c7:31:3c:e2:20:a3:c5:d2:2d:9c:c9:19:75:
         96:ac:7f:b6:94:3a:df:94:8e:ec:bb:76:e6:7b:6b:a9:a7:6c:
         87:4e:2f:62:0f:08:bc:ce:7e:75:46:d5:b8:a6:80:8a:31:55:
         70:51:ce:0a:ff:a3:6c:23:ee:e9:81:0e:6c:24:74:f7:df:ba:
         33:9c:b1:19:28:8a:e8:8e:79:a4:7d:ed:34:a9:72:fb:91:9e:
         37:ed:e2:bc:55:2e:52:34:80:18:5a:1b:9a:a8:33:1b:70:21:
         52:ed:7b:bc:04:96:4f:d8:1d:38:d0:97:6f:29:0e:16:a4:f2:
         b1:16:c3:53:90:82:ad:fa:33:15:ab:3e:51:9c:47:db:54:f4:
         b1:bb:fa:37:18:9f:34:1c:45:08:78:68:8f:23:7d:f5:5d:85:
         9a:07:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:05:43 2024 by rpki-client on console-ams.rpki-client.org