Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdb95f4d-d333-3aa8-b924-e196fcd967e7.roa
File:                     fdb95f4d-d333-3aa8-b924-e196fcd967e7.roa (raw, json)
Hash identifier:          7QA23BLW0Mitd1R6CZoExu228LdeQdGh9iwpvR47BfE=
Subject key identifier:   F5:A1:9C:F4:A0:F4:73:48:0E:68:E8:AC:7B:31:15:09:D7:55:96:62
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F5388380ABD251D866AC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdb95f4d-d333-3aa8-b924-e196fcd967e7.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        34.185.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:38:83:80:ab:d2:51:d8:66:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=431c382d-cfc2-49f0-8480-b55a218ed3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:9e:b5:97:98:6f:86:6d:3c:78:7a:a0:cb:
                    30:cc:f3:23:8c:6a:0e:87:36:47:e0:15:c5:62:6f:
                    17:4b:25:bc:e4:aa:d7:f8:13:43:9d:a4:45:26:93:
                    29:2a:9e:14:a5:ba:b1:fe:c2:d4:16:0c:57:b4:35:
                    39:79:63:bc:2c:25:e9:8c:25:37:ed:1d:30:17:95:
                    3f:9b:29:78:43:ef:59:b3:8c:af:72:33:4a:5a:c4:
                    a7:5b:89:38:1d:00:3b:17:87:14:7a:55:f6:65:4d:
                    b0:d5:89:cc:d9:28:c3:24:a4:b1:03:eb:a9:fa:b4:
                    d5:5a:d9:2a:ae:f6:c8:9b:05:fe:0d:9a:cf:d3:f6:
                    df:01:8f:b5:bc:73:18:c0:e5:1c:b1:43:16:cf:c6:
                    65:83:65:c4:4a:6b:20:e4:ac:bf:4b:81:7c:be:96:
                    38:79:e5:28:d8:19:29:0f:4b:f9:f0:49:4a:66:04:
                    c8:a6:52:00:c8:95:33:b7:1f:f2:90:3c:d9:9b:ca:
                    b2:c3:8d:99:da:8a:44:2c:9e:d3:d1:4d:a5:b4:bb:
                    ae:cd:04:ab:38:68:2f:e5:05:63:21:09:84:f4:48:
                    d3:ef:41:ef:f4:0f:3f:9d:24:b4:28:e2:bb:0c:33:
                    cf:89:ca:f3:4a:4e:48:b1:e7:ed:49:e3:42:8f:b0:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A1:9C:F4:A0:F4:73:48:0E:68:E8:AC:7B:31:15:09:D7:55:96:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdb95f4d-d333-3aa8-b924-e196fcd967e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4e:76:e8:80:63:66:4a:d4:0c:c9:47:8b:78:34:15:81:ec:
         14:5e:e9:62:7e:2a:3e:d2:91:56:8a:4d:ad:e8:6e:ab:56:1d:
         e9:3b:05:de:18:ba:d2:21:9a:74:b9:f3:f7:58:dc:13:d9:d0:
         77:7d:2a:e9:29:bb:19:1e:4a:6e:0e:d5:7d:d5:61:9c:55:18:
         9b:54:79:80:be:01:d0:b1:0e:a5:77:05:7a:d1:c1:c6:42:81:
         b8:79:94:62:70:63:82:03:9a:42:d0:3f:ec:97:db:08:f1:de:
         3c:a5:33:e0:c5:31:35:e8:f9:ed:89:0f:54:87:1d:22:5d:60:
         ac:fc:3b:45:8f:b7:14:03:e2:95:56:45:e1:f4:f9:39:b3:ea:
         d9:53:06:77:eb:5d:84:89:8a:11:5e:13:9f:37:20:cd:ca:b0:
         38:ed:e9:f3:78:5e:0c:7a:87:da:0a:f3:d1:2f:70:b4:a1:92:
         ab:63:05:83:33:54:f9:ab:6b:a9:31:58:fd:37:c6:75:c4:99:
         f6:31:2c:6a:72:6c:80:0b:dd:d7:c7:9c:e7:08:21:8b:b7:38:
         41:fe:57:d4:5f:d9:0f:cf:30:3a:91:1a:40:0d:0c:84:53:fb:
         7b:a2:9a:43:91:13:e6:b2:20:4a:75:6c:42:d0:5a:8c:09:d0:
         93:2d:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:11 2024 by rpki-client on console-fra.rpki-client.org