Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa
File:                     8a5ecf25-e2b2-3327-9834-af1bffafca00.roa (raw, json)
Hash identifier:          c0SYd8IUMm/GDgmX+LQNIZwKepjQPq/H76cE6TcIqdU=
Subject key identifier:   41:E4:AB:9C:8D:37:E9:46:7A:11:BF:4C:8D:33:7F:6F:06:A2:1F:2D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F039A992DF3B0A7B0B3A540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa
Signing time:             Fri 29 Mar 2024 18:35:08 +0000
ROA not before:           Fri 29 Mar 2024 18:35:08 +0000
ROA not after:            Thu 27 Jun 2024 18:35:08 +0000
asID:                     15169
IP address blocks:        34.4.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:03:9a:99:2d:f3:b0:a7:b0:b3:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:35:08 2024 GMT
            Not After : Jun 27 18:35:08 2024 GMT
        Subject: CN=339b16fd-b908-47cc-9797-a8099701dc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:45:aa:54:1a:32:37:cd:e3:50:fb:41:8b:
                    06:8b:26:bc:6d:4e:6c:2b:24:87:b6:b6:93:99:e6:
                    05:e1:9b:e2:74:ed:9d:2d:3e:62:9b:87:2d:b0:f2:
                    0f:b9:c4:94:79:fc:6a:a3:29:6f:bf:15:35:d7:1c:
                    9f:c9:3c:e6:c7:43:f0:00:bc:ba:28:36:84:bb:10:
                    5d:79:5f:d4:b2:47:34:b9:45:0d:d2:27:6f:dc:9a:
                    36:d5:9d:e2:e9:69:d6:22:a0:9a:f9:40:b2:69:f0:
                    80:43:a9:d2:c4:a2:50:21:da:b4:46:eb:4d:58:be:
                    04:12:e5:48:48:d9:61:85:5f:0b:d5:b0:4c:73:a5:
                    f2:4c:80:50:5e:38:a6:05:15:33:f9:23:ff:9d:0c:
                    a3:7b:42:66:fb:cf:89:36:ef:cf:19:72:6a:38:d7:
                    6f:c3:da:d5:6d:9b:d6:bd:f5:1b:15:f8:85:2f:09:
                    6b:0a:01:21:9c:17:af:1a:c4:c0:9f:a4:77:4f:bb:
                    97:2f:6e:05:c0:07:09:44:1b:e3:7c:6d:6d:b3:61:
                    24:ca:20:27:eb:7d:a0:48:41:2d:ef:b6:00:cd:31:
                    11:e6:82:4c:19:8c:19:17:68:3a:2b:7c:ee:a2:7d:
                    92:29:db:14:3e:e4:0e:fa:f6:d1:3b:c0:a7:75:87:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E4:AB:9C:8D:37:E9:46:7A:11:BF:4C:8D:33:7F:6F:06:A2:1F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3e:f6:a4:01:55:26:c8:81:25:36:16:cc:90:a4:0c:a1:a9:
         32:67:b5:24:bf:6e:e8:02:19:d8:51:16:e9:b1:30:33:e4:3e:
         dd:4a:74:4b:4c:59:f9:e7:50:e8:ad:83:87:84:b1:5b:15:dc:
         9b:a8:d8:51:f5:02:43:3b:38:f8:bb:a9:93:ec:72:24:4b:ec:
         02:0b:72:30:c6:a7:ae:3d:a5:c6:f5:9a:7c:88:e2:03:30:4e:
         37:a1:9a:a4:56:7f:9c:27:be:8e:59:15:15:8b:8e:47:25:38:
         d9:62:7a:8e:1a:51:cc:85:0b:d5:a5:1c:11:2a:5f:8f:0b:16:
         92:6e:f9:13:6e:6c:07:49:7b:8a:79:7e:99:ef:09:7e:c8:43:
         19:ab:7d:f9:fa:aa:b7:23:62:33:50:ff:37:ef:d5:5a:89:49:
         2d:ae:a0:d5:2b:d5:2e:a4:87:cf:dd:46:c6:b0:0c:cb:67:f3:
         e9:94:16:bc:9e:16:10:7d:c2:25:90:73:e0:8e:67:2c:96:13:
         30:af:b4:44:c8:df:65:fa:c7:e5:4c:85:8a:7d:22:63:e2:09:
         1a:8e:ea:37:2e:37:e9:3a:e5:07:71:86:b1:a8:59:79:b8:8e:
         ec:9e:1a:3f:16:fb:5f:c8:e6:78:64:26:a0:73:88:ca:e6:59:
         c4:01:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:58:31 2024 by rpki-client on console-ams.rpki-client.org