Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6901ad2e-eb32-3587-95ce-97a1802062fe.roa
File:                     6901ad2e-eb32-3587-95ce-97a1802062fe.roa (raw, json)
Hash identifier:          8mIJ/PT103+GtQ9swd4Ejl3CNHCDLEfAIHMjEGCBAcY=
Subject key identifier:   EB:DC:A0:A8:69:B2:76:01:36:22:89:85:8F:D9:CA:48:6D:81:E4:71
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454628D00073C80F1779AD7080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6901ad2e-eb32-3587-95ce-97a1802062fe.roa
Signing time:             Wed 20 Mar 2024 20:54:53 +0000
ROA not before:           Wed 20 Mar 2024 20:54:53 +0000
ROA not after:            Tue 18 Jun 2024 20:54:53 +0000
asID:                     396982
IP address blocks:        34.119.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:d0:00:73:c8:0f:17:79:ad:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 20:54:53 2024 GMT
            Not After : Jun 18 20:54:53 2024 GMT
        Subject: CN=4d58ad89-0bf6-45e7-8cdf-c4b948926ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:ca:e8:47:2e:39:98:f4:c6:ae:aa:73:94:
                    81:69:2e:41:11:df:24:e0:76:ac:e6:09:b7:d4:12:
                    ad:9f:03:9b:7a:1c:e5:7a:b9:0b:a7:cb:cc:90:6c:
                    f4:a3:f0:c8:b8:62:c2:9a:23:07:f6:2e:cc:c7:75:
                    fb:e9:38:c8:8e:7b:65:60:92:66:0b:5e:0f:60:7c:
                    9c:ea:b6:d5:a5:02:9c:25:92:87:2a:3b:b8:8c:3c:
                    da:96:46:04:68:29:cb:5b:5c:f1:7b:bb:c0:68:fe:
                    13:0b:aa:8d:f3:4a:2d:cc:ed:47:25:11:c7:ad:27:
                    46:fb:bd:e2:a6:6c:a2:a0:bd:59:56:70:5f:5d:3e:
                    70:ef:1e:fd:c6:63:66:66:8f:02:81:a2:09:9c:c0:
                    19:79:80:27:65:ed:9f:78:1b:c6:3e:ef:8f:c1:3e:
                    82:94:5d:bd:7a:0c:22:6d:31:2a:0a:67:e5:67:79:
                    77:dd:f0:92:1b:95:4d:f4:72:15:83:f2:51:f2:b5:
                    92:c1:07:8a:da:0c:b9:33:dc:4a:45:fe:f4:f3:45:
                    c6:bb:06:0b:49:d1:c4:29:60:27:e4:9e:0b:49:ab:
                    ca:56:54:a5:75:34:f1:84:7c:43:ca:0b:fa:47:cd:
                    3b:ec:d7:96:65:6b:2c:aa:b5:53:c6:b6:83:5c:1e:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DC:A0:A8:69:B2:76:01:36:22:89:85:8F:D9:CA:48:6D:81:E4:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6901ad2e-eb32-3587-95ce-97a1802062fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.119.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:68:f8:3a:b6:50:5f:36:fd:11:15:f4:1a:af:6c:3e:56:2c:
         ef:01:2f:ac:40:f8:25:17:73:41:14:ac:10:14:ae:15:71:a0:
         84:45:23:ec:38:77:a2:0b:8c:49:f1:f2:07:5a:56:9a:07:78:
         2d:b1:ad:ab:a1:84:59:f1:c8:5d:98:aa:24:0f:75:94:60:9b:
         99:db:01:ee:97:c0:b2:05:ed:e1:57:d9:47:6d:f6:22:83:6e:
         b2:48:9c:52:08:0a:4d:db:c3:69:ca:65:44:f1:ab:60:98:e9:
         4c:01:ca:00:9a:9f:e7:d4:50:30:ad:8d:5e:bb:a2:a2:e2:86:
         de:c7:44:b8:fb:4d:05:d1:98:e1:76:82:90:00:f7:7e:18:82:
         8e:07:15:24:66:36:f1:b5:c5:1b:35:34:eb:1b:5b:b4:72:a3:
         e3:57:81:b2:29:07:cd:d0:ed:a2:23:14:d6:f9:54:26:c0:28:
         cf:e4:06:91:ac:d0:83:46:47:ef:e6:0c:d0:c0:c0:ee:37:c5:
         4c:3c:c7:10:78:12:ab:b7:5c:40:1c:ee:cb:e4:ee:a3:fa:3a:
         da:93:9f:9e:2a:7f:ef:61:e0:32:20:33:5e:76:e1:8b:0f:af:
         67:6f:23:39:54:22:b4:f9:4b:01:c8:3e:fa:3a:ca:9f:cf:28:
         b2:de:24:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKNAAc8gPF3mtcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMDIwNTQ1M1oXDTI0MDYxODIwNTQ1M1owLzEtMCsGA1UEAxMk
NGQ1OGFkODktMGJmNi00NWU3LThjZGYtYzRiOTQ4OTI2YmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwnK6EcuOZj0xq6qc5SBaS5BEd8k4Has5gm3
1BKtnwObehzlerkLp8vMkGz0o/DIuGLCmiMH9i7Mx3X76TjIjntlYJJmC14PYHyc
6rbVpQKcJZKHKju4jDzalkYEaCnLW1zxe7vAaP4TC6qN80otzO1HJRHHrSdG+73i
pmyioL1ZVnBfXT5w7x79xmNmZo8CgaIJnMAZeYAnZe2feBvGPu+PwT6ClF29egwi
bTEqCmflZ3l33fCSG5VN9HIVg/JR8rWSwQeK2gy5M9xKRf7080XGuwYLSdHEKWAn
5J4LSavKVlSldTTxhHxDygv6R8077NeWZWssqrVTxraDXB45eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvcoKhpsnYBNiKJhY/ZykhtgeRxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjkwMWFkMmUtZWIzMi0z
NTg3LTk1Y2UtOTdhMTgwMjA2MmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIndAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRo+Dq2UF82/REV9BqvbD5WLO8BL6xA+CUXc0EUrBAUrhVxoIRFI+w4
d6ILjEnx8gdaVpoHeC2xrauhhFnxyF2YqiQPdZRgm5nbAe6XwLIF7eFX2Udt9iKD
brJInFIICk3bw2nKZUTxq2CY6UwBygCan+fUUDCtjV67oqLiht7HRLj7TQXRmOF2
gpAA934Ygo4HFSRmNvG1xRs1NOsbW7Ryo+NXgbIpB83Q7aIjFNb5VCbAKM/kBpGs
0INGR+/mDNDAwO43xUw8xxB4Equ3XEAc7svk7qP6OtqTn54qf+9h4DIgM1524YsP
r2dvIzlUIrT5SwHIPvo6yp/PKLLeJF4=
-----END CERTIFICATE-----
Generated at Sun May 5 15:49:23 2024 by rpki-client on console-ams.rpki-client.org