Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d21f804-98f0-351c-a1e7-001fd47cc9ab.roa
File:                     6d21f804-98f0-351c-a1e7-001fd47cc9ab.roa (raw, json)
Hash identifier:          BhglvabY/sz4T2+H+vDgHucIuaFdbdPWzaXFe8/Gvmk=
Subject key identifier:   39:19:A8:F7:82:FF:3D:E2:10:31:78:44:89:B1:51:E5:3E:DF:A0:D1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FEC205CA6E1F6992344580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d21f804-98f0-351c-a1e7-001fd47cc9ab.roa
Signing time:             Thu 21 Mar 2024 21:17:35 +0000
ROA not before:           Thu 21 Mar 2024 21:17:35 +0000
ROA not after:            Wed 19 Jun 2024 21:17:35 +0000
asID:                     396982
IP address blocks:        34.125.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fe:c2:05:ca:6e:1f:69:92:34:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:17:35 2024 GMT
            Not After : Jun 19 21:17:35 2024 GMT
        Subject: CN=d098c889-8345-4498-a577-636d1369e78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:65:2a:ea:7a:dc:20:57:74:12:35:2f:32:
                    85:74:56:82:58:4c:f7:ba:9f:de:86:e4:63:73:c0:
                    d3:02:bc:70:fe:03:72:f1:6a:12:d9:4e:0c:63:e3:
                    49:87:43:ce:62:f8:0e:86:04:83:a2:4f:3a:fe:06:
                    8f:0d:11:da:af:c4:d5:13:3c:15:ba:26:f9:ae:3b:
                    c9:97:45:2c:cb:84:68:af:58:77:60:48:9a:e5:8a:
                    d4:c5:be:3a:47:27:51:61:78:77:cf:69:b3:52:d0:
                    09:53:15:bb:06:fc:75:25:6f:c1:c0:ca:e7:4a:a0:
                    5e:80:64:c0:e9:63:db:e2:2b:94:5d:e8:14:b6:ef:
                    54:e7:dc:f2:12:02:95:c1:c1:ee:dc:eb:66:cf:d1:
                    c1:84:92:f3:e8:11:ca:06:60:d8:7c:06:77:a8:83:
                    60:ae:35:0a:f0:22:a2:f5:58:87:0d:20:ad:0a:14:
                    45:56:16:76:3f:f0:15:9b:ec:59:28:77:61:db:15:
                    8e:f5:2f:07:11:f9:de:34:a2:1a:4e:f0:ef:3b:ea:
                    7c:04:5c:8e:63:e5:73:19:35:6e:87:4e:3f:83:ac:
                    fe:e0:e6:08:be:95:6a:5c:7a:c3:2a:21:4c:2a:d7:
                    d9:79:04:20:3d:8e:97:f3:af:2c:49:c0:3c:f2:3b:
                    af:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:19:A8:F7:82:FF:3D:E2:10:31:78:44:89:B1:51:E5:3E:DF:A0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d21f804-98f0-351c-a1e7-001fd47cc9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.125.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8c:2c:4b:c1:4f:dd:bb:2e:49:3e:a8:0c:e9:83:aa:e5:b5:
         cc:e6:4a:7c:25:28:2d:cc:cc:4b:e2:bd:b6:cf:b9:ba:66:d8:
         ab:9e:d9:6d:b9:35:fb:80:5f:0d:37:aa:93:2c:ea:07:fe:a2:
         9a:e6:eb:58:12:03:1e:71:42:66:a9:65:27:63:a1:5c:fb:be:
         1d:f6:d6:b6:b8:55:6f:a0:66:12:79:dc:e8:44:a7:6a:16:09:
         ae:08:09:ff:2e:1c:6a:f5:ad:16:a9:25:b5:09:45:bf:6d:c7:
         ce:50:19:a9:db:93:fb:c6:16:95:91:db:73:cc:2a:f8:03:fe:
         6e:c7:af:b4:d9:bf:8d:9f:72:a7:10:ad:ab:e8:c5:d1:62:a2:
         48:1a:ff:e2:38:d5:29:e2:0d:b3:95:56:95:af:40:af:ea:ed:
         43:09:8d:01:33:bf:e7:ef:10:66:f9:d1:7b:5d:25:48:9a:e7:
         8e:73:d5:23:cf:5a:f4:f4:70:46:33:3f:83:5a:79:cc:6f:2d:
         93:82:68:69:6f:c5:c8:b5:b3:29:f2:85:d3:48:3e:75:73:cb:
         24:1f:32:06:c8:cd:49:9e:f8:48:3c:67:8b:07:95:bc:88:7b:
         fa:a0:d7:b9:d1:56:7b:84:f7:f6:69:4f:26:40:18:4a:25:97:
         cb:99:6c:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/sIFym4faZI0RYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMTczNVoXDTI0MDYxOTIxMTczNVowLzEtMCsGA1UEAxMk
ZDA5OGM4ODktODM0NS00NDk4LWE1NzctNjM2ZDEzNjllNzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8xlKup63CBXdBI1LzKFdFaCWEz3up/ehuRj
c8DTArxw/gNy8WoS2U4MY+NJh0POYvgOhgSDok86/gaPDRHar8TVEzwVuib5rjvJ
l0Usy4Ror1h3YEia5YrUxb46RydRYXh3z2mzUtAJUxW7Bvx1JW/BwMrnSqBegGTA
6WPb4iuUXegUtu9U59zyEgKVwcHu3Otmz9HBhJLz6BHKBmDYfAZ3qINgrjUK8CKi
9ViHDSCtChRFVhZ2P/AVm+xZKHdh2xWO9S8HEfneNKIaTvDvO+p8BFyOY+VzGTVu
h04/g6z+4OYIvpVqXHrDKiFMKtfZeQQgPY6X868sScA88juvXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkZqPeC/z3iEDF4RImxUeU+36DRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmQyMWY4MDQtOThmMC0z
NTFjLWExZTctMDAxZmQ0N2NjOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn3QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSMLEvBT927Lkk+qAzpg6rltczmSnwlKC3MzEvivbbPubpm2Kue2W25
NfuAXw03qpMs6gf+oprm61gSAx5xQmapZSdjoVz7vh321ra4VW+gZhJ53OhEp2oW
Ca4ICf8uHGr1rRapJbUJRb9tx85QGanbk/vGFpWR23PMKvgD/m7Hr7TZv42fcqcQ
ravoxdFiokga/+I41SniDbOVVpWvQK/q7UMJjQEzv+fvEGb50XtdJUia545z1SPP
WvT0cEYzP4NaecxvLZOCaGlvxci1synyhdNIPnVzyyQfMgbIzUme+Eg8Z4sHlbyI
e/qg17nRVnuE9/ZpTyZAGEoll8uZbCA=
-----END CERTIFICATE-----
Generated at Mon May 6 08:07:59 2024 by rpki-client on console-ams.rpki-client.org