Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a077d35-5a09-3f38-8af7-a4c03026b36e.roa
File:                     9a077d35-5a09-3f38-8af7-a4c03026b36e.roa (raw, json)
Hash identifier:          PJirhCQzjWsh/HoRYEWP2U1Uj62j5I3WtCja9+i9rDs=
Subject key identifier:   33:CF:8F:C5:6C:1B:63:51:17:92:76:E6:52:6E:8F:D0:D2:65:EF:44
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490543CB155DA6BB890A9140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a077d35-5a09-3f38-8af7-a4c03026b36e.roa
Signing time:             Thu 21 Mar 2024 21:30:42 +0000
ROA not before:           Thu 21 Mar 2024 21:30:42 +0000
ROA not after:            Wed 19 Jun 2024 21:30:42 +0000
asID:                     396982
IP address blocks:        34.97.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:05:43:cb:15:5d:a6:bb:89:0a:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:30:42 2024 GMT
            Not After : Jun 19 21:30:42 2024 GMT
        Subject: CN=4ff1b5a6-b863-4c8f-872b-50c21a7065b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2f:f5:d5:db:2a:54:cd:a0:82:1f:12:af:45:
                    1d:72:d8:d3:d7:aa:99:14:f4:f5:79:aa:5c:93:87:
                    f9:a7:a0:9b:f6:72:e8:65:42:e3:e4:0e:ea:34:8e:
                    d5:51:4c:51:2b:72:5f:73:b7:e3:97:1a:08:97:09:
                    15:ed:c9:f9:3e:c0:be:24:11:85:4d:d3:ae:ad:3e:
                    a9:1e:9d:88:d3:f4:a2:6c:d0:9e:67:f7:aa:1f:3d:
                    84:35:60:72:d1:a1:99:c9:b0:08:9f:5d:3a:f3:fe:
                    a8:75:3d:3c:b4:77:9d:20:c9:24:49:38:74:0c:b6:
                    d4:74:75:bd:bb:ee:ec:49:a2:cb:c7:f2:90:c6:40:
                    52:f3:33:4f:e2:37:da:62:ef:ed:6e:4c:28:0c:04:
                    80:30:1b:0a:ed:df:32:59:04:a7:dc:b3:b6:ed:d0:
                    df:b8:12:20:1b:10:70:e4:17:7e:52:40:43:59:5c:
                    98:8e:d4:76:d0:b8:65:15:55:a4:2f:ff:31:54:cc:
                    f7:7d:25:cd:7c:fe:d6:3f:ff:bb:e4:69:63:42:cf:
                    44:1a:22:38:07:56:9e:5a:a8:9d:c9:ca:6a:35:35:
                    78:06:04:40:fc:a7:9b:66:f8:87:36:68:90:7d:c0:
                    8c:9c:88:f8:61:f5:4f:25:12:3a:c2:b7:1f:c5:52:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CF:8F:C5:6C:1B:63:51:17:92:76:E6:52:6E:8F:D0:D2:65:EF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a077d35-5a09-3f38-8af7-a4c03026b36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.97.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9f:0d:a8:e2:20:cc:f6:95:48:78:d6:c1:37:8f:7e:40:dc:
         da:e1:54:ca:c1:a9:3e:6b:ef:2f:43:41:e8:0d:75:dc:a7:4d:
         03:33:dd:7a:0f:1a:a2:3b:d9:c5:1e:51:4f:94:42:66:f9:d3:
         87:25:24:3d:f6:20:22:02:f3:e3:99:f4:90:5f:20:5a:b3:e3:
         03:a1:86:1f:5b:b3:85:7c:cd:19:8f:4e:57:fe:35:aa:6f:2c:
         92:91:c0:96:ad:b0:6e:06:23:f5:f4:56:b2:70:5f:2a:e0:07:
         12:0e:dd:3a:05:9a:6a:ce:56:2b:0d:a0:f0:30:8a:5a:49:dc:
         fb:62:07:a3:02:c6:26:fd:04:1c:3e:dd:40:73:a5:fa:87:ad:
         92:ac:8f:17:6f:8c:73:d2:38:b1:14:5a:6c:03:ce:6b:f7:3f:
         f3:01:0f:28:f3:b8:d7:ab:c4:9f:e2:42:7b:5b:d9:93:40:22:
         a2:d2:e4:0e:48:3e:d5:3a:96:4f:16:8c:7f:2b:6c:d6:ef:89:
         4d:eb:91:3d:7a:cd:79:36:b7:a3:96:4a:4f:61:2a:62:2f:20:
         5b:05:03:7b:21:1b:95:61:65:4f:62:41:55:88:ec:f1:ea:0b:
         8a:bf:56:61:6c:d5:6c:d8:92:4b:b9:74:64:ef:51:a9:f3:2f:
         78:db:0e:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJBUPLFV2mu4kKkUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMzA0MloXDTI0MDYxOTIxMzA0MlowLzEtMCsGA1UEAxMk
NGZmMWI1YTYtYjg2My00YzhmLTg3MmItNTBjMjFhNzA2NWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS/11dsqVM2ggh8Sr0UdctjT16qZFPT1eapc
k4f5p6Cb9nLoZULj5A7qNI7VUUxRK3Jfc7fjlxoIlwkV7cn5PsC+JBGFTdOurT6p
Hp2I0/SibNCeZ/eqHz2ENWBy0aGZybAIn1068/6odT08tHedIMkkSTh0DLbUdHW9
u+7sSaLLx/KQxkBS8zNP4jfaYu/tbkwoDASAMBsK7d8yWQSn3LO27dDfuBIgGxBw
5Bd+UkBDWVyYjtR20LhlFVWkL/8xVMz3fSXNfP7WP/+75GljQs9EGiI4B1aeWqid
ycpqNTV4BgRA/KebZviHNmiQfcCMnIj4YfVPJRI6wrcfxVIC+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPPj8VsG2NRF5J25lJuj9DSZe9EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWEwNzdkMzUtNWEwOS0z
ZjM4LThhZjctYTRjMDMwMjZiMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmfDajiIMz2lUh41sE3j35A3NrhVMrBqT5r7y9DQegNddynTQMz3XoP
GqI72cUeUU+UQmb504clJD32ICIC8+OZ9JBfIFqz4wOhhh9bs4V8zRmPTlf+Napv
LJKRwJatsG4GI/X0VrJwXyrgBxIO3ToFmmrOVisNoPAwilpJ3PtiB6MCxib9BBw+
3UBzpfqHrZKsjxdvjHPSOLEUWmwDzmv3P/MBDyjzuNerxJ/iQntb2ZNAIqLS5A5I
PtU6lk8WjH8rbNbviU3rkT16zXk2t6OWSk9hKmIvIFsFA3shG5VhZU9iQVWI7PHq
C4q/VmFs1WzYkku5dGTvUanzL3jbDn0=
-----END CERTIFICATE-----
Generated at Mon May 6 01:57:54 2024 by rpki-client on console-ams.rpki-client.org