Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5296f1-8df0-36d8-8a09-14eade4ba563.roa
File:                     af5296f1-8df0-36d8-8a09-14eade4ba563.roa (raw, json)
Hash identifier:          SPLS0n6zGRMlCJpZQuNt9Lz+2BxPACSp7kwiFuv354w=
Subject key identifier:   5D:9D:15:B1:4C:97:43:AE:94:65:24:EA:55:AA:99:3E:9C:62:F7:59
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490259130AB626DA7AA80FA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5296f1-8df0-36d8-8a09-14eade4ba563.roa
Signing time:             Thu 21 Mar 2024 21:24:49 +0000
ROA not before:           Thu 21 Mar 2024 21:24:49 +0000
ROA not after:            Wed 19 Jun 2024 21:24:49 +0000
asID:                     396982
IP address blocks:        34.80.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:02:59:13:0a:b6:26:da:7a:a8:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:24:49 2024 GMT
            Not After : Jun 19 21:24:49 2024 GMT
        Subject: CN=b9893554-b79d-4503-9271-3524eb8a99f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bf:0d:6a:2d:b3:c8:89:cf:c1:43:48:f6:7c:
                    fb:31:62:be:20:dd:e2:cc:93:1c:ec:6f:04:1e:c0:
                    9b:8e:99:2c:c9:d8:f0:50:c0:76:ac:29:1d:8e:85:
                    35:8e:4f:94:b8:5d:24:df:37:4f:90:06:f6:87:73:
                    d2:52:88:0e:2a:ea:f8:a0:d5:ef:67:21:06:4b:ba:
                    00:e6:34:d9:95:12:7a:e7:30:3a:b0:b0:84:52:ac:
                    b8:18:48:2e:ba:b5:4e:1d:a4:1a:2e:a7:c4:cb:54:
                    f4:37:b3:12:39:73:08:9c:0a:6a:6a:4e:f6:be:11:
                    55:03:76:a3:eb:7c:c1:2a:67:16:75:bf:7f:6f:8b:
                    84:4d:e5:b4:a1:ed:98:a9:03:2e:80:5e:a7:5f:32:
                    dd:2d:79:f4:a1:e4:9a:3a:d0:ec:fa:a9:c2:eb:b3:
                    e9:51:03:4c:13:e4:32:c6:a0:a7:b0:48:ad:d1:a8:
                    06:c0:8e:9d:9c:20:69:fd:92:48:d0:42:fd:6e:75:
                    f5:cc:b5:19:fe:64:7d:18:60:00:0a:b9:93:53:2e:
                    16:20:a6:73:0b:1d:2b:a3:ef:12:a9:74:0b:32:c2:
                    d9:1c:b9:6d:7b:5c:1b:3f:f3:65:4a:49:d5:54:5e:
                    cb:6d:05:c1:3a:6d:ae:35:f1:68:ba:1d:d7:7b:66:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9D:15:B1:4C:97:43:AE:94:65:24:EA:55:AA:99:3E:9C:62:F7:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af5296f1-8df0-36d8-8a09-14eade4ba563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.80.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:4b:31:55:72:87:ac:a3:4b:fd:c3:84:06:13:ed:de:e7:fb:
         1a:39:68:c5:60:b1:6c:4a:9c:8a:22:b0:5f:7f:a6:27:40:4a:
         87:b2:5c:7b:48:28:a1:5a:0d:b9:4f:e2:33:a1:0f:58:31:85:
         81:6e:fd:72:ab:7f:81:79:f5:4e:53:78:a1:97:3e:57:7d:94:
         5f:ce:32:ee:46:37:66:d2:52:44:4e:f5:e8:1a:ad:34:70:b1:
         c6:90:ad:b8:a4:4b:36:88:f6:6e:47:46:41:34:84:a2:60:76:
         89:26:b3:f7:a9:68:85:37:97:f9:96:fc:22:06:4d:01:3a:1a:
         39:57:3d:3d:ac:63:53:9b:51:9f:4a:f5:b1:cd:a8:d2:e2:95:
         fa:73:6c:90:fa:95:a9:53:81:de:8b:ae:ea:68:de:a2:40:44:
         ff:81:b7:db:e7:72:0c:f8:16:89:80:ed:57:6f:aa:a6:62:5d:
         b3:28:82:fa:06:f6:b8:69:7e:dd:b4:d7:2f:6e:11:e4:b8:4b:
         a0:5a:dc:6d:4f:8c:4b:14:59:49:75:3b:f5:2e:77:b3:c8:f5:
         79:36:5e:0b:19:69:e1:5a:f0:cf:1c:5c:8e:09:61:3d:a6:a3:
         77:22:89:fc:d0:19:5a:f6:b8:2c:76:0e:6f:75:c5:cd:05:67:
         55:bc:66:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJAlkTCrYm2nqoD6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMjQ0OVoXDTI0MDYxOTIxMjQ0OVowLzEtMCsGA1UEAxMk
Yjk4OTM1NTQtYjc5ZC00NTAzLTkyNzEtMzUyNGViOGE5OWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr8Nai2zyInPwUNI9nz7MWK+IN3izJMc7G8E
HsCbjpksydjwUMB2rCkdjoU1jk+UuF0k3zdPkAb2h3PSUogOKur4oNXvZyEGS7oA
5jTZlRJ65zA6sLCEUqy4GEguurVOHaQaLqfEy1T0N7MSOXMInApqak72vhFVA3aj
63zBKmcWdb9/b4uETeW0oe2YqQMugF6nXzLdLXn0oeSaOtDs+qnC67PpUQNME+Qy
xqCnsEit0agGwI6dnCBp/ZJI0EL9bnX1zLUZ/mR9GGAACrmTUy4WIKZzCx0ro+8S
qXQLMsLZHLlte1wbP/NlSknVVF7LbQXBOm2uNfFouh3Xe2YCWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2dFbFMl0OulGUk6lWqmT6cYvdZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWY1Mjk2ZjEtOGRmMC0z
NmQ4LThhMDktMTRlYWRlNGJhNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9LMVVyh6yjS/3DhAYT7d7n+xo5aMVgsWxKnIoisF9/pidASoeyXHtI
KKFaDblP4jOhD1gxhYFu/XKrf4F59U5TeKGXPld9lF/OMu5GN2bSUkRO9egarTRw
scaQrbikSzaI9m5HRkE0hKJgdokms/epaIU3l/mW/CIGTQE6GjlXPT2sY1ObUZ9K
9bHNqNLilfpzbJD6lalTgd6Lrupo3qJARP+Bt9vncgz4FomA7VdvqqZiXbMogvoG
9rhpft201y9uEeS4S6Ba3G1PjEsUWUl1O/Uud7PI9Xk2XgsZaeFa8M8cXI4JYT2m
o3ciifzQGVr2uCx2Dm91xc0FZ1W8Zs8=
-----END CERTIFICATE-----
Generated at Mon May 6 08:08:15 2024 by rpki-client on console-ams.rpki-client.org