Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5734b89-ea00-32ee-bb42-a159a0ed862a.roa
File:                     c5734b89-ea00-32ee-bb42-a159a0ed862a.roa (raw, json)
Hash identifier:          jiY+0sYCMEoWwNuBeawdZYRhG9/hBQmuvELYTocJL5U=
Subject key identifier:   DC:C8:A3:EE:01:41:59:C8:E3:D7:42:0F:34:A8:01:65:B9:A8:7C:60
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462D8A5930D0F678CE4AB880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5734b89-ea00-32ee-bb42-a159a0ed862a.roa
Signing time:             Wed 20 Mar 2024 21:04:25 +0000
ROA not before:           Wed 20 Mar 2024 21:04:25 +0000
ROA not after:            Tue 18 Jun 2024 21:04:25 +0000
asID:                     396982
IP address blocks:        34.107.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:8a:59:30:d0:f6:78:ce:4a:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:04:25 2024 GMT
            Not After : Jun 18 21:04:25 2024 GMT
        Subject: CN=dc2e0b5a-fe07-4be3-a4d5-9b65c7eb336c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:5e:0d:c5:43:34:b0:78:b7:5d:c8:90:14:
                    fa:e8:a3:2b:b4:37:5a:9e:48:d5:f1:7f:40:e4:f2:
                    e4:58:de:8b:dd:a6:bc:0b:3b:d5:94:1d:cb:a8:f4:
                    e4:9b:47:16:d2:b2:e0:f9:28:46:47:c8:1f:c4:09:
                    65:a0:9f:8d:c5:a6:50:4a:22:ec:41:a4:5b:a6:47:
                    e0:be:55:0f:0a:b7:0c:c8:71:94:70:0a:b5:98:57:
                    39:2b:e4:72:c5:b6:e3:77:f0:89:5f:e2:1c:be:5f:
                    ab:36:ec:d6:4b:5b:f9:1e:0d:50:a3:39:07:65:db:
                    9e:40:47:0a:86:9b:9d:54:2b:85:a7:69:0f:d5:15:
                    e9:52:4d:ba:93:81:e3:ce:6c:99:5e:63:01:91:95:
                    1d:bc:19:e3:b1:4b:41:46:57:c9:3f:f4:45:24:94:
                    f7:07:eb:f9:9f:14:4d:4b:1c:b2:07:6c:c2:e8:1e:
                    b7:52:9c:d6:0a:f5:91:4b:f9:67:a8:a5:9c:14:e5:
                    63:da:cb:f5:68:cc:50:b0:fe:ed:60:72:22:93:1e:
                    86:89:fc:6d:ab:83:be:af:42:25:ae:ce:82:ed:40:
                    f8:72:a1:b0:65:70:40:2d:04:48:7a:46:41:3d:60:
                    1a:d4:5b:80:f7:00:89:d4:33:5b:ea:7e:04:0b:c2:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C8:A3:EE:01:41:59:C8:E3:D7:42:0F:34:A8:01:65:B9:A8:7C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5734b89-ea00-32ee-bb42-a159a0ed862a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.107.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:be:46:42:10:b6:a8:1a:f2:f7:5b:8a:15:60:14:b4:25:a3:
         6d:f7:79:36:69:8c:f6:4c:ea:0c:8e:3d:33:49:ff:87:9b:4e:
         a9:32:83:e1:5d:67:dc:8b:a2:33:7d:b9:99:f1:be:b0:d3:64:
         31:d2:e7:0d:c5:4c:e6:a2:fa:37:e0:72:30:a3:72:f9:95:fb:
         79:10:75:0e:b5:ed:dc:a3:ef:71:1e:3e:b5:47:2a:0b:df:6e:
         db:89:72:f3:b4:07:96:62:43:de:df:b0:ab:6a:2f:9f:75:80:
         96:d5:07:d8:e4:fc:8d:44:44:42:e6:8b:69:e9:ca:43:3f:53:
         17:49:df:66:a8:7c:28:f9:55:a3:d3:51:5c:02:30:1c:34:8c:
         06:c7:06:7c:d2:80:fa:89:4e:4f:8e:aa:1c:52:02:04:05:da:
         67:76:52:88:52:4f:45:ce:f2:20:e3:af:d8:db:fd:cb:f5:f1:
         21:7c:86:42:13:e4:54:b5:76:4c:92:92:b0:36:90:82:8b:f3:
         34:69:13:2a:a3:01:fd:8f:3b:5a:2b:71:de:4d:d0:e0:df:7e:
         fe:e9:cf:11:ac:8b:59:ba:fb:8c:d6:87:33:13:0a:a2:07:fa:
         ab:f5:3d:42:34:63:ff:45:da:bb:8c:fd:53:6a:81:8a:2a:0e:
         db:f8:54:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLYpZMND2eM5KuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMDIxMDQyNVoXDTI0MDYxODIxMDQyNVowLzEtMCsGA1UEAxMk
ZGMyZTBiNWEtZmUwNy00YmUzLWE0ZDUtOWI2NWM3ZWIzMzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU1eDcVDNLB4t13IkBT66KMrtDdankjV8X9A
5PLkWN6L3aa8CzvVlB3LqPTkm0cW0rLg+ShGR8gfxAlloJ+NxaZQSiLsQaRbpkfg
vlUPCrcMyHGUcAq1mFc5K+Ryxbbjd/CJX+Icvl+rNuzWS1v5Hg1QozkHZdueQEcK
hpudVCuFp2kP1RXpUk26k4HjzmyZXmMBkZUdvBnjsUtBRlfJP/RFJJT3B+v5nxRN
SxyyB2zC6B63UpzWCvWRS/lnqKWcFOVj2sv1aMxQsP7tYHIikx6Gifxtq4O+r0Il
rs6C7UD4cqGwZXBALQRIekZBPWAa1FuA9wCJ1DNb6n4EC8LwlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzIo+4BQVnI49dCDzSoAWW5qHxgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzU3MzRiODktZWEwMC0z
MmVlLWJiNDItYTE1OWEwZWQ4NjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEW+RkIQtqga8vdbihVgFLQlo233eTZpjPZM6gyOPTNJ/4ebTqkyg+Fd
Z9yLojN9uZnxvrDTZDHS5w3FTOai+jfgcjCjcvmV+3kQdQ617dyj73EePrVHKgvf
btuJcvO0B5ZiQ97fsKtqL591gJbVB9jk/I1ERELmi2npykM/UxdJ32aofCj5VaPT
UVwCMBw0jAbHBnzSgPqJTk+OqhxSAgQF2md2UohST0XO8iDjr9jb/cv18SF8hkIT
5FS1dkySkrA2kIKL8zRpEyqjAf2PO1orcd5N0ODffv7pzxGsi1m6+4zWhzMTCqIH
+qv1PUI0Y/9F2ruM/VNqgYoqDtv4VPE=
-----END CERTIFICATE-----
Generated at Sun May 5 15:50:01 2024 by rpki-client on console-ams.rpki-client.org