Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6f288dd-9551-32a9-a103-362fef1e300b.roa
File:                     e6f288dd-9551-32a9-a103-362fef1e300b.roa (raw, json)
Hash identifier:          gMGh56VhwmanD7qmp8gsPFU59pzCgqSmcnO6PajNF9Q=
Subject key identifier:   6D:FF:1A:72:BD:AC:A4:62:BA:54:12:26:C2:5E:F4:06:71:62:37:8D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462D1814D6FC0BA2CDA60A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6f288dd-9551-32a9-a103-362fef1e300b.roa
Signing time:             Wed 20 Mar 2024 21:03:31 +0000
ROA not before:           Wed 20 Mar 2024 21:03:31 +0000
ROA not after:            Tue 18 Jun 2024 21:03:31 +0000
asID:                     396982
IP address blocks:        34.106.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:18:14:d6:fc:0b:a2:cd:a6:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:03:31 2024 GMT
            Not After : Jun 18 21:03:31 2024 GMT
        Subject: CN=77f4a6af-a426-41b9-b98c-b67f48d80c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:84:a8:ab:e8:d6:14:e8:29:0d:80:14:ff:
                    fc:eb:77:80:3f:7f:b4:0f:26:b1:f4:fe:6e:ce:66:
                    20:20:ef:2b:cc:fd:19:6f:a5:12:a9:b7:6f:62:d6:
                    97:83:ff:23:78:fe:7f:02:6a:ba:22:01:46:a8:df:
                    6f:60:1b:5f:7b:95:df:a9:96:3d:51:e9:aa:9e:ba:
                    b4:86:a4:f2:43:7b:cc:d1:f7:e1:b5:6e:bc:73:d8:
                    a0:c1:a0:43:a6:d2:90:21:2b:ac:2c:38:f9:5d:42:
                    05:f9:0a:55:a8:65:7d:7c:5e:b1:ff:69:29:34:21:
                    fe:0d:05:ec:5e:f5:d1:42:97:d9:e6:8d:c9:7b:1c:
                    aa:e2:25:65:30:0c:b1:33:5d:3f:df:e1:4a:fc:a8:
                    1e:80:93:08:69:64:e0:db:bb:39:cf:52:bc:af:99:
                    3e:b9:9c:31:20:9e:18:19:3f:00:23:a0:84:be:50:
                    94:f4:e2:f5:29:02:e0:82:78:ac:d2:0c:41:68:87:
                    d8:b4:ef:17:2c:0e:75:5d:46:21:4a:ed:4d:9c:ed:
                    6d:23:34:34:ca:96:2c:52:60:bf:99:6c:d7:fd:3c:
                    8a:df:e4:31:7a:4b:a7:e8:90:17:c1:3d:f7:f8:9b:
                    44:17:cc:a1:8b:c3:55:53:9f:fb:7e:ab:15:21:e7:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:1A:72:BD:AC:A4:62:BA:54:12:26:C2:5E:F4:06:71:62:37:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6f288dd-9551-32a9-a103-362fef1e300b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.106.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:05:3f:bc:24:93:82:03:6b:ce:4c:32:de:ee:d5:1d:54:6c:
         53:f3:f5:fa:38:77:bc:e0:7e:0f:10:5a:43:0e:f7:cd:13:b2:
         5d:d0:89:2f:d2:d3:f7:9e:e8:f6:f3:76:3f:48:29:f6:42:88:
         20:39:91:17:4b:cd:e8:1a:04:76:61:93:26:d4:ed:5c:e3:9f:
         1b:96:2b:6f:3c:d1:dd:f7:d6:61:f8:0f:da:8c:1d:0d:af:1c:
         8d:db:43:d8:36:89:87:c5:c9:92:85:33:01:bd:5f:72:a0:d6:
         e5:00:de:1c:64:90:9b:44:5d:3c:58:b2:08:53:14:51:49:ce:
         77:c8:d4:c8:ef:b6:2a:69:11:6f:2d:07:f3:53:78:e5:aa:89:
         01:50:17:77:05:93:f8:9e:08:67:00:9b:ad:f9:61:fc:3c:e7:
         7f:66:f7:b6:21:dc:26:a3:82:92:f6:84:ba:c2:71:49:f1:ff:
         35:91:9a:80:90:cd:0d:d7:69:ce:b7:9a:4b:81:d4:93:fd:86:
         7d:c6:3d:fd:18:ed:07:7b:70:d2:b4:59:27:87:a2:ae:ec:c1:
         73:27:58:cc:5d:27:82:1f:1e:65:b9:45:5f:39:3a:7e:21:4d:
         82:6b:3b:d0:74:b7:91:c0:40:67:0b:b5:a8:31:9f:a5:48:d6:
         24:6f:a5:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLRgU1vwLos2mCkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMDIxMDMzMVoXDTI0MDYxODIxMDMzMVowLzEtMCsGA1UEAxMk
NzdmNGE2YWYtYTQyNi00MWI5LWI5OGMtYjY3ZjQ4ZDgwYzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+WEqKvo1hToKQ2AFP/863eAP3+0Dyax9P5u
zmYgIO8rzP0Zb6USqbdvYtaXg/8jeP5/Amq6IgFGqN9vYBtfe5XfqZY9Uemqnrq0
hqTyQ3vM0ffhtW68c9igwaBDptKQISusLDj5XUIF+QpVqGV9fF6x/2kpNCH+DQXs
XvXRQpfZ5o3Jexyq4iVlMAyxM10/3+FK/KgegJMIaWTg27s5z1K8r5k+uZwxIJ4Y
GT8AI6CEvlCU9OL1KQLggnis0gxBaIfYtO8XLA51XUYhSu1NnO1tIzQ0ypYsUmC/
mWzX/TyK3+Qxekun6JAXwT33+JtEF8yhi8NVU5/7fqsVIee4IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3/GnK9rKRiulQSJsJe9AZxYjeNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTZmMjg4ZGQtOTU1MS0z
MmE5LWExMDMtMzYyZmVmMWUzMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEFP7wkk4IDa85MMt7u1R1UbFPz9fo4d7zgfg8QWkMO980Tsl3QiS/S
0/ee6Pbzdj9IKfZCiCA5kRdLzegaBHZhkybU7VzjnxuWK2880d331mH4D9qMHQ2v
HI3bQ9g2iYfFyZKFMwG9X3Kg1uUA3hxkkJtEXTxYsghTFFFJznfI1MjvtippEW8t
B/NTeOWqiQFQF3cFk/ieCGcAm635Yfw8539m97Yh3CajgpL2hLrCcUnx/zWRmoCQ
zQ3Xac63mkuB1JP9hn3GPf0Y7Qd7cNK0WSeHoq7swXMnWMxdJ4IfHmW5RV85On4h
TYJrO9B0t5HAQGcLtagxn6VI1iRvpek=
-----END CERTIFICATE-----
Generated at Sun May 5 15:50:16 2024 by rpki-client on console-ams.rpki-client.org