Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa
File:                     f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa (raw, json)
Hash identifier:          qxvijto2W/niSvPNcZl/8j2oxuMjeGU6pGQ2FKKDoLs=
Subject key identifier:   C3:15:20:25:74:21:CA:42:AD:8C:D6:0B:04:FC:C0:89:57:FF:A8:39
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FE40C7B2DE7F7D60DD0A20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa
Signing time:             Thu 21 Mar 2024 21:16:34 +0000
ROA not before:           Thu 21 Mar 2024 21:16:34 +0000
ROA not after:            Wed 19 Jun 2024 21:16:34 +0000
asID:                     396982
IP address blocks:        34.66.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fe:40:c7:b2:de:7f:7d:60:dd:0a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:16:34 2024 GMT
            Not After : Jun 19 21:16:34 2024 GMT
        Subject: CN=0a816c8a-4c03-4ce5-b7a3-e6519e4da8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:07:a3:ce:a8:22:63:01:c2:f5:5e:a3:6a:
                    31:e7:61:cb:25:43:56:27:b8:40:31:8d:cc:f4:83:
                    fc:e8:db:a9:2c:d7:24:a3:21:c0:8f:47:7c:a5:ec:
                    21:e2:33:f3:34:9f:56:72:6e:f5:aa:5b:9a:c5:c9:
                    be:cf:a1:23:2c:4e:9d:3c:bb:61:97:89:7a:7a:78:
                    92:60:5f:9b:9c:ef:04:52:d6:62:ea:a8:b1:54:8d:
                    a3:e0:27:f3:27:25:f7:a0:75:ee:c9:24:05:37:34:
                    1b:e3:a5:9f:29:23:84:19:55:5b:33:7c:04:c2:cd:
                    65:97:9d:d1:05:df:f2:b8:fd:6f:07:42:86:2f:28:
                    66:74:e4:24:57:d1:2a:5f:1b:fe:48:10:fd:67:bf:
                    53:d5:c5:8a:d2:8c:cb:24:f0:9f:72:32:35:84:a7:
                    6c:a0:1d:a0:97:b2:82:0a:5d:5c:ce:9c:88:b3:e2:
                    3e:75:28:55:cf:1d:b8:f9:98:38:82:03:b6:5b:78:
                    83:eb:18:1e:2f:6a:85:30:b1:2a:f3:f2:18:8f:4a:
                    c6:ac:6c:9b:8c:e8:b5:5e:ed:d7:ec:d2:40:b4:e3:
                    7e:f6:f2:34:87:04:c4:42:2d:c6:fa:b5:b3:36:59:
                    24:32:b1:43:ac:54:ef:30:ac:22:ef:6c:a3:4b:bb:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:15:20:25:74:21:CA:42:AD:8C:D6:0B:04:FC:C0:89:57:FF:A8:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.66.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a3:6b:e7:9f:08:67:2b:7f:90:26:b0:7f:75:9c:f1:e8:29:
         03:79:39:91:a8:57:72:0c:ab:42:3f:d5:12:3f:28:6d:9e:d3:
         a6:fa:77:75:e7:b9:d9:ca:51:e1:ba:77:2e:75:35:d0:c1:a3:
         60:9c:04:16:15:db:3f:64:2b:4c:c2:f1:89:42:cd:38:5d:41:
         b7:23:18:96:28:8f:43:c1:94:2b:16:9e:e6:a3:8e:0a:3e:23:
         cb:96:63:18:b7:d1:e3:d6:0c:c3:8c:0b:5c:82:d0:74:d3:51:
         7a:ad:d6:ff:b0:a3:8f:e1:27:60:bc:60:f3:59:7c:c7:0f:b1:
         bb:39:8b:7a:93:c0:07:14:0d:bc:ff:73:e9:f1:fb:71:89:b8:
         ca:77:f4:94:6b:e7:3c:72:69:aa:28:6b:0f:3d:6b:4e:9e:ab:
         f3:56:00:bc:1a:d3:a6:0b:08:3d:96:49:b0:41:5c:aa:07:76:
         5a:a6:6b:5e:12:52:7d:05:32:74:22:e3:86:69:f8:3e:f8:73:
         18:b4:ac:36:5f:51:3c:f3:17:12:1d:90:f7:85:af:de:89:1a:
         cd:72:56:1f:b0:ea:55:ae:26:cc:e5:ca:1f:f9:b9:76:92:46:
         39:e0:a1:a9:17:52:91:1a:94:4d:91:58:67:29:97:8a:c6:90:
         e0:11:91:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/kDHst5/fWDdCiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMTYzNFoXDTI0MDYxOTIxMTYzNFowLzEtMCsGA1UEAxMk
MGE4MTZjOGEtNGMwMy00Y2U1LWI3YTMtZTY1MTllNGRhOGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke0Ho86oImMBwvVeo2ox52HLJUNWJ7hAMY3M
9IP86NupLNckoyHAj0d8pewh4jPzNJ9Wcm71qluaxcm+z6EjLE6dPLthl4l6eniS
YF+bnO8EUtZi6qixVI2j4CfzJyX3oHXuySQFNzQb46WfKSOEGVVbM3wEws1ll53R
Bd/yuP1vB0KGLyhmdOQkV9EqXxv+SBD9Z79T1cWK0ozLJPCfcjI1hKdsoB2gl7KC
Cl1czpyIs+I+dShVzx24+Zg4ggO2W3iD6xgeL2qFMLEq8/IYj0rGrGybjOi1Xu3X
7NJAtON+9vI0hwTEQi3G+rWzNlkkMrFDrFTvMKwi72yjS7vAWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMVICV0IcpCrYzWCwT8wIlX/6g5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA4NWZiN2MtMWY1ZC0z
ZTI2LTk2ZTAtYWIyMTdiYmYxMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOja+efCGcrf5AmsH91nPHoKQN5OZGoV3IMq0I/1RI/KG2e06b6d3Xn
udnKUeG6dy51NdDBo2CcBBYV2z9kK0zC8YlCzThdQbcjGJYoj0PBlCsWnuajjgo+
I8uWYxi30ePWDMOMC1yC0HTTUXqt1v+wo4/hJ2C8YPNZfMcPsbs5i3qTwAcUDbz/
c+nx+3GJuMp39JRr5zxyaaooaw89a06eq/NWALwa06YLCD2WSbBBXKoHdlqma14S
Un0FMnQi44Zp+D74cxi0rDZfUTzzFxIdkPeFr96JGs1yVh+w6lWuJszlyh/5uXaS
RjngoakXUpEalE2RWGcpl4rGkOARkbw=
-----END CERTIFICATE-----
Generated at Sun May 5 15:50:21 2024 by rpki-client on console-ams.rpki-client.org