Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1538256a-8a26-34f5-a964-36238aeaab03.roa
File:                     1538256a-8a26-34f5-a964-36238aeaab03.roa (raw, json)
Hash identifier:          Uhe/v4z+aDe5Lp0ckk28DIVLSODq0FvE0qb5KD1fmrc=
Subject key identifier:   B7:39:3D:9C:E5:54:BE:83:24:8A:E6:53:52:92:D2:B9:B3:C7:DF:5E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62A9D94F6CC5622BDC27280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1538256a-8a26-34f5-a964-36238aeaab03.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        34.122.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:9d:94:f6:cc:56:22:bd:c2:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=94d89d98-49e6-4762-ab33-7e375e37925c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:38:8c:a4:57:71:87:62:97:57:0d:d8:dd:
                    79:33:96:2b:b9:af:46:1c:96:2a:68:9e:49:05:ba:
                    f5:dc:4e:bf:4f:25:3b:ff:3b:7f:12:17:4e:70:9b:
                    7b:70:43:53:d4:64:f0:02:e1:62:46:8b:cb:bd:43:
                    30:c8:e3:68:51:0a:ad:d8:d1:08:b7:8a:fa:7c:8e:
                    4d:46:ae:c9:f5:bb:d0:25:09:63:67:cf:db:95:12:
                    7c:2d:8b:d0:2a:59:43:9b:40:14:e5:b7:ef:60:6f:
                    7b:36:37:e1:10:6a:39:9a:ec:58:b8:a9:01:51:c8:
                    eb:e2:99:b6:97:fe:e1:38:78:e1:31:65:41:28:01:
                    73:0e:ba:49:86:7f:b6:29:1e:ef:3d:7d:27:19:82:
                    ef:14:18:66:0a:8a:08:a9:63:6a:5c:45:4a:bb:36:
                    16:03:39:3c:6a:4b:a4:72:7b:45:df:55:42:1f:79:
                    e7:57:3d:cb:17:5a:68:bb:5a:65:e5:7b:38:5a:f1:
                    78:8a:76:ee:c7:a4:58:b5:71:34:e4:2c:f0:32:1c:
                    fe:97:e8:2c:31:1a:ce:ce:e4:1f:77:9a:f8:de:7c:
                    b9:7f:69:ca:7c:7b:ce:1c:29:5b:23:83:d0:f1:59:
                    f9:70:5b:44:d4:3a:9f:60:23:d1:ed:b4:f6:71:7b:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:3D:9C:E5:54:BE:83:24:8A:E6:53:52:92:D2:B9:B3:C7:DF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1538256a-8a26-34f5-a964-36238aeaab03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.122.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e2:ac:a0:26:32:87:6a:8b:d0:e4:e9:7c:48:74:69:5e:59:
         7f:ff:21:84:0c:14:ff:ef:b7:a6:fd:cc:b3:d5:96:80:d9:5b:
         03:ee:7f:d8:b5:cb:61:d3:b2:07:62:e7:f9:1e:e5:33:99:7c:
         25:eb:0b:72:cf:1a:12:6e:cc:68:13:71:e7:38:59:58:22:5e:
         42:04:a6:cb:f9:26:fd:b0:94:f6:30:99:4c:49:02:97:8d:d6:
         e1:03:09:04:3c:e6:46:66:89:ec:e9:f7:cc:1f:0a:9d:1b:3f:
         e5:7b:c1:ab:bb:52:f6:c5:47:a3:ab:96:78:b2:37:7f:0d:4e:
         32:48:79:b1:35:42:2a:1b:8e:82:dc:60:ff:27:10:b7:6f:d0:
         67:a1:ad:72:32:99:79:8d:f6:4c:2a:fa:d8:c0:fe:c3:5e:0d:
         3d:45:ec:b5:59:9e:7d:48:1e:70:ce:c7:c6:cc:c2:50:ff:69:
         9b:fd:53:8d:22:0c:75:a7:d8:b8:6a:94:35:79:c5:69:1d:bc:
         b4:f2:93:d4:97:33:e9:5a:e9:b3:05:44:be:d2:74:5d:a4:cd:
         e7:5d:c4:5f:33:7c:5e:51:b2:bf:db:28:fa:70:89:35:f0:20:
         14:44:60:16:44:9d:cc:52:0b:35:48:44:c6:11:9b:18:bf:ba:
         b7:3c:78:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKp2U9sxWIr3CcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTRkODlkOTgtNDllNi00NzYyLWFiMzMtN2UzNzVlMzc5MjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXA4jKRXcYdil1cN2N15M5Yrua9GHJYqaJ5J
Bbr13E6/TyU7/zt/EhdOcJt7cENT1GTwAuFiRovLvUMwyONoUQqt2NEIt4r6fI5N
Rq7J9bvQJQljZ8/blRJ8LYvQKllDm0AU5bfvYG97NjfhEGo5muxYuKkBUcjr4pm2
l/7hOHjhMWVBKAFzDrpJhn+2KR7vPX0nGYLvFBhmCooIqWNqXEVKuzYWAzk8akuk
cntF31VCH3nnVz3LF1pou1pl5Xs4WvF4inbux6RYtXE05CzwMhz+l+gsMRrOzuQf
d5r43ny5f2nKfHvOHClbI4PQ8Vn5cFtE1DqfYCPR7bT2cXuS/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLc5PZzlVL6DJIrmU1KS0rmzx99eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTUzODI1NmEtOGEyNi0z
NGY1LWE5NjQtMzYyMzhhZWFhYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvirKAmModqi9Dk6XxIdGleWX//IYQMFP/vt6b9zLPVloDZWwPuf9i1
y2HTsgdi5/ke5TOZfCXrC3LPGhJuzGgTcec4WVgiXkIEpsv5Jv2wlPYwmUxJApeN
1uEDCQQ85kZmiezp98wfCp0bP+V7wau7UvbFR6OrlniyN38NTjJIebE1QiobjoLc
YP8nELdv0GehrXIymXmN9kwq+tjA/sNeDT1F7LVZnn1IHnDOx8bMwlD/aZv9U40i
DHWn2LhqlDV5xWkdvLTyk9SXM+la6bMFRL7SdF2kzeddxF8zfF5Rsr/bKPpwiTXw
IBREYBZEncxSCzVIRMYRmxi/urc8eHY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:27 2024 by rpki-client on console-ams.rpki-client.org