Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16082838-3f3c-3a5e-a24a-1adca7c1004f.roa
File:                     16082838-3f3c-3a5e-a24a-1adca7c1004f.roa (raw, json)
Hash identifier:          IJ6krb/a2UOLJy6SW5tZGKkiaaiFe0aRt5lSOwZbTP0=
Subject key identifier:   C5:89:44:0E:E0:09:A4:0D:46:B9:D3:C0:85:A4:48:89:41:CF:F8:15
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BBFAB0914D896E20F6CA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16082838-3f3c-3a5e-a24a-1adca7c1004f.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.144.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:bf:ab:09:14:d8:96:e2:0f:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=e4c3f669-53de-4484-96bb-3b93d8e4485e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:e3:dc:81:56:fc:c1:39:cf:8d:3e:b6:67:
                    ce:5f:57:6a:5e:20:ba:9c:df:b0:20:0a:a2:b1:bb:
                    69:00:2a:aa:7a:cf:10:97:e6:0d:fc:2b:a3:a6:07:
                    84:b8:a0:09:63:9e:b9:c5:97:3c:88:92:94:32:78:
                    78:9d:5e:53:f3:72:76:1e:7e:20:c3:29:f6:61:2c:
                    50:5d:fe:87:2c:ab:da:f2:ee:30:ab:e5:3b:44:e6:
                    bd:c6:34:5a:c3:a3:9c:92:7f:02:bc:99:31:f9:8f:
                    2c:ce:ac:e3:26:81:86:0e:87:3a:be:28:49:3d:6c:
                    b7:86:58:5f:ad:d9:b3:8d:00:08:78:cf:2d:af:f6:
                    ee:30:95:03:be:c0:36:a1:15:b7:f3:15:6f:0a:90:
                    e1:eb:f2:f0:11:1e:e0:76:5a:c0:fb:3a:fd:70:1c:
                    ac:a7:6e:a3:01:7b:97:ee:46:9a:cc:2a:22:9d:10:
                    32:fa:81:95:19:2d:63:9e:d2:67:e9:28:b6:1d:ed:
                    fa:97:f4:1a:f0:80:45:c1:92:86:a0:7a:c1:f8:74:
                    40:25:09:c9:b2:ce:8e:b6:02:f0:2c:48:dc:c8:15:
                    1f:b0:a9:05:d1:cf:22:ea:7d:48:00:a0:2b:57:70:
                    9a:6c:4c:e0:2a:8c:78:0b:7a:67:bd:4f:5b:b4:c7:
                    ec:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:89:44:0E:E0:09:A4:0D:46:B9:D3:C0:85:A4:48:89:41:CF:F8:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16082838-3f3c-3a5e-a24a-1adca7c1004f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:06:b7:f2:07:98:a0:5a:14:fe:74:d1:66:d3:34:68:0b:
         a9:1d:e5:83:9f:73:f2:60:84:30:fb:e3:0b:fa:91:39:ee:5e:
         17:e5:2f:40:ec:94:67:df:c5:d3:24:63:51:c4:1e:29:cb:12:
         61:6a:b4:fd:81:14:87:3a:bd:24:48:d8:d6:8b:f9:89:32:50:
         e9:25:9a:8f:f0:ad:64:9c:67:68:6f:32:b3:d8:c2:8a:9d:15:
         4c:e2:1f:2a:8e:d4:d4:97:b3:9c:c6:4e:bc:9c:c9:3c:89:bd:
         4e:29:80:50:2e:0b:59:38:d8:98:36:8f:99:45:ea:f6:65:e6:
         64:2d:e6:23:a6:9e:52:54:d8:b6:3a:d0:d7:ce:a9:5c:c0:8a:
         3c:62:8c:6a:87:88:a3:26:da:13:c7:14:07:45:d1:3d:f7:84:
         09:2b:2f:ed:ed:6c:69:f3:72:f7:4f:e1:90:39:14:4e:4e:41:
         9d:44:c9:56:1a:c1:02:34:3a:fc:44:04:08:0f:02:20:a8:80:
         e3:29:0c:9e:3e:a3:9d:45:8c:d0:c1:dc:fa:c8:84:b1:1c:93:
         19:7f:f1:3d:8c:ca:65:2e:94:f7:59:45:3f:32:f8:0d:ea:41:
         ab:95:a9:d0:0d:16:9b:9a:0f:d1:9d:08:ec:ed:e8:39:49:44:
         22:dc:3d:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7+rCRTYluIPbKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZTRjM2Y2NjktNTNkZS00NDg0LTk2YmItM2I5M2Q4ZTQ0ODVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIzj3IFW/ME5z40+tmfOX1dqXiC6nN+wIAqi
sbtpACqqes8Ql+YN/CujpgeEuKAJY565xZc8iJKUMnh4nV5T83J2Hn4gwyn2YSxQ
Xf6HLKva8u4wq+U7ROa9xjRaw6Ockn8CvJkx+Y8szqzjJoGGDoc6vihJPWy3hlhf
rdmzjQAIeM8tr/buMJUDvsA2oRW38xVvCpDh6/LwER7gdlrA+zr9cBysp26jAXuX
7kaazCoinRAy+oGVGS1jntJn6Si2He36l/Qa8IBFwZKGoHrB+HRAJQnJss6OtgLw
LEjcyBUfsKkF0c8i6n1IAKArV3CabEzgKox4C3pnvU9btMfseQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWJRA7gCaQNRrnTwIWkSIlBz/gVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTYwODI4MzgtM2YzYy0z
YTVlLWEyNGEtMWFkY2E3YzEwMDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIpCMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtyBrfyB5igWhT+dNFm0zRoC6kd5YOfc/JghDD74wv6kTnuXhflL0Ds
lGffxdMkY1HEHinLEmFqtP2BFIc6vSRI2NaL+YkyUOklmo/wrWScZ2hvMrPYwoqd
FUziHyqO1NSXs5zGTrycyTyJvU4pgFAuC1k42Jg2j5lF6vZl5mQt5iOmnlJU2LY6
0NfOqVzAijxijGqHiKMm2hPHFAdF0T33hAkrL+3tbGnzcvdP4ZA5FE5OQZ1EyVYa
wQI0OvxEBAgPAiCogOMpDJ4+o51FjNDB3PrIhLEckxl/8T2MymUulPdZRT8y+A3q
QauVqdANFpuaD9GdCOzt6DlJRCLcPZE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:22 2025 by rpki-client