Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333db147-456f-3917-81c7-5b38038f2cd8.roa
File:                     333db147-456f-3917-81c7-5b38038f2cd8.roa (raw, json)
Hash identifier:          d+NYZu/HvjumMd1iZJn1J1GrilxPYFh0qfTM7ZG7KcU=
Subject key identifier:   5E:F2:62:9B:FE:A1:FF:66:28:99:1D:1A:53:E9:5D:D3:33:80:B4:63
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F53F10BCE5A0DFC60FC280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333db147-456f-3917-81c7-5b38038f2cd8.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.94.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:3f:10:bc:e5:a0:df:c6:0f:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=b90527ca-8d60-4f2c-bed7-cb054d2f10ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:95:0d:52:29:76:63:18:8b:c4:ff:4a:e9:1d:
                    f2:0e:c6:e5:c5:73:4d:af:53:a4:9c:51:30:de:fa:
                    99:fd:42:9e:8a:02:74:63:e0:62:f3:38:1f:3c:4b:
                    db:ed:29:45:45:2a:e8:49:fe:be:7b:93:f0:fc:af:
                    79:7b:80:df:25:84:80:9d:91:37:1f:02:9a:f8:9e:
                    dc:56:09:90:e4:a2:bc:a3:c8:6b:1b:94:0b:16:80:
                    ef:a4:cf:8a:97:b1:3d:e7:f8:ac:b3:c1:c5:b4:68:
                    d7:b5:cd:8f:40:83:9c:67:82:08:42:55:17:a2:ac:
                    80:56:11:e5:55:95:76:c0:4c:7d:f6:c3:86:26:9c:
                    b2:78:09:76:a9:71:3a:1e:34:ab:47:11:99:50:52:
                    b2:bb:3b:75:35:c1:7c:66:9b:bb:56:0d:6e:f2:5c:
                    05:37:eb:28:07:f7:14:67:34:e4:d3:e5:5b:46:1d:
                    67:fe:a4:a7:52:61:2d:eb:bb:91:15:29:3f:d6:bf:
                    b9:95:4a:03:12:5c:1e:f4:03:13:b5:f4:f8:09:89:
                    a0:e7:63:8c:1d:dd:5f:3a:d3:7b:ec:c4:0b:f3:26:
                    ae:b7:a5:ee:cb:0e:5e:8d:2e:f0:57:23:87:f0:ad:
                    01:3f:fc:a6:48:13:fb:cc:e9:4b:1b:a9:ff:e4:ff:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F2:62:9B:FE:A1:FF:66:28:99:1D:1A:53:E9:5D:D3:33:80:B4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/333db147-456f-3917-81c7-5b38038f2cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.94.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:30:a3:19:66:71:97:29:41:9a:4a:e4:a2:d3:72:4e:e0:1a:
         51:1d:b9:bf:a2:ce:ea:72:01:d4:c6:15:5a:0f:9f:e8:f3:9a:
         59:c6:73:1f:15:88:68:fe:1d:eb:77:7f:3a:d7:4e:e1:ff:07:
         77:b4:da:aa:ad:60:4a:b8:a1:91:2d:d9:0b:c1:82:5b:b8:7d:
         89:e1:6b:a2:6c:42:d6:93:da:08:81:e4:39:fe:d6:fe:ae:af:
         74:50:e4:7c:92:fc:e1:cc:2f:4b:b9:1b:3c:12:8a:b1:8e:fa:
         e5:ff:75:5c:3e:17:fd:bf:d7:ef:8b:51:e0:e1:f0:20:dd:46:
         42:85:85:60:1b:d5:9e:cb:e9:ac:45:25:dd:88:0e:61:77:a5:
         b7:ba:4b:9e:4e:e2:ec:52:87:2e:b4:68:ec:74:e8:71:98:17:
         74:51:91:0c:26:c2:9a:34:4a:a7:02:a4:f4:b3:89:1e:ec:4f:
         cb:b7:c3:b6:12:a2:d7:a5:e4:67:be:ae:84:b6:75:f9:98:75:
         7e:4b:ab:5e:81:0d:9b:ac:4c:98:27:39:f0:b1:27:a9:bd:fd:
         8b:0e:a9:56:41:77:08:31:05:62:7d:75:3e:19:6f:fd:99:3b:
         ea:82:22:3c:43:46:d8:7d:db:07:d1:6d:f8:5f:4e:9e:0e:b6:
         4a:e1:2d:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9T8QvOWg38YPwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
YjkwNTI3Y2EtOGQ2MC00ZjJjLWJlZDctY2IwNTRkMmYxMGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZUNUil2YxiLxP9K6R3yDsblxXNNr1OknFEw
3vqZ/UKeigJ0Y+Bi8zgfPEvb7SlFRSroSf6+e5Pw/K95e4DfJYSAnZE3HwKa+J7c
VgmQ5KK8o8hrG5QLFoDvpM+Kl7E95/iss8HFtGjXtc2PQIOcZ4IIQlUXoqyAVhHl
VZV2wEx99sOGJpyyeAl2qXE6HjSrRxGZUFKyuzt1NcF8Zpu7Vg1u8lwFN+soB/cU
ZzTk0+VbRh1n/qSnUmEt67uRFSk/1r+5lUoDElwe9AMTtfT4CYmg52OMHd1fOtN7
7MQL8yaut6Xuyw5ejS7wVyOH8K0BP/ymSBP7zOlLG6n/5P+QZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7yYpv+of9mKJkdGlPpXdMzgLRjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzMzZGIxNDctNDU2Zi0z
OTE3LTgxYzctNWIzODAzOGYyY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQwoxlmcZcpQZpK5KLTck7gGlEdub+izupyAdTGFVoPn+jzmlnGcx8V
iGj+Het3fzrXTuH/B3e02qqtYEq4oZEt2QvBglu4fYnha6JsQtaT2giB5Dn+1v6u
r3RQ5HyS/OHML0u5GzwSirGO+uX/dVw+F/2/1++LUeDh8CDdRkKFhWAb1Z7L6axF
Jd2IDmF3pbe6S55O4uxShy60aOx06HGYF3RRkQwmwpo0SqcCpPSziR7sT8u3w7YS
otel5Ge+roS2dfmYdX5Lq16BDZusTJgnOfCxJ6m9/YsOqVZBdwgxBWJ9dT4Zb/2Z
O+qCIjxDRth92wfRbfhfTp4OtkrhLRk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:10 2024 by rpki-client on console-fra.rpki-client.org