Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c14869f-f2f6-3dbf-a70e-6227adbefbe4.roa
File:                     4c14869f-f2f6-3dbf-a70e-6227adbefbe4.roa (raw, json)
Hash identifier:          JfAYYrUsFol8jW/fDdsz91Y10yB8YBA0aCEg+rvqfWE=
Subject key identifier:   1F:2E:16:E3:58:A8:15:93:28:F6:AE:C9:B5:72:67:F1:41:07:BB:1A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F50E4E51230D875C878680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c14869f-f2f6-3dbf-a70e-6227adbefbe4.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.140.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:0e:4e:51:23:0d:87:5c:87:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=057e2df7-ea79-4701-a328-adbdf808adcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:82:9a:d8:d6:16:ed:7b:8d:87:d4:bc:dc:9d:
                    de:62:11:bb:58:5e:0e:1b:f8:9a:6d:3f:56:45:39:
                    32:22:a2:3f:83:07:74:9f:0a:fa:db:92:e2:ca:73:
                    a7:7f:2a:6e:a8:ef:09:73:da:e7:26:51:75:13:65:
                    cd:b8:fb:c8:7b:fe:8e:fd:5b:a0:9a:f3:38:3b:e7:
                    3b:df:57:cd:52:4e:0a:53:07:75:47:55:b3:9d:33:
                    e2:c0:4c:5f:1a:57:d8:4d:0b:30:d5:4d:52:bc:3b:
                    c0:d7:fd:70:2a:31:91:0d:be:22:4f:5d:ad:19:61:
                    ce:eb:25:48:fa:8a:53:27:d7:99:82:b4:93:ce:0f:
                    08:ef:aa:02:0c:f1:4f:a4:59:47:06:0c:12:f0:53:
                    66:e2:ee:22:b4:ef:65:a9:19:ad:f3:73:e1:c9:04:
                    53:f1:2c:48:ac:a0:25:fb:7e:74:ad:aa:14:1f:2e:
                    bd:57:ce:80:c2:22:f3:af:7c:53:24:cf:c7:3d:ab:
                    76:2b:0d:58:e5:bd:cf:70:56:bb:40:5c:44:b9:f2:
                    de:aa:f1:85:3a:51:df:64:f0:ba:d1:e2:2c:59:3c:
                    78:6a:de:65:e5:e6:c3:a0:83:b9:c6:a8:dc:07:67:
                    68:72:9e:fc:bb:21:c4:0c:71:46:1d:51:65:1d:02:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2E:16:E3:58:A8:15:93:28:F6:AE:C9:B5:72:67:F1:41:07:BB:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c14869f-f2f6-3dbf-a70e-6227adbefbe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:75:d8:fb:6a:f9:14:be:d5:d3:cb:34:9d:89:b6:9e:88:e8:
         35:fe:27:74:8a:f5:1c:0c:76:a2:98:38:e4:b7:d2:1c:1b:be:
         3e:46:c6:03:26:e9:3d:ac:25:94:7f:f6:57:d0:97:f6:ac:ca:
         ea:0a:09:fe:0b:cb:fa:d9:e8:a7:97:b1:ae:14:fd:b0:ff:5b:
         ec:fd:7c:f4:e8:a5:b7:72:20:44:84:29:25:84:03:4a:90:9d:
         c1:47:8b:08:87:fe:26:26:a6:60:a4:99:07:40:1f:4a:02:a7:
         d0:61:39:7d:c1:83:3c:3c:df:92:62:8d:ab:22:5e:cd:b7:db:
         ab:44:e1:10:5b:a7:41:73:df:c5:05:e1:d3:b2:fa:75:fa:27:
         e3:ec:5e:90:c3:60:fd:ac:f1:2d:1a:a1:6d:fb:ec:70:4f:5b:
         ec:06:ca:43:1e:59:1f:33:0a:db:59:1d:ac:c5:85:0d:2c:52:
         12:2c:cc:cb:02:83:6a:70:f1:c7:b6:ea:e6:ca:22:9b:54:e8:
         94:b3:0f:6b:b9:a5:f7:a1:e1:e4:08:7d:68:71:35:4d:9d:41:
         78:f7:6b:f6:23:31:74:db:db:30:76:38:2c:f6:43:ad:24:0b:
         ee:94:56:79:a3:67:1a:90:49:de:63:d4:19:84:78:4e:91:21:
         55:fd:3f:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9Q5OUSMNh1yHhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MDU3ZTJkZjctZWE3OS00NzAxLWEzMjgtYWRiZGY4MDhhZGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYKa2NYW7XuNh9S83J3eYhG7WF4OG/iabT9W
RTkyIqI/gwd0nwr625LiynOnfypuqO8Jc9rnJlF1E2XNuPvIe/6O/VugmvM4O+c7
31fNUk4KUwd1R1WznTPiwExfGlfYTQsw1U1SvDvA1/1wKjGRDb4iT12tGWHO6yVI
+opTJ9eZgrSTzg8I76oCDPFPpFlHBgwS8FNm4u4itO9lqRmt83PhyQRT8SxIrKAl
+350raoUHy69V86AwiLzr3xTJM/HPat2Kw1Y5b3PcFa7QFxEufLeqvGFOlHfZPC6
0eIsWTx4at5l5ebDoIO5xqjcB2docp78uyHEDHFGHVFlHQLZJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8uFuNYqBWTKPauybVyZ/FBB7saMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGMxNDg2OWYtZjJmNi0z
ZGJmLWE3MGUtNjIyN2FkYmVmYmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoxQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIB12Ptq+RS+1dPLNJ2Jtp6I6DX+J3SK9RwMdqKYOOS30hwbvj5GxgMm
6T2sJZR/9lfQl/asyuoKCf4Ly/rZ6KeXsa4U/bD/W+z9fPTopbdyIESEKSWEA0qQ
ncFHiwiH/iYmpmCkmQdAH0oCp9BhOX3Bgzw835JijasiXs2326tE4RBbp0Fz38UF
4dOy+nX6J+PsXpDDYP2s8S0aoW377HBPW+wGykMeWR8zCttZHazFhQ0sUhIszMsC
g2pw8ce26ubKIptU6JSzD2u5pfeh4eQIfWhxNU2dQXj3a/YjMXTb2zB2OCz2Q60k
C+6UVnmjZxqQSd5j1BmEeE6RIVX9Pxw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:18 2024 by rpki-client on console-fra.rpki-client.org