Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f4cfe8a-cd46-3c15-8b04-832197799575.roa
File:                     4f4cfe8a-cd46-3c15-8b04-832197799575.roa (raw, json)
Hash identifier:          WaEvb2dOUC1vFJIrvEr6H3ybJTeBDvoOlUQ7uh7xcXo=
Subject key identifier:   EC:39:7A:32:E9:84:1D:56:7D:D6:F8:57:2A:CE:DC:21:27:1D:B8:1A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BE5B329AA0080711BF0B8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f4cfe8a-cd46-3c15-8b04-832197799575.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.71.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:e5:b3:29:aa:00:80:71:1b:f0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=78ab71c1-544a-462a-90b9-0aa46a1a48e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:d7:d5:d9:18:d1:9d:03:c0:bd:9a:20:35:
                    b3:81:b1:f2:2e:d7:46:d0:ec:05:e5:96:a0:ff:b5:
                    6f:06:61:04:67:94:4c:e3:ec:79:85:05:dd:f7:ef:
                    a4:d4:64:ce:93:27:04:45:e0:a9:e1:bd:e2:b0:c1:
                    42:a8:e3:b1:e5:2a:3c:f9:be:f4:5f:ac:fa:a9:a8:
                    cf:14:0d:90:dc:ba:1a:d5:59:87:f2:9d:2e:ba:ef:
                    72:07:2e:14:e2:4d:6a:da:22:57:01:1c:d2:e5:ef:
                    02:e8:a7:3e:7f:22:fc:53:1f:8c:b0:af:93:41:50:
                    ff:9b:a8:29:ac:ad:0a:75:98:cd:6f:e6:3d:e2:d9:
                    0a:bc:cb:d0:a0:c9:28:33:36:6f:05:9f:b4:20:d7:
                    03:19:2e:d8:59:7f:37:d9:38:b6:83:41:ee:69:b5:
                    32:23:70:ca:60:81:e9:ef:e5:d8:0f:4d:e1:0c:18:
                    a2:ce:56:47:c1:9b:9e:2f:68:c6:1c:97:a5:2a:e3:
                    ee:ab:a4:c7:38:a7:de:48:08:37:13:12:bf:ea:5f:
                    55:18:54:86:7b:3f:e2:89:1b:48:52:43:80:af:53:
                    5c:98:a3:ed:79:d0:d6:1b:1d:22:ea:34:ee:a3:d7:
                    49:81:f9:e7:69:42:e1:9f:98:be:23:f9:1f:d4:4e:
                    59:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:39:7A:32:E9:84:1D:56:7D:D6:F8:57:2A:CE:DC:21:27:1D:B8:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f4cfe8a-cd46-3c15-8b04-832197799575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.71.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0b:e7:97:67:e9:a4:52:94:ca:78:ca:b1:61:8b:81:f3:5d:
         26:54:b0:40:ef:d1:31:8d:cd:98:fb:ad:ed:29:26:b1:d0:e6:
         93:94:6e:11:6d:bb:8c:82:9d:cc:77:7d:9f:96:9e:a3:84:6b:
         eb:07:83:81:50:6a:22:b9:05:82:b4:23:8d:85:a1:c2:5a:47:
         7d:1a:86:c9:83:03:13:f9:e8:9f:9e:8a:5d:28:06:6c:19:c1:
         a3:b4:22:3e:c6:c3:23:49:15:d2:a6:7f:6d:c8:c8:d3:ff:14:
         7a:96:42:61:90:90:0a:6e:da:11:30:c5:5d:f7:15:76:d4:0d:
         9a:60:d8:b4:49:95:b2:11:1c:f1:5c:e5:43:d9:69:fd:81:78:
         63:da:62:b8:38:ca:1d:5e:37:39:58:00:dd:95:c4:c1:c5:41:
         ea:d5:26:13:78:6f:4a:25:ec:7d:02:b9:e1:bc:2b:46:dd:4d:
         16:0b:df:70:79:28:5a:76:2c:27:b2:4e:5b:eb:a8:69:18:89:
         37:85:cb:8d:34:18:df:35:38:b3:97:eb:72:a7:02:bb:2b:47:
         f0:1d:64:ed:61:16:1b:09:93:40:53:61:74:04:93:b6:25:89:
         be:2a:0c:4a:7b:53:15:a8:68:4e:3b:59:37:b0:a6:4c:95:5a:
         7f:96:e8:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+WzKaoAgHEb8LgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NzhhYjcxYzEtNTQ0YS00NjJhLTkwYjktMGFhNDZhMWE0OGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRHX1dkY0Z0DwL2aIDWzgbHyLtdG0OwF5Zag
/7VvBmEEZ5RM4+x5hQXd9++k1GTOkycEReCp4b3isMFCqOOx5So8+b70X6z6qajP
FA2Q3Loa1VmH8p0uuu9yBy4U4k1q2iJXARzS5e8C6Kc+fyL8Ux+MsK+TQVD/m6gp
rK0KdZjNb+Y94tkKvMvQoMkoMzZvBZ+0INcDGS7YWX832Ti2g0HuabUyI3DKYIHp
7+XYD03hDBiizlZHwZueL2jGHJelKuPuq6THOKfeSAg3ExK/6l9VGFSGez/iiRtI
UkOAr1NcmKPtedDWGx0i6jTuo9dJgfnnaULhn5i+I/kf1E5ZZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOw5ejLphB1Wfdb4VyrO3CEnHbgaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGY0Y2ZlOGEtY2Q0Ni0z
YzE1LThiMDQtODMyMTk3Nzk5NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIsL55dn6aRSlMp4yrFhi4HzXSZUsEDv0TGNzZj7re0pJrHQ5pOUbhFt
u4yCncx3fZ+WnqOEa+sHg4FQaiK5BYK0I42FocJaR30ahsmDAxP56J+eil0oBmwZ
waO0Ij7GwyNJFdKmf23IyNP/FHqWQmGQkApu2hEwxV33FXbUDZpg2LRJlbIRHPFc
5UPZaf2BeGPaYrg4yh1eNzlYAN2VxMHFQerVJhN4b0ol7H0CueG8K0bdTRYL33B5
KFp2LCeyTlvrqGkYiTeFy400GN81OLOX63KnArsrR/AdZO1hFhsJk0BTYXQEk7Yl
ib4qDEp7UxWoaE47WTewpkyVWn+W6Ac=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:11 2025 by rpki-client