Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa
File:                     5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa (raw, json)
Hash identifier:          ZGyRgIIo8brvOpgCFfQKL9PguEK44YqvbdwCZG7VOp4=
Subject key identifier:   9A:68:D5:C3:B2:32:DF:1E:89:40:3D:90:AD:7E:B0:7E:09:D2:B0:B7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847643B73F3A8680FEC52383000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     19527
IP address blocks:        34.1.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:73:f3:a8:68:0f:ec:52:38:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=260dec0c-41bc-4f50-a75f-b426693fb487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:cf:b9:58:6e:62:05:43:77:37:1a:1e:72:
                    be:39:df:7a:f6:26:e1:a3:11:7b:44:db:20:4c:45:
                    45:28:fb:96:80:42:14:b5:fb:bc:a2:bb:d9:6b:72:
                    70:7c:7a:c0:06:f4:fe:b9:1f:88:04:c4:14:2a:aa:
                    91:85:ac:61:57:4f:b4:1a:52:43:7d:e5:ce:4c:e7:
                    38:e8:98:88:60:cd:9c:a2:44:5a:e3:44:17:68:fa:
                    6c:e8:2f:62:e3:2c:59:57:80:66:a7:f8:f1:20:b5:
                    1b:a1:b2:00:b2:63:98:bd:af:6a:ff:e7:16:0f:94:
                    9c:6b:66:6e:71:a8:09:ab:ae:5e:33:4c:b5:41:17:
                    f2:42:5e:5a:61:92:bd:45:45:29:0c:14:bc:01:3d:
                    37:8c:44:70:18:da:e5:f8:ee:79:85:b0:2a:fc:1d:
                    82:5b:1b:6e:13:c2:60:3e:dd:ed:67:29:24:06:5f:
                    39:0d:0b:2b:18:78:71:85:2e:db:78:95:2a:a8:28:
                    19:63:e8:37:9e:a9:39:5a:63:7e:c0:6a:0a:3f:23:
                    fb:eb:51:e1:ad:c8:04:c7:58:51:49:bd:6c:89:26:
                    99:19:d9:48:fe:b6:66:bd:d2:95:2a:1a:97:3c:00:
                    ab:cc:de:20:ba:be:35:50:d1:45:11:65:8b:3d:62:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:68:D5:C3:B2:32:DF:1E:89:40:3D:90:AD:7E:B0:7E:09:D2:B0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7b:1e:de:49:5f:6a:a2:7f:5e:a0:a0:0f:fe:32:6c:6b:68:
         da:d1:84:cb:52:b7:58:c0:2e:1c:ec:b7:27:66:79:48:f6:b2:
         d6:e7:a1:73:ef:4d:ff:e4:ef:47:29:e5:37:dd:4f:c0:08:83:
         9d:4d:16:4d:d4:40:61:d8:3c:3f:38:e4:6a:48:75:b2:19:f6:
         f7:db:c5:38:16:dc:7a:ba:34:5a:f2:e1:0e:59:c7:87:74:23:
         6f:82:0e:9f:9c:5d:8e:15:98:81:bd:23:ca:08:fd:42:45:5a:
         9b:8e:d5:e5:2f:be:cc:10:91:c7:e5:ab:ce:d8:c8:6b:e4:21:
         a5:c7:ea:fe:bd:ab:30:74:ef:b7:16:ca:7b:f9:9c:f8:31:ac:
         4c:7a:5b:d0:e2:a7:f0:52:e3:9f:90:de:83:50:bc:61:a7:d9:
         af:d0:bb:34:e2:b9:a3:ec:f6:a5:f1:49:13:73:04:6e:e5:c1:
         36:d2:25:c2:b0:84:27:64:9b:c4:9b:53:e9:de:31:f1:63:6b:
         4f:43:2c:c1:10:f4:29:97:fa:11:9f:8f:0c:64:7b:b2:02:fa:
         ea:54:51:cf:09:91:af:5c:7a:ad:2f:84:da:03:4d:ae:a6:61:
         08:3b:4b:83:e9:60:80:6c:34:ca:d2:33:7a:47:1a:ef:4a:47:
         51:e1:fb:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkO3PzqGgP7FI4MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk
MjYwZGVjMGMtNDFiYy00ZjUwLWE3NWYtYjQyNjY5M2ZiNDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz7PuVhuYgVDdzcaHnK+Od969ibhoxF7RNsg
TEVFKPuWgEIUtfu8orvZa3JwfHrABvT+uR+IBMQUKqqRhaxhV0+0GlJDfeXOTOc4
6JiIYM2cokRa40QXaPps6C9i4yxZV4Bmp/jxILUbobIAsmOYva9q/+cWD5Sca2Zu
cagJq65eM0y1QRfyQl5aYZK9RUUpDBS8AT03jERwGNrl+O55hbAq/B2CWxtuE8Jg
Pt3tZykkBl85DQsrGHhxhS7beJUqqCgZY+g3nqk5WmN+wGoKPyP761HhrcgEx1hR
Sb1siSaZGdlI/rZmvdKVKhqXPACrzN4gur41UNFFEWWLPWJdKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpo1cOyMt8eiUA9kK1+sH4J0rC3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWJlYTIyNDEtNGYwNC0z
NGM4LWJkOGItNWE4ZTQzNTVhNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHd7Ht5JX2qif16goA/+MmxraNrRhMtSt1jALhzstydmeUj2stbnoXPv
Tf/k70cp5TfdT8AIg51NFk3UQGHYPD845GpIdbIZ9vfbxTgW3Hq6NFry4Q5Zx4d0
I2+CDp+cXY4VmIG9I8oI/UJFWpuO1eUvvswQkcflq87YyGvkIaXH6v69qzB077cW
ynv5nPgxrEx6W9Dip/BS45+Q3oNQvGGn2a/QuzTiuaPs9qXxSRNzBG7lwTbSJcKw
hCdkm8SbU+neMfFja09DLMEQ9CmX+hGfjwxke7IC+upUUc8Jka9ceq0vhNoDTa6m
YQg7S4PpYIBsNMrSM3pHGu9KR1Hh+4g=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:39:30 2024 by rpki-client on console-fra.rpki-client.org