Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66ebec59-eced-3b68-9dca-582dee546885.roa
File:                     66ebec59-eced-3b68-9dca-582dee546885.roa (raw, json)
Hash identifier:          m25E9z1UlcpY5ljhYZZirZ+RB7eISpvQE92l6xvK378=
Subject key identifier:   85:3E:91:B3:4E:2A:A9:62:16:60:58:47:6D:B5:B4:04:6F:BF:34:A2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C582253C23CBA4D4E15A3780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66ebec59-eced-3b68-9dca-582dee546885.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     11344
IP address blocks:        34.104.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:25:3c:23:cb:a4:d4:e1:5a:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=bd123efd-1ba1-47b8-a0c4-688a769f7223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0d:47:56:96:b0:f3:c4:84:3a:1f:5a:0d:01:
                    93:40:1a:bf:c8:4b:d9:f1:98:e9:62:d6:7c:32:95:
                    51:36:bd:88:1e:73:8c:86:50:f6:11:b8:75:28:f1:
                    f9:a7:61:af:05:64:bf:69:87:6c:98:61:d1:89:13:
                    b0:9c:5a:48:7a:cb:a5:d5:b7:08:d9:cf:47:f4:1d:
                    b0:71:f5:16:91:9a:5b:ae:e5:3e:cd:42:61:5c:6e:
                    61:43:43:6d:88:71:3c:ea:e8:89:69:ec:1a:0f:ed:
                    b6:b4:42:cd:3d:a3:2a:4b:f0:84:3e:b3:67:fd:23:
                    ea:a4:28:21:b7:78:16:52:f6:32:e4:23:a0:62:8e:
                    40:40:16:fc:c8:28:c6:04:b7:08:7f:94:03:65:01:
                    0a:51:b7:46:c8:ae:0c:0a:38:18:29:13:cb:0e:57:
                    ee:ff:ea:04:2a:cb:19:99:a3:67:40:ae:e1:13:20:
                    7a:82:b3:08:bd:97:e8:99:fd:8f:a4:85:37:bd:04:
                    d0:70:e8:f4:41:36:36:99:54:01:e3:3b:ef:b6:c9:
                    d0:aa:d3:38:8c:98:15:05:f6:bc:cd:4d:5f:18:92:
                    91:fc:28:d7:02:27:da:1d:80:11:f2:ca:0a:a6:d9:
                    4b:34:ab:c7:d0:27:b3:46:bb:01:83:2a:0c:39:60:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:91:B3:4E:2A:A9:62:16:60:58:47:6D:B5:B4:04:6F:BF:34:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66ebec59-eced-3b68-9dca-582dee546885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:25:3c:1d:d6:b4:0c:12:aa:a5:14:50:c7:75:13:e9:05:07:
         26:cb:19:d0:b2:8f:e8:77:19:e5:60:16:38:77:bb:f9:72:03:
         63:35:49:2e:73:d5:2b:c3:a6:52:da:28:bb:47:55:82:04:e9:
         c5:78:c8:dd:71:6c:8c:e5:2d:6a:29:c3:6b:b1:31:8f:d4:0f:
         27:ec:c4:a2:77:50:15:b7:9d:f0:c8:3e:b5:89:e7:12:fd:15:
         9b:c7:5a:bc:0a:49:53:bf:4a:aa:00:a1:be:63:ef:09:f6:2c:
         70:25:aa:0c:bd:61:d3:4e:39:99:1f:0b:e4:7c:af:81:e9:f6:
         ae:b5:79:d5:8b:1a:8b:ed:4c:3c:f3:c3:24:94:d1:20:73:e1:
         c0:33:92:63:df:f3:a6:b7:be:be:50:8e:25:c9:64:ac:cc:df:
         0e:3a:f9:07:7e:f6:dc:07:f4:1f:3a:de:9a:71:f4:e0:bd:aa:
         28:cf:cf:42:d8:13:f2:6a:3e:36:52:e8:19:87:2b:57:d9:3c:
         ca:ed:0a:6d:73:17:4e:b6:7f:ef:26:25:8b:55:e6:20:c2:c4:
         47:71:da:d5:05:65:c8:10:7d:f1:a1:6e:ce:1f:ed:1a:a5:ad:
         f5:21:d6:d6:2b:a6:08:0d:0c:37:e8:ab:78:20:e8:2c:c7:15:
         d6:f3:02:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiU8I8uk1OFaN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YmQxMjNlZmQtMWJhMS00N2I4LWEwYzQtNjg4YTc2OWY3MjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA1HVpaw88SEOh9aDQGTQBq/yEvZ8ZjpYtZ8
MpVRNr2IHnOMhlD2Ebh1KPH5p2GvBWS/aYdsmGHRiROwnFpIesul1bcI2c9H9B2w
cfUWkZpbruU+zUJhXG5hQ0NtiHE86uiJaewaD+22tELNPaMqS/CEPrNn/SPqpCgh
t3gWUvYy5COgYo5AQBb8yCjGBLcIf5QDZQEKUbdGyK4MCjgYKRPLDlfu/+oEKssZ
maNnQK7hEyB6grMIvZfomf2PpIU3vQTQcOj0QTY2mVQB4zvvtsnQqtM4jJgVBfa8
zU1fGJKR/CjXAifaHYAR8soKptlLNKvH0CezRrsBgyoMOWDB+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIU+kbNOKqliFmBYR221tARvvzSiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjZlYmVjNTktZWNlZC0z
YjY4LTlkY2EtNTgyZGVlNTQ2ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFolPB3WtAwSqqUUUMd1E+kFBybLGdCyj+h3GeVgFjh3u/lyA2M1SS5z
1SvDplLaKLtHVYIE6cV4yN1xbIzlLWopw2uxMY/UDyfsxKJ3UBW3nfDIPrWJ5xL9
FZvHWrwKSVO/SqoAob5j7wn2LHAlqgy9YdNOOZkfC+R8r4Hp9q61edWLGovtTDzz
wySU0SBz4cAzkmPf86a3vr5QjiXJZKzM3w46+Qd+9twH9B863ppx9OC9qijPz0LY
E/JqPjZS6BmHK1fZPMrtCm1zF062f+8mJYtV5iDCxEdx2tUFZcgQffGhbs4f7Rql
rfUh1tYrpggNDDfoq3gg6CzHFdbzAjk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:02:49 2025 by rpki-client