Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa
File:                     7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa (raw, json)
Hash identifier:          Y2cXSEfqoBlT0yasqEe/jtARLEM/61B4RQrMxQzuvD8=
Subject key identifier:   D6:AE:C0:39:E5:43:F6:3D:09:5E:F5:B0:A9:C7:CD:CC:67:66:C6:5D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C58181B009CF0064EFEEE600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        34.121.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:81:b0:09:cf:00:64:ef:ee:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=04588797-b7d0-4804-b844-777be84fa033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:a6:f1:6b:4b:23:14:58:36:aa:59:12:c7:
                    25:d6:40:00:07:29:0b:09:8d:0c:ff:82:99:34:ff:
                    00:a3:17:72:aa:7d:aa:7d:a7:1d:ea:e9:e2:c5:b2:
                    43:76:df:ae:ee:99:39:4b:4e:33:43:be:52:2f:f6:
                    ec:1d:b3:c7:fc:4e:85:ff:ac:0e:75:d2:77:a6:a4:
                    ab:14:32:e9:02:d0:79:6c:b1:ca:44:c0:1d:97:44:
                    bc:8f:cd:c1:8d:09:5b:ae:1e:1b:90:72:11:e4:58:
                    89:d0:00:76:26:1a:a6:f5:c6:7f:5b:08:10:b6:af:
                    16:ff:1d:8f:b6:27:6e:2a:6a:ae:a8:83:40:c4:b9:
                    29:86:b6:b0:9a:18:c0:4d:3c:f0:45:e4:9a:f6:67:
                    11:1f:98:4e:1c:cd:2d:f6:85:47:16:ad:33:68:d5:
                    f9:b4:a3:1d:f1:7f:47:48:0f:31:d9:a5:17:e0:b1:
                    60:62:66:81:b0:61:b1:d0:fa:56:7b:44:5f:3f:09:
                    01:e2:0b:d6:52:73:b6:9a:32:fa:8c:36:9e:ad:27:
                    93:40:46:dc:f6:83:70:e1:b5:09:5d:d1:83:89:31:
                    33:b3:e2:a7:7b:c0:57:af:99:ab:22:32:d0:10:ea:
                    a7:b7:a4:5a:74:0a:63:12:cb:77:8f:8b:5c:56:80:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AE:C0:39:E5:43:F6:3D:09:5E:F5:B0:A9:C7:CD:CC:67:66:C6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.121.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:86:3b:2b:1f:66:e8:73:65:8c:9f:38:48:ed:c6:46:fa:f6:
         a1:69:57:bc:52:8f:bd:60:b6:05:94:30:ba:42:16:3f:65:f2:
         21:eb:4f:4d:6a:47:af:d1:00:77:bb:dc:b9:91:a1:d7:30:c5:
         d9:be:d7:3e:af:02:bd:59:21:98:cf:ee:7a:b6:52:9b:70:f5:
         6e:85:95:b3:ed:21:21:17:0e:2e:08:cd:65:2f:2f:9f:82:37:
         ab:7b:0e:6b:a1:d2:b9:35:96:92:71:56:d9:02:d2:66:62:72:
         91:59:b7:d4:65:11:25:78:63:59:9b:08:a8:c4:f1:91:49:14:
         a2:7e:b9:4f:e0:0f:cf:56:fd:ee:5e:0b:34:8e:29:17:75:a2:
         4b:42:c6:61:6f:cb:c7:53:3f:76:a0:af:96:73:86:53:64:2a:
         ba:b6:63:c3:fd:80:9e:19:b8:cb:8d:04:ec:36:d4:1c:97:25:
         f4:45:84:b2:5d:72:dc:ed:64:ff:82:56:99:1b:03:7c:05:59:
         25:4f:63:23:21:bf:65:e0:6d:a2:85:e7:a7:5d:c1:33:6f:48:
         e1:0e:53:8d:40:01:a7:23:ff:18:0b:65:d8:fa:99:b1:7a:94:
         c1:92:24:08:bb:eb:6f:99:46:13:37:6f:58:71:bb:e5:2b:be:
         aa:20:70:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYGwCc8AZO/u5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDQ1ODg3OTctYjdkMC00ODA0LWI4NDQtNzc3YmU4NGZhMDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm2m8WtLIxRYNqpZEscl1kAABykLCY0M/4KZ
NP8Aoxdyqn2qfacd6unixbJDdt+u7pk5S04zQ75SL/bsHbPH/E6F/6wOddJ3pqSr
FDLpAtB5bLHKRMAdl0S8j83BjQlbrh4bkHIR5FiJ0AB2Jhqm9cZ/WwgQtq8W/x2P
tiduKmquqINAxLkphrawmhjATTzwReSa9mcRH5hOHM0t9oVHFq0zaNX5tKMd8X9H
SA8x2aUX4LFgYmaBsGGx0PpWe0RfPwkB4gvWUnO2mjL6jDaerSeTQEbc9oNw4bUJ
XdGDiTEzs+Kne8BXr5mrIjLQEOqnt6RadApjEst3j4tcVoBAyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNauwDnlQ/Y9CV71sKnHzcxnZsZdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2Y4OGQyZDgtMWQ4MS0z
MmMxLTk0ZDAtOTUwNjJiN2M1YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCGOysfZuhzZYyfOEjtxkb69qFpV7xSj71gtgWUMLpCFj9l8iHrT01q
R6/RAHe73LmRodcwxdm+1z6vAr1ZIZjP7nq2Uptw9W6FlbPtISEXDi4IzWUvL5+C
N6t7Dmuh0rk1lpJxVtkC0mZicpFZt9RlESV4Y1mbCKjE8ZFJFKJ+uU/gD89W/e5e
CzSOKRd1oktCxmFvy8dTP3agr5ZzhlNkKrq2Y8P9gJ4ZuMuNBOw21ByXJfRFhLJd
ctztZP+CVpkbA3wFWSVPYyMhv2XgbaKF56ddwTNvSOEOU41AAacj/xgLZdj6mbF6
lMGSJAi762+ZRhM3b1hxu+UrvqogcEY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:30:16 2025 by rpki-client